Sploitus

8 exploited vulnerabilities in Apache Druid

Vulnerabilities with publicly known exploits

Vendors
Apache
With known exploits
8
Affected Apache Druid versions
< 36.0.0, 35.0.0, 0.20.0, 31.0.2, 30.0.1, 0.17.0, 0.23.0

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2026-23906
CVSS 9.8 CRITICAL 2026-02-09FIX AVAILABLE
CVE-2025-59390 1 exploit
CVSS 9.8 CRITICAL 2025-11-26FIX AVAILABLE
CVE-2021-25646 17 exploits
CVSS 9.0 HIGH 2021-01-29
CVE-2025-27888
CVSS 5.8 MEDIUM 2025-03-19FIX AVAILABLE
CVE-2024-45537
CVSS 6.5 MEDIUM 2024-09-17FIX AVAILABLE
CVE-2020-1958 1 exploit
CVSS 6.5 MEDIUM 2020-04-01FIX AVAILABLE
CVE-2024-45384
CVSS 5.3 MEDIUM 2024-09-17FIX AVAILABLE
CVE-2022-28889
CVSS 4.3 MEDIUM 2022-07-07FIX AVAILABLE