CVE-2026-79650 | Apache CXF up to 3.6.12/4.1.8/4.2.3 OIDC relying-party component state redirect

October 9, 2026 Yanac

A vulnerability was found in Apache CXF up to 3.6.12/4.1.8/4.2.3. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component OIDC relying-party component. Performing a manipulation of the argument state results in open redirect.

This vulnerability was named CVE-2026-79650. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More