PT-2026-103131 · Apache · Wss4J

N0Mi1K

·

CVE-2026-88920

·

Published

2026-09-30

·

Updated

2026-09-30

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache WSS4J versions prior to 4.0.2 Apache WSS4J versions prior to 3.0.6 Apache WSS4J versions prior to 2.4.4
Description An authentication bypass exists in the DOM security processor. This allows unauthenticated remote attackers to forge authenticated SOAP messages by using a crafted unsigned SAML sender-vouches assertion that contains an attacker-controlled key.
Recommendations Upgrade to version 4.0.2. Upgrade to version 3.0.6. Upgrade to version 2.4.4.

Fix

Improper Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-88920

Affected Products

Wss4J