Sploitus

24 exploited vulnerabilities in Apache Apisix

Vulnerabilities with publicly known exploits

Vendors
Apache, Apache Apisix, Bitnami, Git
With known exploits
24
Affected Apache Apisix versions
< 2.10.4, 2.12.1, 2.13.0, 3.17.0, 3.16.0, 0.5, 2.13.1, 3.14.0, 2.10.2, 1.5, 3.8.0, 3.9.0, 3.12.0

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2022-24112 26 exploits
CVSS 9.8 CRITICAL 2022-02-11
CVE-2022-25757
CVSS 9.8 CRITICAL 2022-03-28FIX AVAILABLE
CVE-2026-49871
CVSS 9.3 CRITICAL 2026-06-19FIX AVAILABLE
CVE-2026-44087
CVSS 9.1 CRITICAL 2026-06-19FIX AVAILABLE
CVE-2026-39999
CVSS 9.1 CRITICAL 2026-06-19FIX AVAILABLE
CVE-2026-31908 2 exploits
CVSS 9.1 CRITICAL 2026-04-14FIX AVAILABLE
CVE-2026-49230 2 exploits
CVSS 9.1 CRITICAL 2026-06-19FIX AVAILABLE
CVE-2026-39998
CVSS 8.8 HIGH 2026-06-19FIX AVAILABLE
CVE-2026-47339
CVSS 8.1 HIGH 2026-06-19FIX AVAILABLE
CVE-2026-49872
CVSS 8.1 HIGH 2026-06-19FIX AVAILABLE
CVE-2025-27446
CVSS 7.8 HIGH 2025-04-02FIX AVAILABLE
CVE-2022-29266
CVSS 7.5 HIGH 2022-04-20FIX AVAILABLE
CVE-2026-31923
CVSS 7.5 HIGH 2026-04-14FIX AVAILABLE
CVE-2025-62232
CVSS 7.5 HIGH 2025-10-30FIX AVAILABLE
CVE-2021-43557 1 exploit
CVSS 7.5 HIGH 2021-11-22FIX AVAILABLE
CVE-2026-48895
CVSS 7.2 HIGH 2026-06-19FIX AVAILABLE
CVE-2026-47341
CVSS 6.5 MEDIUM 2026-06-19FIX AVAILABLE
CVE-2020-13945 4 exploits
CVSS 6.5 MEDIUM 2020-12-07FIX AVAILABLE
CVE-2024-32638
CVSS 6.3 MEDIUM 2024-05-02FIX AVAILABLE
CVE-2026-44915
CVSS 6.1 MEDIUM 2026-06-19FIX AVAILABLE
CVE-2026-44046
CVSS 5.8 MEDIUM 2026-06-19FIX AVAILABLE
CVE-2026-49231
CVSS 5.4 MEDIUM 2026-06-19FIX AVAILABLE
CVE-2026-31924
CVSS 5.3 MEDIUM 2026-04-14FIX AVAILABLE
CVE-2025-46647
CVSS 5.3 MEDIUM 2025-07-02FIX AVAILABLE