As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-41871: Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)
CVE-2026-41871 affects Apache Nutch versions 1.10 through 1.22 and involves missing authorization controls and unsafe reflection in the Nutch REST application programming interface (API). An unauthenticated attacker could exploit externally-controlled input to select and execute arbitrary classes or code through the Nutch Server. The vulnerability carries important severity, and Apache recommends upgrading to version 1.23, which removes the Nutch Server entirely.
Why it matters: Organizations running Apache Nutch 1.10 through 1.22 face unauthenticated remote code execution risk and must upgrade to 1.23 or implement access controls immediately.
- Source published
- First seen by Cybersecurity Tracker