CVE-2026-120761

Apache Axis2/Java versions through 2.0.1 are vulnerable to an Improper Restriction of XML External Entity Reference vulnerability. The root cause occurs when a client builds an AxisService from a WSDL URL using ServiceClient or AxisService.createClientSideAxisService with wsdl4j import resolution...