CyberSIXT Search
Apache product

CouchDB

← All Apache products

No CISA KEV deadline is open. CISA last added a CouchDB CVE on 25 Aug 2022.

Tracked since 21 Oct · latest article Wed 21 Oct · RSS

Added to KEV · 90 days
0
of 1 in the full CISA catalogue · all time
High exploit odds · current
0
EPSS top 5%, not in KEV

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2022-24706not in CyberSIXT coverageCouchDB25 Aug 2022Deadline passed 15 Sep 2022

Coverage

1 article · all timeFull timeline

One article so far, 21 Oct. A pattern appears once more outlets cover CouchDB.

1
  1. Critical CouchDB Flaw Lets Admins Run Shell Commands, Apache WarnsSecurityOnline

All CVEs in coverage

5
CVE-2026-90797Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_sessionCVSS7.7High–Not in KEV0.7%EPSS1article
CVE-2026-90799Apache CouchDB: Atom-table exhaustion in _changes sequences and _search bookmarks with specially crafted sequence valuesCVSS1.3Low–Not in KEV0.6%EPSS1article
CVE-2026-90800Apache CouchDB: Auth bypass in prefixed _users and _replicator databasesCVSS8.1High–Not in KEV0.6%EPSS1article
CVE-2026-86471Apache CouchDB: Admin credentials leading to code execution as operating system userCVSS9.3Critical–Not in KEV0.6%EPSS1article
CVE-2026-107755Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLsCVSS6.0Medium–Not in KEV0.6%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device