Apache Software Foundation Apache MyFaces

• CVE-2026-76646 High 7.5 Apache MyFaces: Denial of Service via Unbounded Request Parsing 0.6%
• CVE-2026-68536 Critical 9.8 Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability 0.5%