{"vulnerability": "cve-2026-91135", "sightings": [{"uuid": "584a596e-58a9-4633-96ed-7f6fd30850df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91135", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117371202806407646", "content": "CVE-2026-91135: Apache Thrift (<0.25.0) has a CRITICAL heap-based buffer overflow in C++ THeaderTransport when ZLIB is enabled. Exploitable for RCE/DoS. Upgrade to 0.25.0+ now. CVSS 9.2. https://radar.offseq.com/threat/cve-2026-91135-cwe-122-heap-based-buffer-overflow-in-apache-software-foundation-apache-thrift-0aedbcf1ed0ca11f #OffSeq #ApacheThrift #InfoSec #CVE202691135", "creation_timestamp": "2026-10-02T12:00:26.449812Z"}, {"uuid": "3ef0dbfd-2073-4161-9d3f-6e2d9c0fffda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91135", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwvd5mtfzs2h", "content": "Apache Thrift <0.25.0 hit by CRITICAL heap-based buffer overflow (CVE-2026-91135) in C++ THeaderTransport. Upgrade to 0.25.0+ to prevent RCE/DoS. CVSS 9.2. Details: https://radar.offseq.com/threat/cve-2026-91135-cwe-122-heap-based-buffer-overflow-in-apache-software-foundation-apache-thrift-0aedbc...", "creation_timestamp": "2026-10-02T12:00:28.306366Z"}, {"uuid": "804de7e5-9295-465c-a06d-0737fcb735f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91135", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwvdklpapr2j", "content": "\ud83d\udea8 CVE-2026-91135 \u2014 CVSS 9.2 CRITICAL\n\nHeap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-91135\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T12:07:42.757041Z"}, {"uuid": "e4212d37-d92b-4650-b646-dec92dd274eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91135", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx6abfre7m2y", "content": "Apache Thrift 0.25.0 fixes 61 Apache Thrift vulnerabilities, including critical heap overflow CVE-2026-91135. Upgrade every binding now.\n\n#ApacheThrift #Apache #CVE202683632 #CVE202691135 #RPC #DoS #OpenSource #Vulnerability", "creation_timestamp": "2026-10-06T01:02:51.478267Z"}, {"uuid": "6b827c75-c086-4bca-9182-1af8d0e8a720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91135", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxc2ihilvy2z", "content": "CVE-2026-91135 - thrift\nVersions of Apache Thrift older than 0.25 that use the ZLIB compression option can write beyond the allocated memory area, potentially causing crashes or allowing an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#thrift #apachefoundation #Debian12 #CVE #infosec", "creation_timestamp": "2026-10-07T13:30:04.835486Z"}]}