Apache MyFaces

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 16, 2026
Last mentionedSep 16, 2026

Timeline

2 articles · newest first

CVE-2026-68536: Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability

Apache MyFaces discloses moderate SSRF and local file inclusion vulnerability CVE-2026-68536 affecting all maintained 2.2 through 4.1 branches.

oss-securitySep 16, 15:37 UTC · Sep 16, 2026Vulnerability 2 sourcesCVE-2026-685361

CVE-2026-76646: Apache MyFaces: Denial of Service via Unbounded Request Parsing

Apache MyFaces fixes critical CVE-2026-76646, a remote denial-of-service flaw triggered by crafted request parameters across versions 2.2.0-4.1.3.

oss-securitySep 16, 15:35 UTC · Sep 16, 2026Vulnerability 2 sourcesCVE-2026-766461 · 1 read

Related CVEs

by mentions

CVE-2026-685369.8
SSRF and Local File Inclusion in Apache MyFaces Core
published Sep 16, 2026Apache MyFaces Core (2.3 branch)
CVE-2026-766467.5
Denial of Service via Unbounded Request Parameter Parsing in Apache MyFaces
published Sep 16, 2026Apache MyFaces

Appears with

Apachevendor · 2

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 16, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.