CVE-2026-90440
published 2026-10-02CVE-2026-90440: Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D…
PriorityP346high8.2CVSS 4.0
AVNACLATPPRNUINVCNVINVAHSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.28%
20.0th percentile
Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | thrift | — | — |
| apache_software_foundation | apache_thrift | < 0.25.0 | 0.25.0 |
CVSS provenance
nvdv4.08.2HIGHCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat8.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer.
ghsa_unreviewed·2026-10-02
CVE-2026-90440 [HIGH] CWE-248 Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer.
Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Red Hat
thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer
vendor_redhat·2026-10-02·CVSS 8.2
CVE-2026-90440 [HIGH] CWE-248 thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer
thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer
A flaw was found in Apache Thrift's D language implementation within the TNonblockingServer component. Due to improper handling of exceptional conditions and improper resource shutdown, an uncaught exception can occur during server operations. A remote, unauthenticated attacker could exploit this vulnerability to cause a Denial of Service (DoS) by terminating the server process.
Package: thrift (Red Hat Ceph Storage 7) - Affected
Package: thrift (Red Hat Ceph Storage 8) - Affected
Package: thrift (Red Hat Ceph Storage 9) - Affected
Package: thrift (Red Hat Enterprise Linux AI (RHEL AI) 3) - Affected
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-90440 thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer [epel-all]
bugzilla·2026-10-22·CVSS 8.2
CVE-2026-90440 [HIGH] CVE-2026-90440 thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer [epel-all]
CVE-2026-90440 thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Bugzilla
CVE-2026-90440 thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer [fedora-all]
bugzilla·2026-10-22·CVSS 8.2
CVE-2026-90440 [HIGH] CVE-2026-90440 thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer [fedora-all]
CVE-2026-90440 thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Bugzilla
CVE-2026-90440 thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer
bugzilla·2026-10-02·CVSS 8.2
CVE-2026-90440 [HIGH] CVE-2026-90440 thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer
CVE-2026-90440 thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer
Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
2026-10-02
Published