CVE-2026-42402

Apache Neethi Patches Triple Threat of DoS and Redirection Flaws

Apache Neethi Vulnerabilities WS-Policy Denial of Service

Apache Neethi Patches Triple Threat of DoS and Redirection Flaws

Do Son May 5, 2026

Apache Neethi v3.2.2 patches critical flaws, including an exponential complexity attack and infinite loops. Secure your Java web services and patch today!

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-102895CVSS 9.8
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
Watchtower Verified📅 Updated: Nov 5, 2026
CVE-2026-115732CVSS 9.0
Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
Admin intel📅 Updated: Nov 4, 2026
CVE-2026-98432CVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
Admin intel📅 Updated: Nov 4, 2026
CVE-2026-107441CVSS 8.8
An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
Admin intel📅 Updated: Nov 4, 2026
CVE-2019-25779CVSS 7.5
The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
Watchtower Verified📅 Updated: Nov 4, 2026
CVE-2023-54413CVSS 6.1
The WPML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the wp_lang parameter in versions up...
Watchtower Verified📅 Updated: Nov 4, 2026
CVE-2024-27834CVSS 5.5
The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS...
CISA KEV📅 Added to KEV: Nov 4, 2026
CVE-2026-81648CVSS 10.0
The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of...
Admin intel📅 Updated: Nov 3, 2026

CVE-2025-64063CVSS 9.8
Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard...
📅 Updated: Nov 4, 2026
CVE-2025-51742CVSS 9.8
An issue was discovered in jishenghua JSH_ERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter directly to...
📅 Updated: Nov 4, 2026
CVE-2025-50402CVSS 9.8
FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter string fac_password.
📅 Updated: Nov 4, 2026
CVE-2025-50399CVSS 9.8
FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter password.
📅 Updated: Nov 4, 2026
CVE-2025-65235CVSS 9.8
OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via...
📅 Updated: Nov 4, 2026
CVE-2025-65236CVSS 9.8
OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session...
📅 Updated: Nov 4, 2026
CVE-2025-55469CVSS 9.8
Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend.
📅 Updated: Nov 4, 2026
CVE-2025-65669CVSS 9.1
An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page...
📅 Updated: Nov 4, 2026