CVE-2026-57819

Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCount" configuration option. However, no default limit is set which may lead to denial of service attacks when processing requests with very large numbers of form parameters. Users are...

CVE-2026-64958

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue...

CVE-2026-66909

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...

CVE-2026-54225

Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there was no default placed on this size, meaning that a denial of service attack is possible if the user doesn't explicitly set the limit. Users should update t...

CVE-2026-64194

A flaw was found in Net::DNS. A remote attacker can exploit this vulnerability by sending a specially crafted DNS packet with deep compression pointer chains. This can cause excessive recursion in the Net::DNS::DomainName::decode function, leading to stack exhaustion and a Denial of Service DoS f...

CVE-2026-64572

A flaw was found in the Linux kernel's IPv4 forwarding information base FIB component. A local attacker with administrative network capabilities CAPNETADMIN could exploit a timing issue during route insertion and lookup operations. This could lead to a "use-after-free" vulnerability, where the...

CVE-2026-64578

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB3 server. A remote attacker could exploit this vulnerability by crafting a malicious compound SMB2 request. This improper validation of the request size before reading specific data could lead to an out-of-bounds read,...

EUVD-2026-53856

Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. However, any or referenced from that top-level WSDL is handed off to WSDL4J, which does not disable DOCTYPE declarations or external entities. As a result, the protections applied...

CVE-2026-64566

A flaw was found in the Linux kernel's iptfs module, which handles network packet processing. When copying shared packet fragments, a critical flag indicating shared memory is not correctly propagated. This can lead to memory corruption within the kernel, potentially causing the system to crash a...

EUVD-2026-53854

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...

CVE-2026-66909 Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...

CVE-2026-66909 Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...

CVE-2026-66909

Summary: CVE-2026-66909 affects Apache CXF's JMS transport, where inbound JMS ObjectMessage bodies are deserialized with no type restrictions, enabling potential denial of service or remote code execution if a gadget class is present on the classpath. The root cause is unrestricted native Java de...

CVE-2026-64567

A flaw was found in btrfs, a file system in the Linux kernel. This vulnerability occurs because the system does not properly validate the number of entries in the free space cache header when loading it. A local attacker with the ability to modify the file system metadata could craft a malicious...

CVE-2026-55980

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...

CVE-2026-71190

A flaw was found in OpenStack Swift's proxy server. The Accept header parser uses a regular expression that is vulnerable to catastrophic backtracking. An unauthenticated attacker can send a crafted Accept header with a small number of backslash characters in an unterminated quoted string, causin...

EUVD-2026-53853

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue...

CVE-2026-64958 Apache CXF: Denial of service via message header attachments

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue...

CVE-2026-64958 Apache CXF: Denial of service via message header attachments

An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue...

CVE-2026-64958

CVE-2026-64958 relates to an incomplete fix for CVE-2026-50645 in Apache CXF, allowing a denial of service by sending a message with many attachment headers. Affected CXF versions are not listed here, but remediation is to upgrade to CXF 4.2.3, 4.1.8, or 3.6.12, which address this issue. The vuln...