Live › vulnerability › CVE-2024-27348
Go to dashboardApache HugeGraph-Server, a graph database server, has an improper access control flaw that lets a remote attacker run arbitrary code. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apache HugeGraph-Server | vendor | – | – |
| apache hugegraph | vendor | >= 1.0.0, < 1.3.0 | 1.3.0 |
Unknown from the sources.
Apply the mitigations from the Apache vendor advisory, or stop using the product if no mitigation exists (per CISA required action); the fixed version is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11
Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2024-27348")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.