CVE-2026-73095

Vendor

Apache Software Foundation

Product

Apache Juneau

CVSS v4.0

8.7 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-770

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 30
   CVE NVD 2h ago

   Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau.

   Allocation of Resources Without Limits or Throttling vulnerability in Apache Juneau. The MessagePack parser, which the REST server enables by default, sizes buffers from length values in the input. An unauthenticated client can…

   CVSS 8.7 Fix available CVE-2026-73095 Apache Software Foundation