{"schema_version": "1.6.1", "id": "CVE-2026-96443", "summary": "JDBC driver URL validation bypass leads to remote code execution", "details": "Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "2.0.5"}, {"last_affected": "2.0.5"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/vv9o8sxpt8kkd7nznhovn9qjojn2wyv9"}]}