VendorsApachenutchany version
Vulnerabilities

Apache Nutch any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

4CVEs
CVE-2026-41871
Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)
Published 2026-09-09 · Analyzed
9.8EPSS 0.007
CVE-2021-23901
An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser
Published 2021-01-25 · Modified
9.1EPSS 0.044
CVE-2026-41869
Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)
Published 2026-09-09 · Analyzed
9.1EPSS 0.007
CVE-2026-41870
Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)
Published 2026-09-09 · Analyzed
8.8EPSS 0.007