CVE-2026-85532

Apache WSS4J: Insufficient Validation of Derived-Key Parameters

State: Published
Severity: 7.5 High
Published: Sep 30, 2026
Updated: Sep 30, 2026
Reserved: Sep 4, 2026

Description

Apache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could permit cryptographically weak keys or excessive CPU and memory consumption when processing crafted WS-Security messages. The fixes enforce a minimum key length of 16 bytes, a maximum length of 512 bytes, and a maximum offset of 4096 bytes. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-20 Improper input validation

Affected Products

Product	Versions
Apache WSS4JApache Software Foundation	4.0.0 to before 4.0.2Affected 3.0.0 to before 3.0.6Affected before 2.4.4Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.