CVE-2026-506338.1HighCWE-20
Apache Software Foundation Apache CXF vulnerability
Apache Software Foundation · Apache CXF
Not in CISA KEVVendor fix available
0.9%probability of exploitation in the next 30 days
59th percentile
050100
Higher than 59% of scored CVEs
8.1HighCVSS
LowMediumHighCrit.
DescriptionNVD
A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployment descriptor (ra.xml) or runtime activation parameters. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 13 Jun.
- Important Apache CXF Vulnerabilities Demand Immediate ActionSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.