CVE-2026-120367

Vendor

Apache Software Foundation

Product

Apache Axis2/Java

Weakness

CWE-770

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   CVE NVD 3h ago

   Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java.

   Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. The JSON message builders, including the Gson, Moshi and HTTP/2 variants, buffered the entire request body with no size limit, so an…

   Fix available CVE-2026-120367 Apache Software Foundation