Apache Skywalking

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-30778 Apr 15, 10:54 Maven HIGH PATCH GHSA This Week

Unauthenticated access to Apache SkyWalking 9.7.0 to 10.3.0 allows remote attackers to retrieve sensitive MySQL/PostgreSQL configuration details through the /debugging/config/dump endpoint. No active exploitation or public exploit code is known, though the attack is trivial and automatable. The low EPSS score (0.02%) indicates minimal real-world exploitation likelihood.

Apache Information Disclosure PostgreSQL Apache Skywalking Apache Software Foundation

NVD VulDB

CVSS 3.1

7.5

EPSS

0.0%

CVE-2026-30778 Maven

EPSS 0% CVSS 7.5

HIGH PATCH This Week

Unauthenticated access to Apache SkyWalking 9.7.0 to 10.3.0 allows remote attackers to retrieve sensitive MySQL/PostgreSQL configuration details through the /debugging/config/dump endpoint. No active exploitation or public exploit code is known, though the attack is trivial and automatable. The low EPSS score (0.02%) indicates minimal real-world exploitation likelihood.

Apache Information Disclosure PostgreSQL +2

NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy