What’s Vulnerable › Products

Apache Software Foundation Apache SkyWalking vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Apache Software Foundation Apache SkyWalking version is affected

Latest Apache Software Foundation Apache SkyWalking vulnerabilities

• CVE-2026-85229 — Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CVE-2025-54057) (CVSS 6.1)
• CVE-2026-71216 — Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP (CVSS 5.3)
• CVE-2026-30778 — Apache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. (CVSS 7.5)
• CVE-2025-54057 — Apache SkyWalking: Stored XSS vulnerability (CVSS 6.1)
• CVE-2020-13921 — (CVSS 9.8)
• CVE-2020-9483 — (CVSS 7.5)