CVE-2026-57818 | Apache CXF up to 3.6.11/4.1.7/4.2.2 JCacheCodeDataProvider toctou

August 6, 2026 Yanac

A vulnerability marked as critical has been reported in Apache CXF up to 3.6.11/4.1.7/4.2.2. Affected by this vulnerability is an unknown functionality of the component JCacheCodeDataProvider. This manipulation causes time-of-check time-of-use.

This vulnerability is handled as CVE-2026-57818. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More