Critical Apache WSS4J Vulnerabilities Fixed in Update
ID: 236492bd-3015-59cd-a019-45c0b7ed5030
STIX ID: report--236492bd-3015-59cd-a019-45c0b7ed5030
Feed Name: securityonline.info
Threat Score
Six vulnerabilities in Apache WSS4J (affecting versions prior to 4.0.2 / 3.0.6 / 2.4.4), including a critical CVE-2026-88920 (CVSS 9.8) that enables forged authenticated messages and other flaws causing XML signature wrapping, nonce replay, weak keys, and an integer-overflow DoS; administrators should update to the released patched versions immediately.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.