CVE update for 26.0.0.11 #8583

|https://www.cve.org/CVERecord?id=CVE-2026-101294[CVE-2026-101294]
|8.7
|Improper Verification of Cryptographic Signature
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the openidConnectClient-1.0, openidConnectServer-1.0, socialLogin-1.0, jwt-1.0, and jwtSso-1.0 features

|https://www.cve.org/CVERecord?id=CVE-2026-103320[CVE-2026-103320]
|4.3
|Information Disclosure
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the restConnector-2.0 feature

|https://www.cve.org/CVERecord?id=CVE-2026-103499[CVE-2026-103499]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, and servlet-6.1 features

|https://www.cve.org/CVERecord?id=CVE-2026-105442[CVE-2026-105442]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the messagingServer-3.0, and wasJmsServer-1.0 features

|https://www.cve.org/CVERecord?id=CVE-2026-108284[CVE-2026-108284]
|6.5
|Information Disclosure
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the restConnector-2.0 feature

|https://www.cve.org/CVERecord?id=CVE-2026-10844[CVE-2026-10844]
|4.3
|Open Redirect
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the appSecurity-1.0, appSecurity-2.0, appSecurity-3.0, appSecurity-4.0, appSecurity-5.0, and appSecurity-6.0 features

|https://www.cve.org/CVERecord?id=CVE-2026-11547[CVE-2026-11547]
|4.3
|Server-Side Request Forgery
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the adminCenter-1.0 feature

|https://www.cve.org/CVERecord?id=CVE-2026-17615[CVE-2026-17615]
|7.5
|Improper Restriction of XML External Entity Reference
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the restfulWS-3.0, restfulWS-3.1, and restfulWS-4.0 features

|https://www.cve.org/CVERecord?id=CVE-2026-76646[CVE-2026-76646]
|7.5
|Denial of Service
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the jsf-2.2, faces-3.0, faces-4.0, and faces-4.1 features

|https://www.cve.org/CVERecord?id=CVE-2026-78636[CVE-2026-78636]
|4.3
|Information Disclosure 
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the restConnector-2.0 feature

|https://www.cve.org/CVERecord?id=CVE-2026-93895[CVE-2026-93895]
|9.1
|Authorization Bypass
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the grpc-1.0 feature

|https://www.cve.org/CVERecord?id=CVE-2026-93905[CVE-2026-93905]
|8.2
|Deserialization of Untrusted Data
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the batchManagement-1.0 feature

|https://www.cve.org/CVERecord?id=CVE-2026-93909[CVE-2026-93909]
|9.1
|Authentication Bypass
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the samlWeb-2.0 feature

|https://www.cve.org/CVERecord?id=CVE-2026-68536[CVE-2026-68536]
|9.8
|Server-Side Request Forgery
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the jsf-2.2, faces-3.0, faces-4.0, and faces-4.1 features

|https://www.cve.org/CVERecord?id=CVE-2026-95695[CVE-2026-95695]
|7.4
|Authorization Bypass
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the grpc-1.0 feature

|https://www.cve.org/CVERecord?id=CVE-2026-95696[CVE-2026-95696]
|6.5
|Information Disclosure
|17.0.0.3-26.0.0.10
|26.0.0.11
|Affects the grpc-1.0 feature