VYPR

axis-axis1-java

by Apache

CVEs (1)

  • CVE-2026-90436Nov 6, 2026
    risk 0.00cvss —epss —

    ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also…