CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. It affects Apache. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Detected Signals
code execution
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2026-50633
Severity
HIGH
CVSS
8.1
EPSS
0.86%
Apache
Original NVD Description
A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployment descriptor (ra.xml) or runtime activation parameters. Users are recommended to upgrade to versions 4.2.2 or 4.1.7, which fixes this issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)