VulnSocial

CVE-2026-68536Patch

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported versions may also be affected.  Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4, which fix this issue.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-09-19); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-19: 1Mentions · 2026-09-21: 1Patch / Workaround · 2026-09-19: 1Patch / Workaround · 2026-09-21: 1Technical Details · 2026-09-19: 1Technical Details · 2026-09-21: 109-1909-21
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Ryx@PadhiyarRushi
    Patch

    Apache MyFaces SSRF / LFI at CVSS 9.8! CVE-2026-68536: Server-Side Request Forgery and Local File Inclusion in Apache MyFaces Core. Fixed in 2.3.12, 3.0.4, 4.0.4, 4.1.4. Java app-server components remain a reliable high-impact class. https://cve.circl.lu/vuln/cve-2026-68536 #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #AppSec #Java

    Post summary

    The tweet discloses CVE-2026-68536 affecting Apache MyFaces Core, noting SSRF/LFI with CVSS 9.8, and states that fixes are available in versions 2.3.12, 3.0.4, 4.0.4, and 4.1.4.

    02052465
    954 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    🌐 Apache MyFaces Core has a critical SSRF + Local File Inclusion flaw. CVE-2026-68536 scores 9.8. Upgrade to 2.3.12, 2.3-next-M9, 3.0.4 or 4.0.x now. #cybersecurity #ciso #cto #vulnerabilities #msp https://secalerts.co/vulnerability/CVE-2026-68536?utm_campaign=x https://t.co/x0t3AjS6ym

    Post summary

    The text highlights a critical SSRF and Local File Inclusion vulnerability in Apache MyFaces Core (CVE-2026-68536) scoring 9.8, with the primary focus being the availability of patches in versions 2.3.12, 2.3-next-M9, 3.0.4, and 4.0.x.

    0000095
    889 followersView on X

Explore more

Back to dashboard