What is CVE-2026-57819?
CVE-2026-57819 is a vulnerability in Apache CXF where no default limit is set on the number of form parameters in JAX-RS messages. This can lead to denial of service attacks by sending requests with a very large number of form parameters. Users are recommended to configure the `maxFormParameterCount` option to mitigate the risk.
Azərbaycanca: CVE-2026-57819 Apache CXF-də JAX-RS mesajlarında forma parametrlərinin sayına limit qoyulmaması səbəbindən yaranan zəiflikdir. Təcavüzkar çox sayda parametr göndərərək denial of service (DoS) hücumu həyata keçirə bilər. İstifadəçilərə `maxFormParameterCount` konfiqurasiyasını tətbiq etmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-400; shared vendor: Apache
FAQ2
In which product was CVE-2026-57819 discovered, and what is its root cause?
CVE-2026-57819 was discovered in Apache CXF. The root cause is that no default limit is set on the number of form parameters in JAX-RS messages.
What type of attack can be performed by exploiting CVE-2026-57819, and what is the recommended mitigation?
An attacker can perform a denial of service (DoS) attack by sending requests with a very large number of form parameters. Users are recommended to configure the `maxFormParameterCount` option to mitigate the risk.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.