critical9.8
CVE-2026-88920
An authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote attackers to forge authenticated SOAP messages via a craft…
Impact
An authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote attackers to forge authenticated SOAP messages via a crafted unsigned SAML sender-vouches assertion containing an attacker-controlled key. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Wss4j | before 2.4.4 from 3.0.0 before 3.0.6 from 4.0.0 before 4.0.2 |