Apache Axis 1.x (EOL) vulnerabilities

1 known vulnerability in Apache Axis 1.x (EOL) from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache Axis 1.x (EOL): Use of Externally-Controlled Input to Select Classes or Code

  CVE-2026-90436Nov 6, 2026ApacheEPSS 1.13%

  ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP <Fault> carries a <detail><exceptionName> element, Axis loads the named class and, if a String <data> ele