CVE-2026-48145: Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass

Overview

Severity
High (CVSS 7.5)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploit Status
Not Exploited
Patch Tuesday
2026-Jul
Released
2026-08-07
EPSS Score
0.27% (percentile: 20.0%)

Affected Products (1)

Other

  • 21398-17084

Revision History

  • 2026-08-07: Information published.