Skip to content

CVE record · 1 source

CVE-2026-123779

Direct Request ('Forced Browsing') vulnerability in Apache Axis2/Java.

Vendor: Apache Software Foundation
Product: Apache Axis2/Java
Weakness: CWE-425
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 3h ago

Direct Request ('Forced Browsing') vulnerability in Apache Axis2/Java.

Direct Request ('Forced Browsing') vulnerability in Apache Axis2/Java. The exposeServiceMetadata service parameter was enforced only on the ?wsdl, ?wsdl2 and ?xsd queries. For a service that had disabled it, the packaged .wsdl…

Fix available CVE-2026-123779 Apache Software Foundation