What’s Vulnerable › Products

Apache Software Foundation Apache Flink vulnerabilities

4 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Apache Software Foundation Apache Flink version is affected

Exploited Apache Software Foundation Apache Flink vulnerabilities

• CVE-2020-17519 — Apache Flink Improper Access Control Vulnerability

Latest Apache Software Foundation Apache Flink vulnerabilities

• CVE-2026-35194 — Apache Flink: Remote code execution via SQL injection in code generation (CVSS 8.1)
• CVE-2020-17519 — Apache Flink Improper Access Control Vulnerability (CVSS 7.5) — exploited
• CVE-2020-17518 — Apache Flink directory traversal attack: remote file writing through the REST API (CVSS 7.5)
• CVE-2020-1960 — (CVSS 4.7)