DeutschShown in its original language — a full translation is planned for a future version.
Apache CXF: Mehrere Schwachstellen
view advisory published 2026-05-21
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-44930US | critical9.8 | — | ||
An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates from the repository.
U… | ||||
| CVE-2026-44618US | — | — | ||
Insecure XML parser configuration in Apache CXF's WS-Transfer module may allow attackers to perform XXE attacks.
Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11… | ||||
| CVE-2026-44417US | — | — | ||
The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that another path in the code might lead to code execution capabilitie… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:37390 vom 2026-07-09external
- Red Hat Security Advisory RHSA-2026:70228 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70229 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70230 vom 2026-09-22external
- Red Hat Security Advisory RHSA-2026:70277 vom 2026-09-22external
- Apache CXFexternal
- Apache CXF Security Advisory CVE-2026-44417 vom 2026-05-21external
- Apache CXF Security Advisory CVE-2026-44618 vom 2026-05-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan