Apache Wss4j Vulnerabilities

Apache Apache Wss4j vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

30 September 2026

Integer Overflow Vulnerability in WSS4J Affects Apache Software Foundation
CVE-2026-95616
ApacheApache Wss4j7.5HIGH
Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce
CVE-2026-92899
ApacheApache Wss4j4.8MEDIUM
Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference
CVE-2026-92121
ApacheApache Wss4j
Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection
CVE-2026-89238
ApacheApache Wss4j
Authentication Bypass in Apache WSS4J Affects SOAP Message Processing
CVE-2026-88920
ApacheApache Wss4j
Vulnerability in StAX Streaming WS-SecurityPolicy Validator in Apache Products
CVE-2026-87830
ApacheApache Wss4j
Vulnerability in Apache WSS4J Allows Attacker-Controlled Key Management
CVE-2026-85532
ApacheApache Wss4j