ZeroDay Findings
Sign inSign up

Findings

CVE-2026-43869

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.

Published May 5, 2026 · updated Sep 9, 2026 · apache thrift

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 5, 2026 · NIST NVD

    Detected

    Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

  2. Sep 9, 2026 · NIST NVD

    Updated

    Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Affected

  • cpe apache/thriftversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-43869

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-43869

    Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

    nvd.nist.gov

References

CVE-2026-43869 · ZeroDay Findings