Threats tagged 'cleanstart-2026-ij02845'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.2%	CVE-2026-107938Wso2am: Critical9.1EPSS 0.2%2026-11-13GCVE DatabaseCVE-2026-107938 A critical security vulnerability in the wso2am package affects versions prior to 4.7.0-r4. The issue lies in Apache CXF's Netty-based HTTP client transport, which fails to verify that the hostname in the server's TLS certificate matches the host being called. This flaw can lead to severe confidentiality and integrity impacts. A fix is available in version 4.7.0-r4. EPSS 0.2%Report on CVE-2026-107938 Vulnerability #cleanstart-2026-ij02845 #cleanstart	GCVE Database	2026-11-13

Page 1 of 1