Dashboard / CVE-2026-50633

CVE-2026-50633

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-06-12 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployment descriptor (ra.xml) or runtime activation parameters. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
apache cxf < 4.1.7

References & Advisories (6)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.89%
Raw Score 0.008880
Percentile 59.2%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00888
2026-10-28
0.00888

Intelligence Sources

nvd ref →

External Links