Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OmniFaces is a utility library for Faces. Prior to versions 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3, there is a server-side EL injection leading to Remote Code Execution (RCE). This affects applications that use CDNResourceHandler with a wildcard CDN mapping (e.g. libraryName:*=https://cdn.example.com/*). An attacker can craft a resource request URL containing an EL expression in the resource name, which is evaluated server-side. This issue has been patched in versions 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-41883 Server-Side EL Injection Remote Code Execution in OmniFaces Prior to 5.2.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41883
Post summary
The text announces CVE-2026-41883, a server‑side EL injection leading to remote code execution in OmniFaces versions older than 5.2.3, but provides no PoC, exploit, active exploitation, or patch details.
CVE-2026-41883 OmniFaces is a utility library for Faces. Prior to versions 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3, there is a server-side EL injection leading to Remote Code Exec… https://www.cve.org/CVERecord?id=CVE-2026-41883
Post summary
CVE-2026-41883 identifies a server‑side EL injection in OmniFaces that permits remote code execution on versions before 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3, with a link to the official CVE record.