CVE-2026-108039 | Apache CXF up to 3.6.12/4.1.8/4.2.3 StaxUtils denial of service

October 9, 2026 Yanac

A vulnerability has been found in Apache CXF up to 3.6.12/4.1.8/4.2.3 and classified as problematic. This impacts an unknown function of the component StaxUtils. This manipulation causes denial of service.

This vulnerability is handled as CVE-2026-108039. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More