F5 Networks Cxf
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in F5 Networks Cxf.
Recent F5 Networks Cxf Security Advisories
| Advisory | Title | Published |
|---|---|---|
| K000164213 | K000164213: Apache CXF vulnerability CVE-2026-50623 | November 12, 2026 |
By the Year
In 2026 there have been 1 vulnerability in F5 Networks Cxf with an average score of 4.8 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 4.80 |
It may take a day or so for new Cxf vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent F5 Networks Cxf Security Vulnerabilities
Auth Bypass via Missing Throw in Apache CXF OAuth2 Introspection <4.2.2
CVE-2026-50623
4.8 - Medium
- June 12, 2026
An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService in Apache CXF. Due to a missing 'throw' keyword in the security context check, the introspection endpoint (/services/oauth2/introspect) can be accessed by any unauthenticated network attacker. However note that this is a safeguard only in the case that someone forgot to enable authentication on the service. Users are recommended to upgrade to version 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue.
authentification
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for F5 Networks Cxf or by F5 Networks? Click the Watch button to subscribe.
