Security Advisory

Apache Product Security Update Advisory

  • Nov 04 2026
Apache Product Security Update Advisory

Apache Product Security Update Advisory

Apache has released a security update to address a vulnerability in Apache Fineract. Users of this product should update to the latest version.

Target Products

  • Apache Fineract 1.15.0 or earlier.

Resolved Vulnerabilities

  • CVE-2026-64618. This is an SQL injection vulnerability (a vulnerability that allows malicious input to be injected into database queries) in Apache Fineract’s Search API.
  • CVE-2026-65874. This is an SQL injection vulnerability in Apache Fineract’s Center and datatables endpoints that occurs via the ORDER BY parameter.

Patch Information

  • The latest update includes the Vulnerability Patch. – Simply update to Apache Fineract 1.16.1 or later.

Note

  • According to the text, you must update to the latest version that includes the Vulnerability Patch, as instructed on the reference website.

Tags:
Previous Post