CVE-2026-25903

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 17, 2026

Last Seen

February 17, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Apache NiFi Vulnerability CVE-2026-25903 Allows Authorization Bypass45.9

A high-severity vulnerability in Apache NiFi, tracked as CVE-2026-25903, has been disclosed, allowing lower-privileged users to modify restricted components. This flaw affects Apache NiFi versions 1.1.0 through 2.7.2 and has been addressed in version 2.8.0. Users are urged to upgrade to mitigate pot...