CVE-2026-89238: Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection
Apache WSS4J EncryptedHeader parsing can accept attacker plaintext as the protected header (CVE-2026-89238).
Stories per day · 30 days
2 RSS
1 stories, newest first · one card per story