Apache Myfaces (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-16. Vendor: Apache Software Foundation.

CVEs of Apache Myfaces

• CVE-2026-76646 - CVSS 7.5 (high), 2026-09-16: A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service…
• CVE-2026-68536 - CVSS 9.8 (critical), 2026-09-16: Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected.  Users are recommended to upgrade…