CVE-2026-107937 | Apache CXF up to 3.6.12/4.1.8/4.2.3 Parser denial of service

October 9, 2026 Yanac

A vulnerability was found in Apache CXF up to 3.6.12/4.1.8/4.2.3 and classified as problematic. Affected is an unknown function of the component Parser. Such manipulation leads to denial of service.

This vulnerability is uniquely identified as CVE-2026-107937. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More