CVE-2026-66756: Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to ve

unknownCVE-2026-66756

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: unknown
Published: 2026-07-30
Last updated: 2026-07-30
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-66756

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-667560.32% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 24% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-66756	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

medium[NEU] [mittel] Apache Tika: Mehrere Schwachstellencert-bund

Recent advisories for Improper Protection of

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

highCVE-2026-12341: This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker u…nvd · 2026-07-20
highCVE-2026-13473: IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM…nvd · 2026-07-17
unknownCVE-2026-21039: Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to …nvd · 2026-07-10
highCVE-2026-54409: A malicious actor with access to the network and under certain conditions could exploit an Imp…nvd · 2026-07-02
highCVE-2026-54408: A malicious actor with access to the network could exploit an Improper Access Control vulnerab…nvd · 2026-07-02
highCVE-2026-54407: A malicious actor with access to the network could exploit an Improper Access Control vulnerab…nvd · 2026-07-02