CVE-2026-42404 — Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a polic — CVE Database · The Intelligence Room