Apache product
Fineract
Tracked since 21 Jul · latest article 3 Nov · RSS · API
None open
of 0 in the full CISA catalogue · all time
EPSS top 5%, not in KEV
usual rate
Exploited, by due date
No Fineract CVE is in the CISA KEV catalogue.
Patch cadence and exploit odds
How often CISA adds Fineract CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
CISA has not added a Fineract CVE to KEV.
Fix listed
4 of 4 CVEs in coverage
Every CVE in coverage has a fix recorded.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2026-35152 | 88.4 |
| CVE-2026-57821 | 54.7 |
| CVE-2026-56287 | 51.3 |
| CVE-2026-64618 | 13.7 |
Coverage2 articles · all time
The latest 2 articles naming Fineract, in the shared story grammar.
2 articles from 1 outlet since 21 Jul. Picked up again today after 15 weeks quiet.
- Tue 21 Jul, 15:22 UTC. SecurityOnline, first report. Apache fixes three SQLi bugs in Fineract core banking software.
- Tue 3 Nov, 03:30 UTC. SecurityOnline. Apache fixes eight high risk flaws across three projects.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 2 articles as a listHide the list
- Tue 21 JulDay 01
- Apache fixes three SQLi bugs in Fineract core banking software15:22 · SecurityOnline · First report
Quiet for 15 weeks
Tue 3 NovDay 1051- Apache fixes eight high risk flaws across three projects03:30 · SecurityOnline · Picked up again
All CVEs in coverage4
Exploited first, then by EPSS
Apache Software Foundation Apache Fineract vulnerability
8.8High3.3% EPSS · 1 articleApache Software Foundation Apache Fineract vulnerability
8.1High0.7% EPSS · 1 articleApache Software Foundation Apache Fineract vulnerability
8.1High0.7% EPSS · 1 articleApache Fineract: SQL injection vulnerability in Search API
Not scored0.2% EPSS · 1 article