THREAT OPS › Threat News › CVE-2026-68536: Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability
CVE-2026-68536: Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability
<p>Posted by Volodymyr Siedlecki on Sep 16</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache MyFaces (org.apache.myfaces.core:myfaces-impl) 2.2.*<br /> - Apache MyFaces (org.apache.myfaces.core:myfaces-impl) 2.3.*<br /> - Apache MyFaces (org.apache.myfaces.core:myfaces-impl) 3.0.*<br /> - Apache MyFaces (org.apache.myfaces.core:myfaces-impl) 4.0.*<br /> - Apache MyFaces
Indicators of compromise
- CVE-2026-68536cve
Original source: https://seclists.org/oss-sec/2026/q3/810