Skip to content

CVE record · 1 source

CVE-2026-111249

The development-time LiveReload support listens on all network interfaces without authentication and accepts websocket connections from any origin.

Vendor: Apache Software Foundation
Product: Apache TomEE
Weakness: CWE-1327
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 2h ago

The development-time LiveReload support listens on all network interfaces without authentication and accepts websocket connections from any origin.

The development-time LiveReload support listens on all network interfaces without authentication and accepts websocket connections from any origin. A network attacker, or a web page visited by the developer, can observe the names…

Fix available CVE-2026-111249 Apache Software Foundation