CVE catalog
All CVEs

CVE-2026-96443

Apache Doris: JDBC driver URL validation bypass leads to remote code execution

medium · 6.5

Published

Description

Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.