Apache Superset

Name: Apache Superset
Brand: Apache

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

1critical1high15medium0low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-23980US	medium6.5	0.71% (53rd)	Exploit	6.0.0	2026-02-24	2 versions
CVE-2024-55633US	medium6.5OT elevated	2.81% (86th)	—	4.1.0	2024-12-12	< 4.1.0
CVE-2025-27696US	high8.8OT elevated	1.30% (70th)	—	4.1.2	2025-05-13	< 4.1.2
CVE-2024-53948US	medium5.3	0.85% (58th)	—	4.1.0	2024-12-09	< 4.1.0
CVE-2024-53947US	critical9.8	0.84% (58th)	—	4.1.0	2024-12-09	< 4.1.0
CVE-2025-48912US	medium6.5	0.79% (56th)	—	4.1.2	2025-05-30	< 4.1.2
CVE-2025-55672US	medium5.4	0.74% (54th)	—	4.1.3.post1	2025-08-14	2 versions
CVE-2024-53949US	medium6.5OT elevated	0.72% (54th)	—	4.1.0	2024-12-09	< 4.1.0
CVE-2026-23969US	medium6.5	0.70% (53rd)	—	4.1.2	2026-02-24	< 4.1.2
CVE-2025-55674US	medium6.5	0.69% (53rd)	—	4.1.3.post1	2025-08-14	2 versions
CVE-2026-23985US	medium6.5	0.65% (51st)	—	6.0.0	2026-07-30	< 6.0.0
CVE-2025-55675US	medium6.5	0.60% (49th)	—	4.1.3.post1	2025-08-14	2 versions
CVE-2025-55673US	medium4.3	0.57% (47th)	—	4.1.3.post1	2025-08-14	< 4.1.3.post1
CVE-2026-23981US	medium4.3	0.56% (46th)	—	6.0.0	2026-07-30	< 6.0.0
CVE-2026-23982US	medium6.5OT elevated	0.51% (44th)	—	6.0.0	2026-02-24	2 versions
CVE-2026-23983US	medium6.5	0.47% (41st)	—	4.1.2	2026-02-24	2 versions
CVE-2026-23984US	medium6.5OT elevated	0.41% (35th)	—	6.0.0	2026-02-24	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-285Improper Authorization5 CVEs
CWE-863Incorrect Authorization5 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.