Sploitus

9 exploited vulnerabilities in Apache Tika

Vulnerabilities with publicly known exploits

Vendors
Apache, Atlassian, Debian, Linux Mint, Canonical, Git
With known exploits
9
Affected Apache Tika versions
< 3.2.2, 4.0.0, 1.18, 3.3.2, 1.28.3, 2.4.0, 1.28.2

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2025-66516 10 exploits
CVSS 9.8 CRITICAL 2025-10-26FIX AVAILABLE
CVE-2025-54988 7 exploits
CVSS 9.8 CRITICAL 2025-08-20FIX AVAILABLE
CVE-2026-66756
CVSS 9.8 CRITICAL 2026-07-30FIX AVAILABLE
CVE-2018-1335 15 exploits
CVSS 9.3 HIGH 2018-04-25FIX AVAILABLE
CVE-2018-11761 1 exploit
CVSS 7.5 HIGH 2018-09-19
CVE-2026-66755
CVSS 7.5 HIGH 2026-07-30FIX AVAILABLE
CVE-2022-30973
CVSS 5.5 MEDIUM 2022-05-31FIX AVAILABLE
CVE-2022-30126
CVSS 5.5 MEDIUM 2022-05-16FIX AVAILABLE
CVE-2022-25169
CVSS 5.5 MEDIUM 2022-05-16FIX AVAILABLE