Home › CVE Intelligence › CVE-2026-58389
CVSS 9.8 CRITICAL Vulnerability

CVE-2026-58389: Apache Thrift: Rust binary protocol non-strict path missing string size limit

Posted by Jens Geyer on Jul 24 Severity: Affected versions: Apache Thrift (thrift) before 0.24.0 Description: Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue…

9.8CVSS Score
CRITICALSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-58389
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeVulnerability
CVSS Score9.8 (CRITICAL)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

Posted by Jens Geyer on Jul 24 Severity:

Affected versions:

• Apache Thrift (thrift) before 0.24.0

Description:

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings.

This issue affects Apache Thrift: before 0.24.0.

Us... [Full analysis available on Pro]

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-58389 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence