CVE-2026-86463 | Apache CXF up to 3.6.12/4.1.8/4.2.3 Query Parser resource consumption

October 9, 2026 Yanac

A vulnerability classified as problematic has been found in Apache CXF up to 3.6.12/4.1.8/4.2.3. Impacted is an unknown function of the component Query Parser. Performing a manipulation results in resource consumption.

This vulnerability is reported as CVE-2026-86463. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More