CVE-2026-123766

The Apache Axis2/Java software (version 2.0.1 ) is vulnerable to a Cross-site Scripting (XSS) flaw within its OpenAPI module . The root cause is the improper neutralization of input during web page generation, where the Swagger UI page writes a value derived from the request's Host header into th...