CVE-2026-65432: Apache CXF: XXE via WSDL/XSD import parsing

<p>Posted by Colm O hEigeartaigh on Aug 06</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache CXF (org.apache.cxf:cxf-rt-wsdl) 4.2.0 before 4.2.3<br /> - Apache CXF (org.apache.cxf:cxf-rt-wsdl) 4.0.0 before 4.1.8<br /> - Apache CXF (org.apache.cxf:cxf-rt-wsdl) before 3.6.12<br /> <br /> Description:<br /> <br /> Apache CXF reads a top-level WSDL through its hardened Stax