Apache Axis 1.x unauthenticated remote class instantiation via SOAP (CVE-2026-90436)
Deserialization of inbound SOAP faults in Apache Axis 1.x allows unauthenticated remote class instantiation; unsupported as end-of-life.
Stories per day · 30 days
1 stories, newest first · one card per story