Apache Axis 1.x (<= 1.4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/apache-axis-1.x--1.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 06 Nov 2026 17:23:11 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgApache Axis: Unauthenticated remote class instantiation (CVE-2026-90436)https://feed.craftedsignal.io/briefs/2026-11-apache-axis-cve-2026-90436/Fri, 06 Nov 2026 17:23:11 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-apache-axis-cve-2026-90436/Apache Axis 1.x (EOL) is vulnerable to unauthenticated remote class instantiation via deserialization of an inbound SOAP fault.<p>Apache Axis 1.x (EOL) contains a vulnerability where the deserialization of an inbound SOAP fault allows unauthenticated remote class instantiation.</p> criticaladvisory