Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects
    Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.
    (CVE-2026-43869)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects     Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.
    (CVE-2026-43869)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
442589	SCA: security update for org.apache.thrift:libthrift (GHSA-7pwc-h2j2-rjgj)	Tenable Cloud Security	SCA Checks	high
442589	SCA: security update for org.apache.thrift:libthrift (GHSA-7pwc-h2j2-rjgj)	Tenable Self-Hosted Container Security	SCA Checks	high
312239	Linux Distros Unpatched Vulnerability : CVE-2026-43869	Nessus	Misc.	high

Detections

Analytics

CVE-2026-43869

high

Tenable Plugins

high

high

high