OSV security advisoryCritical
Critical advisory for org
ROOT-APP-MAVEN-CVE-2026-49875 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
orgJava ecosystem
Advisory overview
Root has patched CVE-2026-49875 in the org.apache.cxf:cxf-core package for Root:Maven. Multiple fixed versions available.
Affected packages and releases
Root:Maven / org.apache.cxf:cxf-core
introduced: 0 · fixed: 4.0.11-aikido.1
Root:Maven / io.root.org.apache.cxf:cxf-core
introduced: 0 · fixed: 4.0.11-root.io.1
