What’s Vulnerable › Products

Apache Software Foundation Apache Nutch vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Apache Software Foundation Apache Nutch version is affected

Latest Apache Software Foundation Apache Nutch vulnerabilities

• CVE-2026-41871 — Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API) (CVSS 9.8)
• CVE-2026-41870 — Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API) (CVSS 8.8)
• CVE-2026-41869 — Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API) (CVSS 9.1)
• CVE-2021-23901 — An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser (CVSS 9.1)
• CVE-2016-6809 — (CVSS 9.8)