Medium 2 vendors · 2 advisories

CVE-2026-42404

Unified cross-vendor view: this CVE is referenced by 2 tracked vendors. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Apache1 advisory

Medium6.5Apache Neethi: Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the Po…May 1, 2026

Linux1 advisory

Medium5.3Information disclosure and network access bypass via PolicyReference APIMay 1, 2026