As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-68536: Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability
Apache MyFaces contains a server-side request forgery and local file inclusion vulnerability affecting versions 2.2 through 4.1. The vulnerability was disclosed on September 16, 2026, with moderate severity.
Why it matters: Organizations running Apache MyFaces must identify affected versions and apply patches to prevent attackers from forging requests or accessing local files on vulnerable systems.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-68536: Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability
CVE-2026-68536 is a server-side request forgery and local file inclusion vulnerability in Apache MyFaces affecting versions 2.2 through 4.1 of the myfaces-impl component. The vulnerability carries a CVSS score of 9.8.
Why it matters: Organizations running Apache MyFaces 2.2, 2.3, 3.0, 4.0, 4.1, or 2.3-next versions should prioritize assessing exposure and applying patches to prevent attackers from forging requests or accessing local files.
- Source published
- First seen by Cybersecurity Tracker