Junglewise Threat Intelligence

CVE-2026-42404: Apache Neethi doesn't impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API

CVE-2026-42404 · Severity: low · CVSS 3.1 · Published 2026-05-01

Technologies: org.apache.neethi:neethi (Maven). Vendors: Maven.

Executive brief

Apache Neethi doesn't impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API

Affected products

  • Maven org.apache.neethi:neethi

Related threats