What is GHSA-93g8-qqv3-mrx8?

GHSA-93g8-qqv3-mrx8 is a security advisory published by GitHub Security Advisories with Critical severity. A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can...

Which CVE IDs does GHSA-93g8-qqv3-mrx8 cover?

GHSA-93g8-qqv3-mrx8 covers the following CVE IDs: CVE-2026-50632. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-93g8-qqv3-mrx8?

GHSA-93g8-qqv3-mrx8 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-93g8-qqv3-mrx8CriticalCVSS 9.8

A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can...

Vendor

GitHub Security Advisories

Published

June 12, 2026

Last Modified

June 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-50632 →

📋 Description

A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache CXF has been identified, which can allow code execution capabilities, if untrusted users are allowed to configure JMS for Apache CXF. Users are recommended to upgrade to versions 4.2.2 or 4.1.7, which fixes this issue.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-50632
https://lists.apache.org/thread/740ghch5z5y675cn2kzgtyo5k37n6qcw
https://github.com/advisories/GHSA-93g8-qqv3-mrx8