CVE-2026-12992
published 2026-06-25CVE-2026-12992: A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the…
PriorityP348high7.4CVSS 3.1
AVNACLPRLUINSCCLILAL
EPSS
0.19%
8.5th percentile
A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to FULL, an attacker with Developer-role access can upload a WSDL document containing attacker-controlled import locations, causing the registry to issue HTTP requests to arbitrary internal URLs (server-side request forgery).
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apicurio | apicurio-registry-rhel8 | — | — |
| apicurio | apicurio-registry-rhel9 | — | — |
| redhat | build_of_apicurio_registry | 3.0 – 3.2 | — |
CVSS provenance
nvdv3.17.4HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
vendor_redhat7.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A flaw was found in Apicurio Registry.
ghsa_unreviewed·2026-06-26
CVE-2026-12992 [HIGH] CWE-918 A flaw was found in Apicurio Registry.
A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to FULL, an attacker with Developer-role access can upload a WSDL document containing attacker-controlled import locations, causing the registry to issue HTTP requests to arbitrary internal URLs (server-side request forgery).
Red Hat
Apicurio/apicurio-registry: apicurio-registry: SSRF via wsdl4j import dereference in WSDL FULL validation
vendor_redhat·2026-06-10·CVSS 7.4
CVE-2026-12992 [HIGH] CWE-918 Apicurio/apicurio-registry: apicurio-registry: SSRF via wsdl4j import dereference in WSDL FULL validation
Apicurio/apicurio-registry: apicurio-registry: SSRF via wsdl4j import dereference in WSDL FULL validation
A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to FULL, an attacker with Developer-role access can upload a WSDL document containing attacker-controlled import locations, causing the registry to issue HTTP requests to arbitrary internal URLs (server-side request forgery).
Package: apicurio/apicurio-registry-rhel8 (Red Hat build of Apicurio Registry 3) - Affected
Package: apicurio/apicurio-registry-rhel9 (Red Hat build of Apicurio Registry 3) - Affected
No detection rules found.
No public exploits indexed.
2026-06-25
Published