CVE-2026-43870 Apache Thrift: Node.js web_server.js multi-vulnerability Information published. EPSS 0.00 CVE-2026-43870 Apache US Microsoft Security · 19. 5. 10:48