CVE-2026-91864
published 2026-09-21CVE-2026-91864: A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without counting it against its…
PriorityP341high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.74%
54.2th percentile
A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without counting it against its size limits, exhausting the heap (denial of service).
Users are recommended to upgrade to version 3.2.4, which fixes this issue.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | neethi | < 3.2.4 | 3.2.4 |
| apache | neethi | — | — |
| apache_software_foundation | apache_neethi | < 3.2.4 | 3.2.4 |
| jboss-eap-7 | eap74-els-openjdk11-openshift-rhel8 | — | — |
| jboss-eap-7 | eap74-els-openjdk17-openshift-rhel8 | — | — |
| jboss-eap-7 | eap74-els-openjdk8-openshift-rhel8 | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without counting it against its size limits, exhausting the heap (denial of
ghsa_unreviewed·2026-09-21
CVE-2026-91864 [HIGH] CWE-770 A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without counting it against its size limits, exhausting the heap (denial of
A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without counting it against its size limits, exhausting the heap (denial of service).
Users are recommended to upgrade to version 3.2.4, which fixes this issue.
Red Hat
org.apache.neethi/neethi: Apache Neethi: Denial of Service via crafted WS-Policy documents
vendor_redhat·2026-09-21·CVSS 7.5
CVE-2026-91864 [HIGH] CWE-770 org.apache.neethi/neethi: Apache Neethi: Denial of Service via crafted WS-Policy documents
org.apache.neethi/neethi: Apache Neethi: Denial of Service via crafted WS-Policy documents
A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without counting it against its size limits, exhausting the heap (denial of service).
Users are recommended to upgrade to version 3.2.4, which fixes this issue.
A flaw was found in Apache Neethi. A remote attacker could exploit this vulnerability by sending a specially crafted WS-Policy document. This document can contain unlimited content within a policy assertion, which Neethi processes without proper size limits. This can lead to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
Package: neethi (Red Hat build of Apache Camel 4 for Quarkus
No detection rules found.
No public exploits indexed.
2026-09-21
Published