Advisories · Technology

Apache Software Foundation Apache MyFaces.

Every CVE that names Apache Software Foundation Apache MyFaces among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76646 CVE record

CVSS 7.5 High

Apache MyFaces: Denial of Service via Unbounded Request Parsing
- Apache Software Foundation Apache MyFaces
- Denial of service
Not analysed yet 16 Sept 2026
CVE-2026-68536 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability
- Apache Software Foundation Apache MyFaces
- Server-side request forgery (SSRF)
Not analysed yet 16 Sept 2026