< Back

CVE-2026-88920

Updated on 30 Sep 2026

Severity

9.8 Critical severity

Details

CVSS score
9.8
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

An authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote attackers to forge authenticated SOAP messages via a crafted unsigned SAML sender-vouches assertion containing an attacker-controlled key.

Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.

Details

Affected product:
Apache CXF , Spring , Wildfly , jbossws-cxf , ws-wss4j
Affected packages:
wss4j-ws-security-dom @ 2.4.1-jbossorg-1 (+1199 more)