CVE-2026-95616

A flaw was found in Apache WSS4J. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a crafted Simple Object Access Protocol SOAP message containing a digital certificate with an oversized extension length. Due to an integer overflow during certificate bounds checking...