CVE-2026-48144 | Apache Thrift up to 0.23.x c_glib TLS Client certificate host validation

July 26, 2026 Yanac

A vulnerability marked as problematic has been reported in Apache Thrift up to 0.23.x. This vulnerability affects unknown code of the component c_glib TLS Client Handler. Performing a manipulation results in certificate with host mismatch.

This vulnerability is identified as CVE-2026-48144. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More