Vulnerability Bulletins |
CVE-2026-64958 |
|
| Affected software | APACHE |
| An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-64958 | |