Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache MyFaces

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-68536

    Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability

    Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected.  Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4, which fix this issue.

    Apache Software Foundation Apache MyFaces