Threats tagged 'ghsa-542g-m3fx-q86f'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.4%	CVE-2026-50623Org.apache.cxf:cxf rt rs security oauth2: Apache CXF has Authentication Bypass in OAuth2 TokenIntrospectionService Medium4.8EPSS 0.4%2026-06-12GCVE DatabaseCVE-2026-50623 An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService of Apache CXF due to a missing 'throw' keyword in the security context check. This flaw allows unauthenticated network attackers to access the introspection endpoint if authentication is not properly enabled. The issue is fixed in Apache CXF versions 4.2.2 and 4.1.7. EPSS 0.4%Report on CVE-2026-50623 Vulnerability CWE-287 #ghsa-542g-m3fx-q86f #maven	GCVE Database	2026-06-12

Page 1 of 1