EUVD-2026-26491

🗓️ 01 May 2026 09:46:49Reported by EUVDType

Neethi remote policy fetches were allowed via arbitrary protocols; upgrade to version 3.2.2 to restrict to Hypertext Transfer Protocol and its secure version.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Tivoli Netcool Impact 7.1.1.0	1 Jul 202619:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Apache HttpClient and Apache Neethi ( CVE-2026-40542, CVE-2026-42402, CVE-2026-42403 & CVE-2026-42404 )	29 Jun 202608:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by multiple vulnerabilities due to Neethi (CVE-2026-42402, CVE-2026-42403, CVE-2026-42404)	23 Jun 202612:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities Identified in Apache Neethi Allowing Denial of Service and Unauthorized Outbound Requests, which impacts IBM Tivoli Netcool Configuration Manager	31 Jul 202612:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Healthcare is vulnerable to multiple vulnerabilities due to Apache Log4j and Apache Neethi	8 Jun 202611:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	20 May 202620:13	–	ibm
ATTACKERKB	CVE-2026-42404	1 May 202609:46	–	attackerkb
BDU FSTEC	The vulnerability of the PolicyReference programming interface in the Java framework of Apache Neethi allows a perpetrator to gain unauthorized access to protected information.	17 Aug 202600:00	–	bdu_fstec
Chainguard	CVE-2026-42404 vulnerabilities	12 May 202619:18	–	cgr
CNNVD	Apache Neethi 代码问题漏洞	1 May 202600:00	–	cnnvd

[
  {
    "enisaIdVendor": [
      {
        "id": "98a85117-665a-3e17-9d04-5097d798d320",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "80592590-1208-30e1-b731-59d2777b9be2",
        "product": {
          "name": "Apache Neethi"
        },
        "product_version": "0 <3.2.2"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/zdspnt64zznyjyn648553kptx69w23oq

01 May 2026 09:46Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.5 - 7.2

EPSS0.00497

SSVC