{"id":"CVE-2026-49875","kind":"vulnerability","aliases":["CVE-2026-49875","GHSA-xw5h-cmh3-8j6j"],"related":[],"title":"Apache CXF has Improper Restriction of XML External Entity Reference","description":"Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of-band (OOB) \nexternal entity resolution. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or 3.6.12, which fix this issue.","summary":"Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory build an XML parser without the standard hardening, so attacker-supplied XML can make the server fetch external entities. An attacker can use this to read data from the server and reach internal resources through out-of-band exfiltration.","severity":"critical","cvss":9.8,"epss":0.00516,"exploited":false,"exploited_at":null,"products":[{"name":"org.apache.cxf:cxf-core","fixed":["4.2.2"],"affected":">= 4.2.0, < 4.2.2","ecosystem":"maven"},{"name":"org.apache.cxf:cxf-core","fixed":["4.1.7"],"affected":">= 4.0.0, < 4.1.7","ecosystem":"maven"},{"name":"org.apache.cxf:cxf-core","fixed":["3.6.12"],"affected":"< 3.6.12","ecosystem":"maven"},{"name":"apache cxf","fixed":["4.1.7"],"affected":"< 4.1.7","ecosystem":"vendor"},{"name":"apache cxf","fixed":["4.2.2"],"affected":">= 4.2.0, < 4.2.2","ecosystem":"vendor"}],"ecosystems":["maven","vendor"],"tags":["apache-cxf","cwe-611","java","maven","package","soap","web-services"],"not_affected_if":["no-cxf-core-dependency"],"how_to_check":"- Check the cxf-core version in the project's dependency tree, for example with `mvn dependency:tree | grep cxf-core`\n- Look for cxf-core versions in the range `4.2.0` to `4.2.2` (exclusive), `4.0.0` to `4.1.7` (exclusive), or below `3.6.12`","fix":"- Upgrade `org.apache.cxf:cxf-core` to `4.2.2` on the 4.2 line, to `4.1.7` on the 4.1 line, or to `3.6.12` on the 3.6 line","status":"open","published_at":"2026-06-12T10:16:22+00:00","first_seen_at":"2026-10-26T16:19:36+00:00","triaged_at":"2026-10-26T16:20:15+00:00","updated_at":"2026-10-26T16:31:01+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-26T16:20:15Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade `org.apache.cxf:cxf-core` to `4.2.2` on the 4.2 line, to `4.1.7` on the 4.1 line, or to `3.6.12` on the 3.6 line","reach":"internet","title":"Apache CXF: XML parser resolves external entities, enabling data theft","impact":"medium","summary":"Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory build an XML parser without the standard hardening, so attacker-supplied XML can make the server fetch external entities. An attacker can use this to read data from the server and reach internal resources through out-of-band exfiltration.","category":"package","nicknames":[],"who_cares":["java","maven","apache-cxf","web-services","soap"],"confidence":0.7,"needs_auth":"unknown","worst_case":"server reads local files and reaches internal resources via external entities","analyst_note":"Confirm which CXF code paths (EndpointReferenceUtils, W3CMultiSchemaFactory) are reached by default and whether an unauthenticated request can trigger them; check the GHSA page for details.","how_to_check":"- Check the cxf-core version in the project's dependency tree, for example with `mvn dependency:tree | grep cxf-core`\n- Look for cxf-core versions in the range `4.2.0` to `4.2.2` (exclusive), `4.0.0` to `4.1.7` (exclusive), or below `3.6.12`","needs_analyst":true,"not_affected_if":["no-cxf-core-dependency"],"who_is_affected":"Applications that use Apache CXF cxf-core and parse XML from untrusted sources, such as SOAP or web service endpoints that accept XML from clients, are exposed. The sources do not say which CXF features reach the vulnerable classes in default configuration, so unknown whether all deployments are reached. Projects that do not depend on cxf-core can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000699,"input_tokens":3490,"output_tokens":699,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,20A '-49875':13A,21A '-611':42B '3.6.12':133C '4.1.7':131C '4.2.2':129C '8j6j':18A 'apach':1A,39B,50B,97C 'apache':34A,36A 'apache-cxf':38B 'attack':66B,77B 'attacker-suppli':65B 'band':95B,117C 'build':56B 'class':103C 'cmh3':17A 'configur':112C 'construct':104C 'core':25A,29A,33A 'cve':11A,19A 'cwe':41B 'cxf':2A,24A,28A,32A,35A,37A,40B,51B,98C 'cxf-core':23A,27A,31A 'data':83B 'enabl':113C 'endpointreferenceutil':53B,100C 'entiti':9A,75B,120C 'exfiltr':96B 'extern':8A,74B,119C 'fetch':73B 'fix':135C 'ghsa':15A 'ghsa-xw5h-cmh3-8j6j':14A 'harden':63B,111C 'improp':4A 'intern':89B 'issu':137C 'java':43B 'jaxp':110C 'make':70B 'maven':44B 'necessari':109C 'oob':118C 'org.apache.cxf':22A,26A,30A 'out-of-band':92B,114C 'packag':45B 'parser':59B 'reach':88B 'read':82B 'recommend':124C 'refer':10A 'resolut':121C 'resourc':90B 'restrict':5A 'saxparserfactori':106C 'server':72B,86B 'servic':49B 'soap':46B 'standard':62B 'suppli':67B 'upgrad':126C 'use':79B 'user':122C 'version':128C 'w3cmultischemafactory':55B,102C 'web':48B 'web-servic':47B 'without':60B,107C 'xml':7A,58B,68B 'xw5h':16A","nicknames":[],"mitigations":[],"who_affected":"Applications that use Apache CXF cxf-core and parse XML from untrusted sources, such as SOAP or web service endpoints that accept XML from clients, are exposed. The sources do not say which CXF features reach the vulnerable classes in default configuration, so unknown whether all deployments are reached. Projects that do not depend on cxf-core can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-06-12T10:16:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-xw5h-cmh3-8j6j","url":"https://github.com/advisories/GHSA-xw5h-cmh3-8j6j","severity":"critical","published_at":"2026-06-12T12:31:33+00:00","modified_at":"2026-10-26T16:16:25+00:00","first_seen_at":"2026-10-26T16:19:36+00:00","fetched_at":"2026-10-26T18:02:25+00:00","note":null},{"source":"nvd","external_id":"CVE-2026-49875","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49875","severity":null,"published_at":"2026-06-12T10:16:22+00:00","modified_at":"2026-10-26T11:10:00+00:00","first_seen_at":"2026-10-26T16:31:01+00:00","fetched_at":"2026-10-26T16:31:01+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}