CVE-2026-90440

Published: Ott 02, 2026 Last Modified: Ott 02, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,2
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer.

This issue affects Apache Thrift: before 0.25.0.

Users are recommended to upgrade to version 0.25.0, which fixes the issue.

248

Uncaught Exception

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Confidentiality
Potential Impacts:
Dos: Crash, Exit, Or Restart Read Application Data
Applicable Platforms
Languages: C++, Java, C#
View CWE Details
404

Improper Resource Shutdown or Release

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Other Confidentiality
Potential Impacts:
Dos: Resource Consumption (Other) Varies By Context Read Application Data
Applicable Platforms
All platforms may be affected
Likelihood of Exploit: Medium
View CWE Details
755

Improper Handling of Exceptional Conditions

Incomplete
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Other
Potential Impacts:
Other
Applicable Platforms
All platforms may be affected
Likelihood of Exploit: Medium
View CWE Details
https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbo…
https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1
https://lists.apache.org/thread/s8fjltl6c1pkm7vg9v4qkr89b5b…
https://lists.apache.org/thread/s8fjltl6c1pkm7vg9v4qkr89b5b74jbg