Skip to content
OpenAdvisories
Medium WID-SEC-2026-2608 2 CVEs

Apache Tika: Mehrere Schwachstellen

Published Jul 30, 2026 · Updated Sep 3, 2026 · Revision 2 · de-DE

Vendor: Apache Vendor: Ubuntu Product: Linux Product: Tika Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Apache Tika ausnutzen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.

Product

Das Apache Tika-Toolkit erkennt und extrahiert Metadaten und Text aus vielen verschiedenen Dateitypen.

Vulnerabilities 2

  • Medium 6.9
    CVE-2026-66756

    Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false

    Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue.

    Apache Software Foundation Apache Tika
  • Medium 5.9
    CVE-2026-66755

    Apache Tika: Arbitrary Local File Read in ISArchiveParser

    Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessibl…

    Apache Software Foundation Apache Tika tika tika Debian Ubuntu

Revision history

  1. #2

    Neue Updates von Ubuntu aufgenommen

  2. #1

    Initiale Fassung

References