Do Son Critical Apache Druid flaw (CVE-2026-23906) allows login with no password via LDAP anonymous binds. Update to v36.0.0 or disable anonymous binds now.
Apache Druid
CVE-2025-27888 reveals serious security flaws in Apache Druid. Stay informed about server-side request forgery and XSS risks.
Lucifer DDoS botnet is exploiting misconfigurations and vulnerabilities in Apache Hadoop and Apache Druid (CVE-2021-25646)