CVE-2026-107937

In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300 characters) and attachment-headers-max-count (default 500) limits. The size limit was applied only to each physical line, not to a header value built from continuation lines or to the combined values of a repeated header. The count limit was checked against the number of distinct header names, not the total number of header lines. A remote, unauthenticated attacker could send a multipart request with very large folded or repeated part headers. The server would then allocate memory without bound, causing a denial of service.  Users are recommended to upgrade to versions 4.2.4 or 4.1.9 or 3.6.13, which fix this issue.

• https://lists.apache.org/thread.html/x9twtpv3d04qj83t6w9xkh9y2q28zztj
• https://www.openwall.com/lists/oss-security/2026/10/09/12

Published

Oct 9, 2026

Last Modified

Oct 9, 2026

Status

Undergoing Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-107908A heap-based out-of-bounds write in the BoltReadHandler func…9.8
• CVE-2026-107909A heap-based out-of-bounds write in the ws_read_frame functi…9.1
• CVE-2026-107910An improper authentication vulnerability in the is_authentic…8.1
• CVE-2026-107911A type confusion vulnerability in the _read_flags function (…7.5
• CVE-2026-107914Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn…7.8
• CVE-2026-107935A path traversal vulnerability was found in gvproxy, the net…9.3
• CVE-2026-107938In Apache CXF, the Netty-based HTTP client transport (cxf-rt…
• CVE-2026-10795The UpdraftPlus: WP Backup & Migration Plugin plugin for Wor…8.1
• CVE-2026-10796nvm (Node Version Manager) through 0.40.4 executes arbitrary…7.5
• CVE-2026-1080GitLab has remediated an issue in GitLab EE affecting all ve…4.3
• CVE-2026-10800A weakness has been identified in PaddlePaddle FastDeploy up…3.6
• CVE-2026-10801A security vulnerability has been detected in modelscope ms-…3.6