Apache MyFaces

2 known vulnerabilities in Apache MyFaces, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-76646 CVSS 7.5 high A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a…
CVE-2026-68536 CVSS 9.8 critical Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected. Users are…