Product · Apache Software Foundation

Apache CouchDB

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.3

CVE-2026-86471

Apache CouchDB: Admin credentials leading to code execution as operating system user

An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user. Users are recommended to upgrade to version 3.5.3, which fixes th…

Apache Software Foundation Apache CouchDB couchdb Ubuntu

Oct 20, 2026
Critical 9.8

CVE-2022-24706 Exploited Public exploit EPSS 93%

Remote Code Execution Vulnerability in Packaging

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including re…

Apache Software Foundation Apache CouchDB

Apr 26, 2022
KEV Aug 25, 2022