Threats affecting pkg:maven/Apache Software Foundation/org.apache.myfaces.core:myfaces-impl

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-68536Apache MyFaces · Server-Side Request Forgery (SSRF) Critical9.8EPSS 0.5%2026-09-16CVE Database V5CVE-2026-68536 CVE-2026-68536 is a critical Server-Side Request Forgery (SSRF) and Local File Inclusion vulnerability in Apache MyFaces Core. It affects multiple versions of Apache MyFaces, allowing an attacker to potentially cause confidentiality, integrity, and availability impacts. The vulnerability is fixed in versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, and 4.1.4. Users are strongly advised to upgrade to these versions to mitigate the risk. EPSS 0.5%Vulnerability Apache Software Foundation CWE-918	CVE Database V5	2026-09-16

Page 1 of 1