THREAT OPS › Threat News › [NVD] CVE-2026-50634 (MEDIUM 6.5) — A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption
that accepted `Content-Type` or protected HTTP-header metadata came
[NVD] CVE-2026-50634 (MEDIUM 6.5) — A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption that accepted `Content-Type` or protected HTTP-header metadata came
CVE-2026-50634 CVSS: 6.5 MEDIUM Published: 2026-06-12T10:16:23.413
A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption
that accepted `Content-Type` or protected HTTP-header metadata came from a verified signature entry, and may steer downs
Indicators of compromise
- CVE-2026-50634cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-50634