Unrated severityNVD Advisory· Published May 22, 2026· Updated May 22, 2026
Apache CXF: LDAP Injection vulnerability in XKMS LDAP Repository
CVE-2026-44930
Description
An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates from the repository. Users are recommended to upgrade to versions 4.2.1, 4.1.6 or 3.6.11, which fix this issue.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- lists.apache.org/thread/c1zqxppo1m5z3kbdhjn5p991zk09ynkhmitrevendor-advisory
News mentions
0No linked articles in our index yet.