CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE

Threat Score:
86
OSS Security
4 hours ago
CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE

Overview

Limited Content Available

We were unable to pull all insights from this article. Clustering, as well as Threat and Business intelligence may be limited.

oss-secmailing list archives CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE Current thread: CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCEColm O hEigeartaigh (Aug 07)...

Related Articles

5 articles
2

SonicWall Confirms No New SSLVPN 0-Day – Ransomware Attack Linked to Old Vulnerability

Cybersecurity News • 5 hours ago

Cybersecurity firm SonicWall has officially addressed recent concerns a potential new zero-day vulnerability in its Secure Sockets Layer Virtual Private Network (SSLVPN) products. In a statement to Cybersecurity News, the company confirmed that recent ransomware attacks are not the result of a new flaw, but are instead linked to a previously identified and patched […]

Score
82
Read more
5
SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw

SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw

BleepingComputer • 7 hours ago

SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw Bill Toulas August 7, 2025 11:27 AM 0 SonicWall says that recent Akira ransomware attacks exploiting Gen 7 firewalls with SSLVPN enabled are exploiting an older vulnerability rather than a zero-day flaw. The company says that the attackers are targeting CVE-2024-40766, an unauthorized access flaw fixed in August 2024. "We now have high confidence that the recent SSLVPN activity is not connected to a zero-day vulnerability,

Score
80
Read more