Skip to content
COOEY

FAIL › dossier

nifi

PRODUCT

Failure events
2
Zero-days
0
RCEs
1
On KEV
0
Critical
2
Worst shame
65
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2026-08-03 CVE-2026-68980 critical Apache NiFi 2.0.0-2.10.0 allows unauthenticated deletion of assets via REST API due to missing identifier verification.
2026-08-03 CVE-2026-68979 critical Apache NiFi 1.10.0-2.10.0 lacks authorization checks on Parameter Context updates, allowing authenticated users to alter executable parameter values and trigger code execution during component validation.