CVE-2026-100227

Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The JAX-RS XML Signature interceptors XmlSigInHandler, XmlSigInInterceptor and the streaming XmlSecInInterceptor did not ensure that the XML passed to the application was covered by the...

EUVD-2026-95701

Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The JAX-RS XML Signature interceptors XmlSigInHandler, XmlSigInInterceptor and the streaming XmlSecInInterceptor did not ensure that the XML passed to the application was covered by the...

CVE-2026-100227

The Apache CXF JAX-RS XML Security module is vulnerable to Improper Verification of Cryptographic Signature due to an XML Signature wrapping flaw. Specifically, the XmlSigInHandler , XmlSigInInterceptor , and the streaming XmlSecInInterceptor failed to verify that the XML passed to the applicatio...

CVE-2026-100227 Apache CXF: XML Signature wrapping in JAX-RS XML Security

Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The JAX-RS XML Signature interceptors XmlSigInHandler, XmlSigInInterceptor and the streaming XmlSecInInterceptor did not ensure that the XML passed to the application was covered by the...

PT-2026-108810

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description Improper verification of cryptographic signatures in the JAX-RS XML Security module allows for XML Signature wrapping. The...

CVE-2022-22916

CVE-2022-22916 CVE-2022-22916, O2OA RCE दूरस्थ कमांड निष्पादन O2OA RCE दूरस्थ कमांड निष्पादन CVE-2022-22916 O2OA J2EE वितरित आर्किटेक्चर पर आधारित, मोबाइल ऑफिस और स्मार्ट ऑफिस को एकीकृत करने वाला, निजीकृत तैनाती का समर्थन करने वाला, अनुकूली लोड क्षमता वाला, और AGPL लाइसेंस के तहत ओपन-सोर्स...

CVE-2026-57819

A flaw was found in Apache CXF. This vulnerability allows a remote attacker to initiate a Denial of Service DoS attack. The issue arises because the component does not enforce a default limit on the number of form parameters processed in a JAX-RS message, enabling an attacker to send requests wit...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by uncontrolled resource consumption vulnerabilities due to Apache Neethi (CVE-2026-66142, CVE-2026-66143, CVE-2026-66144)

Summary There is a vulnerability in the Apache Neethi library that affects IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, with the jaxrs-1.1, jaxrs-2.0, jaxrs-2.1, restfulWS-3.0, restfulWS-3.1 , restfulWS-4.0, json-1.0, jsonp-1.0, jsonp-1.1, jsonp-2....

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by uncontrolled resource consumption vulnerabilities due to Apache Neethi (CVE-2026-66142, CVE-2026-66143, CVE-2026-66144)

Summary There is a vulnerability in the Apache Neethi library that affects IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, with the jaxrs-1.1, jaxrs-2.0, jaxrs-2.1, restfulWS-3.0, restfulWS-3.1 , restfulWS-4.0, json-1.0, jsonp-1.0, jsonp-1.1,...

Payara 7.2026.1.RC1 Arbitrary EJB Method Invocation

Payara Server exposes multiple HTTP-accessible EJB invocation mechanisms that rely on attacker-controlled reflection, dynamic class loading, and unsafe deserialization. These endpoints allow remote clients to perform arbitrary JNDI lookups, resolve attacker-supplied class names, and invoke EJB...

Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)

Summary There are mulitple vulnerabilities in the Apache CXF library that affect IBM WebSphere Application Server and affect WebSphere Application Server Liberty when the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, or xmlWS-4.0 features are enabled. Vulnerability Details Refer to the security...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM WebSphere Hybrid Edition, are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)

Summary There are mulitple vulnerabilities in the Apache CXF library that affect IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM WebSphere Hybrid Edition, when the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, or xmlWS-4.0 features are enabled...

Signature Bypass

Apache CXF is vulnerable to signature Bypass. The vulnerability is due to insufficient verification of metadata signatures, where the JwsJsonContainerRequestFilter processes metadata without confirming it was authenticated by the accepted signature, and attackers can supply unauthenticated...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)

Summary There are mulitple vulnerabilities in the Apache CXF library that affect IBM WebSphere Application Server and affect WebSphere Application Server Liberty when the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, or xmlWS-4.0 features are enabled. Vulnerability Details CVEID:CVE-2026-57819...

Allocation of Resources Without Limits or Throttling

Overview org.apache.cxf:cxf-rt-frontend-jaxrs is an Apache CXF Runtime JAX-RS Frontend Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the lack of a default restriction on the number of form parameters in incoming messages. An attack...

CVE-2026-57819: Uncontrolled Resource Consumption

Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCount" configuration option. However, no default limit is set which may lead to denial of service attacks when processing requests with very large numbers of form parameters. Users are...

PT-2026-68462

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.3 Apache CXF versions prior to 4.1.8 Apache CXF versions prior to 3.6.12 Description Lack of a default limit on the number of form parameters in a JAX-RS message can lead to denial of service attacks when...

GHSA-33J8-J763-4FV5 Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry

A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption that accepted Content-Type or protected HTTP-header metadata came from a verified...

Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry

A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption that accepted Content-Type or protected HTTP-header metadata came from a verified...

CVE-2026-50634: Improper Verification of Cryptographic Signature

A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption that accepted Content-Type or protected HTTP-header metadata came from a verified...