Skip to content
Threat Feed
Subscribe

Product

Thrift

2 briefs RSS
medium advisory

Detection of Unauthorized Apache Thrift RPC Invocations from External Networks

Detection logic targeting unauthorized Apache Thrift RPC method invocations from external IP addresses to identify exposed internal microservices or potential exploitation of data platforms.

Thrift network-security initial-access microservices
1r 1t 1c
high threat

Multiple Vulnerabilities Identified in Apache Thrift

Multiple vulnerabilities, including decompression bombs (CVE-2026-48586, CVE-2026-49158), an integer overflow (CVE-2026-55969), and a heap out-of-bounds read (CVE-2026-58023), affect Apache Thrift prior to version 0.24.0, potentially leading to denial of service, memory corruption, or arbitrary code execution, and require immediate patching.

exploited Apache Thrift +1 vulnerability apache library deserialization denial-of-service
4c updated