Apache Apache Myfaces
2 CVEs affecting Apache Apache Myfaces. Latest disclosed: 2026-09-16. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-68536 | Critical | 9.8 | 2026-09-16 | Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected. Users are recommended to upgrade… |
CVE-2026-76646 | High | 7.5 | 2026-09-16 | A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service co… |