CVE-2026-61466 | Apache CXF up to 3.6.11/4.1.7/4.2.2 Dynamic Client Registration privileges management

A vulnerability described as critical has been identified in Apache CXF up to 3.6.11/4.1.7/4.2.2. Affected by this issue is some unknown functionality of the component Dynamic Client Registration. Such manipulation leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2026-61466. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More