Apache Storm UI

2 known vulnerabilities in Apache Storm UI, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-82433 CVSS 6.5 medium Description `getNimbusConf` returned the complete daemon configuration without redaction after only a user-level authorization check…
CVE-2026-84179 CVSS 6.5 medium Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration and returned the result…