[NEW] [medium] Apache CXF: Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in Apache CXF to execute arbitrary code, elevate privileges, conduct a denial of service attack, and bypass security precautions.
CSIRTS triage
- What
- Multiple vulnerabilities in Apache CXF enable arbitrary code execution, privilege escalation, denial of service, and authentication bypass.
- Who is affected
- Apache CXF deployments using affected versions.
- Urgency
- High urgency; multiple classes including remote code execution represent significant exploitation risk.
- Action
- Apply security patches for CVE-2026-54225, CVE-2026-57817, CVE-2026-57818, CVE-2026-57819, CVE-2026-61466, CVE-2026-63687, CVE-2026-64958, CVE-2026-65432 when released by Apache.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CXF
Get an email when a new CXF advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2682
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-54225 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-57817 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-57818 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-57819 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-61466 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-63687 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-64958 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-65432 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66909 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownCVE-2026-66909: Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native…nvd
- unknownCVE-2026-65432: Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs…nvd
- unknownCVE-2026-64958: An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of se…nvd
- unknownCVE-2026-57819: Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the …nvd
- unknownCVE-2026-57817: The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` para…nvd
- unknownCVE-2026-54225: Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior …nvd
Recent advisories for Apache CXF
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownCVE-2026-66909: Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native…nvd · 2026-08-06
- unknownCVE-2026-65432: Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs…nvd · 2026-08-06
- unknownCVE-2026-64958: An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of se…nvd · 2026-08-06
- unknownCVE-2026-57819: Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the …nvd · 2026-08-06
- unknownCVE-2026-57817: The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` para…nvd · 2026-08-06
- unknownCVE-2026-54225: Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior …nvd · 2026-08-06
More from CERT-Bund (BSI) Security Advisories
- medium[NEW] [medium] X.Org X11 Server (libXfont2): Multiple vulnerabilities allow execution of arbitrary code with a…2026-08-06
- medium[NEW] [medium] Red Hat OpenShift Container Platform (fast-uri, OpenTelemetry-Go): Multiple vulnerabilities2026-08-06
- high[UPDATE] [high] WSO2 API Manager: Multiple vulnerabilities2026-08-06
- high[UPDATE] [high] Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira and Jira Service Management: …2026-08-06
- medium[UPDATE] [medium] Red Hat OpenShift Container Platform (Router): Vulnerability allows bypassing security measu…2026-08-06