DeutschShown in its original language — a full translation is planned for a future version.
Apache CXF: Mehrere Schwachstellen
view advisory published 2026-10-08
Ein Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und offenzulegen, Benutzer auf vom Angreifer kontrollierte Websites umzuleiten oder Denial-of-Service-Zustände auszulösen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-97791US | — | — | ||
In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That result was stored in one object shar… | ||||
| CVE-2026-97468US | — | — | ||
Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()… | ||||
| CVE-2026-86463US | — | — | ||
Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The search pattern can get stuck trying many combinations when it encounte… | ||||
| CVE-2026-79650US | — | — | ||
Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication. The issue occurs because attacker-controlled state par… | ||||
| CVE-2026-78384US | — | — | ||
CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap. A small (~KB) crafted payload could expand to gigabytes on the heap. Reachable via… | ||||
| CVE-2026-73179US | — | — | ||
Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid a… | ||||
| CVE-2026-108039US | — | — | ||
By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document. A very large request could therefore use a lot of memory… | ||||
| CVE-2026-107938US | — | — | ||
In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the host being c… | ||||
| CVE-2026-107937US | — | — | ||
In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300 characters) and attachment-headers… | ||||
| CVE-2026-100227US | — | — | ||
Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The JAX-RS XML Signature interceptors (XmlSigInHandler, XmlSigInIntercept… | ||||
02
references
External citations — patches, advisories, analysis.
- Apache CXF Advisory vom 2026-10-08external
- Apache CXF Advisory vom 2026-10-08external
- Apache CXF Advisory vom 2026-10-08external
- Apache CXF Advisory vom 2026-10-08external
- Apache CXF Advisory vom 2026-10-08external
- Apache CXF Advisory vom 2026-10-08external
- Apache CXF Advisory vom 2026-10-08external
- Apache CXF Advisory vom 2026-10-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan