Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service. Users are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue. Applications that do not use Apache Fory C++ or do not use tagged integer fields are not affected.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-08-08 | 1 | Patch1 |
| 2026-08-10 | 1 | General1 |
⚠️ Vulnerabilidades en productos Apache ❗ CVE-2026-71560 ❗ CVE-2026-71559 ❗ CVE-2026-71558 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-apache-6/ https://t.co/JX6ijCbQ3M
Post summary
The post enumerates three new Apache CVEs and links to a CERT webpage for additional details, but offers no information on exploits, patches, or technical specifics.
🧠 Apache Fory also hit by out-of-bounds read CVE-2026-71560 A crafted payload targeting tagged integer fields in Apache Fory C++ can trigger an out-of-bounds heap read, potentially exposing information or causing denial of service. ✅ Fixed in Fory 1.5.0. 🔎 Source: Apache / Tenable. #CyberSecurity #Apache #CVE #MemorySafety #DataLeak
Post summary
CVE‑2026‑71560 is an out‑of‑bounds heap read in Apache Fory; a fix is available in version 1.5.0, but no PoC or exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | fory | - | - | - |