CVE-2026-49158 | Apache Thrift up to 0.23.x THeaderTransport zlib Decompression denial of service

July 26, 2026 Yanac

A vulnerability classified as problematic was found in Apache Thrift up to 0.23.x. The affected element is an unknown function of the component THeaderTransport zlib Decompression Handler. The manipulation results in denial of service.

This vulnerability is cataloged as CVE-2026-49158. The attack must originate from the local network. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More