THREATOPS
THREAT OPSThreat News › CVE-2026-57819: Apache CXF: No default restriction on the amount of form parameters per message

CVE-2026-57819: Apache CXF: No default restriction on the amount of form parameters per message

medoss_secPublished 2026-08-06

<p>Posted by Colm O hEigeartaigh on Aug 06</p>Severity: low <br /> <br /> Affected versions:<br /> <br /> - Apache CXF (org.apache.cxf:cxf-rt-frontend-jaxrs) 4.2.0 before 4.2.3<br /> - Apache CXF (org.apache.cxf:cxf-rt-frontend-jaxrs) 4.0.0 before 4.1.8<br /> - Apache CXF (org.apache.cxf:cxf-rt-frontend-jaxrs) before 3.6.12<br /> <br /> Description:<br /> <br /> Apache CXF allows to set a limit on

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/469