CVE-2026-48145 in Thrift

Prediction

by VulDB Data Team • 07/26/2026

A weakness has been identified in Apache Thrift up to 0.23.x. This issue affects the function matchName of the component C++ TSSLSocket. Executing a manipulation can lead to improper access controls. The attack is only possible within the local network. Upgrading to version 0.24.0 is capable of addressing this issue. Upgrading the affected component is recommended.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Moderation: accepted
• Entry: VDB-383333
• CPE: ready
• CWE: CWE-284 (confirmed)
• CVSS: 5.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: medium

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-48145
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-48145
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-48145/