[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVCGQHsOQIg_TVaGzu9otjtejahXC4EKJ9Wr2ePPbr1k":3,"g5a-risk:CVE-2026-95616":120},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":26,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":54,"weaknesses":55,"weaknessesCount":41,"isActivelyExploited":64,"cisaInfo":26,"otxData":26,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":108,"notableEvents":109},"CVE-2026-95616","What is CVE-2026-95616?","An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's key reference, before the message is authenticated, so an eleven-byte extension triggers a 2 GB allocation. Repeated requests exhaust server memory.\nUsers are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.","An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an...","2026-09-30T13:17:28.863","2026-10-06T17:21:33.233",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":31},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[],[],[],0.00409,[32,32,32,32,32,32,32],"High",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"apache","wss4j","*","cpe:2.3:a:apache:wss4j:*:*:*:*:*:*:*:*",1,[43,49],{"url":44,"source":45,"tags":46},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fsdf0fsphkg4qbj7nh2brjgwvcmd67hct","Apache",[47,48],"Vendor Advisory","Mailing List",{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F09\u002F30\u002F14","Openwall",[48,53],"Third Party Advisory",2,[56],{"id":57,"name":58,"description":59,"extendedDescription":60,"status":61,"abstraction":62,"structure":63},"CWE-190","Integer Overflow or Wraparound","The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","","Stable","Base","Simple",false,[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2026-95616? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-95616, a high severity cyber security vulnerability from 2026. An integer overflow in WSS4J's DER bounds check lets an ove...","CVE-2026-95616, CVE-2026-95616 vulnerability, CVE-2026-95616 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, apache security, wss4j vulnerability","\u002Fwhat-is\u002Fcve-2026-95616",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":10,"dateModified":11,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-95616","Cybersecurity","CVE-2026-95616, CVE-2026-95616 vulnerability, CVE-2026-95616 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92],{"Operator":26,"Negate":26,"Nodes":93},[94],{"Operator":95,"Negate":64,"CPEMatch":96},"OR",[97,100,104],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":98,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":99,"VersionEndIncluding":26},"A3409718-5467-407D-9B51-14E58B6D2F68","2.4.4",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":101,"VersionStartExcluding":26,"VersionStartIncluding":102,"VersionEndExcluding":103,"VersionEndIncluding":26},"31AFF243-7BCE-44BC-85C5-6FE257642C13","3.0.0","3.0.6",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":105,"VersionStartExcluding":26,"VersionStartIncluding":106,"VersionEndExcluding":107,"VersionEndIncluding":26},"20E76C98-444D-4DB5-91E0-90E84C196158","4.0.0","4.0.2",[],[110],{"id":111,"eventType":112,"eventTime":113,"details":114,"label":115,"color":116},"1c89ee3b-9266-4669-9a1c-a43678ae1e71","NEW_NVD","2026-10-01T04:01:46.778851+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":118,"version":119},1792248927948,"2.0",{"score":121,"band":122,"action":123,"scoredAt":124},47,"Medium","Plan remediation","2026-10-16T07:18:19.702021+00:00"]