Threats tagged 'ghsa-93g8-qqv3-mrx8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.7%	CVE-2026-50632Apache CXF · Improper Input Validation High8.1EPSS 0.7%2026-06-12CVE Database V5CVE-2026-50632 CVE-2026-50632 is a high-severity vulnerability in Apache CXF related to improper input validation and deserialization of untrusted JMS configuration data. It stems from an incomplete fix of a previous issue (CVE-2026-44417) and allows untrusted users who can configure JMS to achieve arbitrary code execution, potentially leading to full system compromise. The vulnerability affects multiple Apache CXF versions prior to fixed releases 4.2.2, 4.1.7, and 3.6.12. Mitigation involves restricting JMS configuration access to trusted administrators only. Official patches are available in the specified fixed versions. EPSS 0.7%Vulnerability Apache Software Foundation CWE-20 #ghsa-93g8-qqv3-mrx8 #maven	CVE Database V5	2026-06-12

Page 1 of 1