Package · Maven

org.apache.cxf:cxf-rt-ws-transfer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2026-44618

Apache CXF: XXE vulnerability in WS-Transfer functionality

Insecure XML parser configuration in Apache CXF's WS-Transfer module may allow attackers to perform XXE attacks. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue.

Apache Software Foundation Apache CXF org.apache.cxf:cxf-rt-ws-transfer Maven

May 22, 2026