CVE-2026-49875緊急 9.8Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening conf…
CVE-2026-28369緊急 9.1A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrec…
CVE-2026-28368緊急 9.1A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are par…
CVE-2026-28367緊急 9.1A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be…
CVE-2026-3121高 7.2A flaw was found in Keycloak. An administrator with `manage-clients` permission can exploit a misconfiguration where this permission is equi…