Apache Tika Toolkit Faces Critical 10.0-Rated Vulnerability
Article Content
Browse articles 
The Apache Foundation has issued a warning regarding a critical 10.0-rated vulnerability in its Tika toolkit, which is used for metadata extraction from over 1,000 file formats. This follows a previously reported 8.4-rated flaw (CVE-2025-54988) that allowed XML External Entity injection via crafted XFA files in PDFs. The new vulnerability is identified as CVE-2025-66516.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track Pegasus, Apache Foundation and CVE-2025-54988 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Zero-Click Spyware Delivered via Targeted Ads: Citizen Lab Report On October 15, 2026, Citizen Lab revealed that the Israeli advertising firm Discover-Tech has been using targeted online ads to deliver zero-click spyware, dubbed 'AdFection', to devices without user interaction. This technique has reportedly infected at least 45 devices belonging to journalists at Al Jazeera between… 
Morocco's Surveillance Network Targets Journalists and Activists with Pegasus Spyware Amnesty International's new report reveals that Morocco's Direction Générale de la Surveillance du Territoire (DGST) has employed extensive surveillance tactics, including the use of Pegasus spyware, to monitor and silence journalists and human rights defenders. The report identifies 103 phone numbers linked to…