CVE-2026-40994 - Wss4jSecurityInterceptor disables WS-I BSP validation by default
CVE ID :CVE-2026-40994 Published : June 11, 2026, 5:03 a.m. | 2 hours ago Description :Wss4jSecurityInterceptor initialized its BSP (WS-I Basic Security Profile) compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. Services that validate WS-Security on the...