Axway CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Axway CVE published 2026-07-29

CVE-2026-9177

CVE-2026-9177 is a Server-Side Template Injection (SSTI) vulnerability in Axway SecureTransport version 5.5-20260326. An attacker with admin privileges can inject arbitrary Java code expressions, leading to full host compromise. This issue affects all Axway SecureTransport versions prior to 5.5-20260528 update. The vulnerability requires immediate attention due to its critical severity and potential for f [truncated]