{"data":{"id":"f6bab743-01bc-4f40-929e-7abc14891075","title":"CVE-2026-57819: Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the \"maxFormParameterCount\" co","summary":"Apache CXF, a web services framework, has a vulnerability where it doesn't set a default limit on how many form parameters (data fields submitted in a web request) it will accept. This can allow attackers to send requests with extremely large numbers of parameters, causing a denial of service attack (making the service unavailable by overwhelming it with resource consumption).","solution":"Users are recommended to upgrade to versions 4.2.3, 4.1.8, or 3.6.12, which fix this issue by using a default limit of 500 parameters.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-57819","publishedAt":"2026-08-06T11:16:30.237Z","cveId":"CVE-2026-57819","cweIds":["CWE-400"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Apache CXF"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-06T11:16:30.237Z","capecIds":["CAPEC-125","CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.72,"researchCategory":null,"atlasIds":null}}