{"uuid": "584a596e-58a9-4633-96ed-7f6fd30850df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91135", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117371202806407646", "content": "CVE-2026-91135: Apache Thrift (<0.25.0) has a CRITICAL heap-based buffer overflow in C++ THeaderTransport when ZLIB is enabled. Exploitable for RCE/DoS. Upgrade to 0.25.0+ now. CVSS 9.2. https://radar.offseq.com/threat/cve-2026-91135-cwe-122-heap-based-buffer-overflow-in-apache-software-foundation-apache-thrift-0aedbcf1ed0ca11f #OffSeq #ApacheThrift #InfoSec #CVE202691135", "creation_timestamp": "2026-10-02T12:00:26.449812Z"}