Apache Commons Configuration: Schwachstelle ermöglicht Denial of Service
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons Configuration ausnutzen, um einen Denial of Service Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2025-09971 linked CVE
Open advisory with all CVEs
More on Configuration
Other advisories
- MediumCVE-2026-88266An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90…
- HighCVE-2026-125637A flaw was found in the Konflux UI proxy. Hostname values defined in the KonfluxUI custom resource are inserted directly into proxy configuration files witho…
- CriticalCVE-2026-126812blueprintUE Self-Hosted Edition before 4.3.7 contains an insecure default configuration in its Docker Compose examples that sets MYSQL_ALLOW_EMPTY_PASSWORD=y…
- MediumCVE-2026-91872Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log File vulnerability in the configuration …
- HighCVE-2026-106152In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a system configuration setting vulnerability allows an unauthentica…
- HighCVE-2026-122194Microsoft SystemCenter (Malware Protection Engine und Configuration Manager): Mehrere Schwachstellen
- HighCVE-2026-124739A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based b…
- Not ratedosv:CLEANSTART-2026-GT80372Browserslist is a configuration tool for sharing target browsers and Node
Other news entries
- Microsoft SystemCenter (Malware Protection Engine und Configuration Manager): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Microsoft Windows: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Claude Code’s ‘don’t ask again’ button has a secrets-spilling problemNewsCSO Online
- Threat Actors Exploit Openwave, Cisco BroadWorks VulnerabilitiesNewsSecurityWeek
- Commvault rolls out an automated recovery mechanism, promising faster restoration of businessNewsCSO Online
- Cisco Identity Services Engine Authorization Bypass VulnerabilitiesNewsCisco PSIRT
- Meet *sshole, the vulnerability that lets hackers SSH into Linux devicesNewsArs Technica — Security
- Zyxel patches a zero-day hiding behind an old fixNewsCSO Online
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0997
ID