org.apache.cxf.systests:cxf-systests-uncategorized (2.2.8) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (2.2.8)

org.apache.cxf:cxf-integration-jca MAVEN version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 2.2.8 Source cves: CVE-2026-50633 Source...

org.apache.cxf.systests:cxf-systests-uncategorized (3.1.4) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (3.1.4)

org.apache.cxf:cxf-integration-jca MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.1.4 Source cves: CVE-2026-50633 Source...

org.apache.cxf.systests:cxf-systests-uncategorized (2.4.10) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (2.4.10)

org.apache.cxf:cxf-integration-jca MAVEN version 2.4.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 2.4.10 Source cves: CVE-2026-50633 Sour...

org.apache.cxf.systests:cxf-systests-uncategorized (3.3.6) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (3.3.6)

org.apache.cxf:cxf-integration-jca MAVEN version 3.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.3.6 Source cves: CVE-2026-50633 Source...

GHSA-QP3F-RVJ8-46C8 Apache CXF JNDI Injection vulnerability in DispatchMDBMessageListenerImpl

A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployment descriptor ra.xml or runtime activation parameters. Users are recommended to upgrade to versions 4.2.2 or 4.1.7,...

org.apache.cxf.systests:cxf-systests-uncategorized (>=4.2.0, <=4.2.1) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (>=4.2.0, <=4.2.1)

org.apache.cxf:cxf-integration-jca MAVEN version =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50633 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339184...

CVE-2026-11847

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnerability to create directories in unintended system paths...

CVE-2026-11849 IEI Integration Corp｜iRM-IEI Remote Management - Hard-coded Credentials

The iRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded Credentials vulnerability, allowing unauthenticated remote attackers to exploit hard-coded credentials to gain administrative privileges on the database...

CVE-2026-11849

The CVE-2026-11849 entry concerns IEI Integration Corp’s iRM-IEI Remote Management with a hardcoded credentials flaw. Affected component: the iRM-IEI Remote Management database (product/vendor specified). Root cause: hardcoded credentials allowing unauthenticated remote access. Impact: attacker c...

CVE-2026-11848 IEI Integration Corp｜ iRM-IEI Remote Management - Missing Authentication

The iRM-IEI Remote Management developed by IEI Integration Corp has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to exploit a specific functionality to obtain partial system configuration information...

CVE-2026-11846 IEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File Deletion

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has an Arbitrary File Deletion vulnerability, allowing authenticated remote attackers to exploit this vulnerability to delete arbitrary system files or directories, resulting in data destruction or service disruption...

CVE-2026-11845 IEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - OS Command Injection

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute them on the device...

CVE-2026-11844 IEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File Read

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended directory scope...

CVE-2026-11844 IEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File Read

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended directory scope...

EUVD-2026-36404

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Arbitrary File Read vulnerability, allowing privileged remote attackers to access files outside the intended directory scope...

CVE-2026-50633

A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployment descriptor ra.xml or runtime activation parameters. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or...

CVE-2026-50633

A JNDI Injection vulnerability exists in the Apache CXF JCA integration module, specifically within DispatchMDBMessageListenerImpl . An attacker who can manipulate the JCA deployment descriptor (ra.xml ) or runtime activation parameters can achieve code execution . To mitigate this risk, users ar...

org.apache.cxf.systests:cxf-systests-uncategorized (>=2.1.7, <=4.1.6), org.apache.cxf:cxf-systests (>=2.0.6, <=2.2.3) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (>=2.0.6, <=4.1.6)

org.apache.cxf:cxf-integration-jca MAVEN version =2.0.6, =2.1.7, =2.0.6, =2.2.3 Source cves: CVE-2026-50633 Source advisory: MEND:CVE-2026-50633...

PT-2026-48840

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a OS Command Injection vulnerability, allowing privileged remote attackers to inject arbitrary OS commands and execute them on the device...

PT-2026-48852

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.2 Apache CXF versions prior to 4.1.7 Description A JNDI Injection issue exists in the JCA integration module. This occurs when an attacker can manipulate the JCA deployment descriptor 'ra.xml' or runtime...