PT-2026-141742

CVE-2026-111264

·

Published

2026-11-10

·

Updated

2026-11-10

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions Apache (affected versions not specified)
Description Security constraints for EJB JAX-WS endpoints with configured authentication only protect specific HTTP methods. This allows a remote unauthenticated attacker to bypass authentication by utilizing different HTTP methods when sending requests.
Recommendations Upgrade to version 10.3.0. Upgrade to version 11.0.0-M2.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-288: Authentication Bypass Using an Alternate Path or Channel
Related identifiers
CVE-2026-111264
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com