Apache CXF JNDI Injection vulnerability in DispatchMDBMessageListenerImpl
A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployment descriptor (ra.xml) or runtime activation parameters. Users are recommended to upgrade to versions 4.2.2 or 4.1.7, which fixes this issue.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-50633US | — | — | ||
A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployme… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2026/06/11/10WEB
- https://access.redhat.com/errata/RHSA-2026:37390WEB
- https://access.redhat.com/security/cve/CVE-2026-50633WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2488307WEB
- https://github.com/apache/cxfPACKAGE
- https://lists.apache.org/thread/1czhgovkgzdkyp3t61wthn0foogh2grfWEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-50633ADVISORY
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50633.jsonWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan