THREATOPS
THREAT OPSThreat News › CVE-2026-68536: Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability

CVE-2026-68536: Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability

medoss_secPublished 2026-09-16

<p>Posted by Volodymyr Siedlecki on Sep 16</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache MyFaces (org.apache.myfaces.core:myfaces-impl) 2.2.*<br /> - Apache MyFaces (org.apache.myfaces.core:myfaces-impl) 2.3.*<br /> - Apache MyFaces (org.apache.myfaces.core:myfaces-impl) 3.0.*<br /> - Apache MyFaces (org.apache.myfaces.core:myfaces-impl) 4.0.*<br /> - Apache MyFaces

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/810