https://vulnerability.circl.lu/sightings/feed 2026-08-07T22:40:51.578147+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/594af0f7-4180-43d5-a893-cfcbf7485ec8/export 2026-08-07T22:40:51.603757+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "594af0f7-4180-43d5-a893-cfcbf7485ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfywzjdvg2y", "content": "\ud83d\udccc CVE-2026-50622 - Description:\nMissing Authorization\u00a0in Apache Atlas.\nA missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated u... https://www.cyberhub.blog/cves/CVE-2026-50622", "creation_timestamp": "2026-08-06T12:07:06.625337Z"} 2026-08-06T12:07:06.625337+00:00 https://vulnerability.circl.lu/sighting/8f3c645d-4dd2-485f-9aef-5bbddfe5030d/export 2026-08-07T22:40:51.606532+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8f3c645d-4dd2-485f-9aef-5bbddfe5030d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5062", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msfimwvxgu23", "content": "CVE-2026-5062 pretty-link (CVSS Score 4.9) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T07:15:08.153033Z"} 2026-08-06T07:15:08.153033+00:00 https://vulnerability.circl.lu/sighting/2631bf78-5d03-46af-b1db-c10d5ea4f1a4/export 2026-08-07T22:40:51.606706+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2631bf78-5d03-46af-b1db-c10d5ea4f1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5062", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4wo5wjdsnkavp", "content": "CVE-2026-5062 - PrettyLinks\nCVE ID : CVE-2026-5062\n \n Published : Aug. 5, 2026, 5:27 a.m. | 49\u00a0minutes ago\n \n Description : The PrettyLinks \u2013 Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL Injection...", "creation_timestamp": "2026-08-05T06:42:43.479002Z"} 2026-08-05T06:42:43.479002+00:00 https://vulnerability.circl.lu/sighting/624d338b-a89f-42f3-9d82-a28e5adabfff/export 2026-08-07T22:40:51.606822+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "624d338b-a89f-42f3-9d82-a28e5adabfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrrqpxictt2a", "content": "CVE-2026-50622 - Apache Atlas: Missing Authorization on Admin Endpoints\nCVE ID : CVE-2026-50622\n \n Published : July 29, 2026, 9:10 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Description:\nMissing Authorization\u00a0in Apache Atlas.\nA missing authorization vulnerability in Apache...", "creation_timestamp": "2026-07-29T10:46:44.514940Z"} 2026-07-29T10:46:44.514940+00:00 https://vulnerability.circl.lu/sighting/f9ecdad7-b908-46d5-9057-c91daf3165fb/export 2026-08-07T22:40:51.606944+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f9ecdad7-b908-46d5-9057-c91daf3165fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrrfmf67nj24", "content": "CVE-2026-50622: Apache Atlas: Missing Authorization on Admin Endpoints", "creation_timestamp": "2026-07-29T07:27:53.502711Z"} 2026-07-29T07:27:53.502711+00:00 https://vulnerability.circl.lu/sighting/7a01ce37-5383-4f01-a352-fd7898910edc/export 2026-08-07T22:40:51.607049+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7a01ce37-5383-4f01-a352-fd7898910edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50628", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mqng6a55dz2o", "content": "A critical-severity fix just shipped for Apache Cxf. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-50628", "creation_timestamp": "2026-07-15T00:02:01.822109Z"} 2026-07-15T00:02:01.822109+00:00 https://vulnerability.circl.lu/sighting/cb0efa86-c003-4c66-93c0-0689470a5f4c/export 2026-08-07T22:40:51.607153+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cb0efa86-c003-4c66-93c0-0689470a5f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50627", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppaqcro5i2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50627 \u0432 Apache CXF: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E2F6BBC9-E0A1-46F0-AD11-D08B49F95233", "creation_timestamp": "2026-07-03T00:04:53.909953Z"} 2026-07-03T00:04:53.909953+00:00 https://vulnerability.circl.lu/sighting/bd0c9a71-fdc8-41ec-a1cd-ccaae7dce911/export 2026-08-07T22:40:51.607258+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bd0c9a71-fdc8-41ec-a1cd-ccaae7dce911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50628", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduzgn7pc2o", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-50628\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing requests from any other IP address. Enabling this\n\nsecurity feature inadvertently creates an inverse security che", "creation_timestamp": "2026-06-15T18:10:45.933209Z"} 2026-06-15T18:10:45.933209+00:00 https://vulnerability.circl.lu/sighting/7fd0d99f-4a9d-4901-8124-15d961da1a5c/export 2026-08-07T22:40:51.607373+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7fd0d99f-4a9d-4901-8124-15d961da1a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50627", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduz7pfex22", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-50627\n\nCVSS 9.1/10\n\n\ud83d\udccb WHAT IT IS:\nThe JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access tokens. This allows a JWT issued for one Resource Server to be successfully replayed against a completely different Resour", "creation_timestamp": "2026-06-15T18:10:38.934325Z"} 2026-06-15T18:10:38.934325+00:00 https://vulnerability.circl.lu/sighting/f892ea31-3a8e-411c-9654-f2add2b4cc62/export 2026-08-07T22:40:51.607498+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f892ea31-3a8e-411c-9654-f2add2b4cc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50623", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mod4qikzm724", "content": "Apache CXF published a cluster of 2026 advisories, more than a dozen CVEs in its OAuth2 and JAX-WS code paths. The headline is CVE-2026-50623, an authentication bypass in the OAuth2 TokenIntrospectionService. Running CXF anywhere in your stack?\n#security", "creation_timestamp": "2026-06-15T10:56:16.278344Z"} 2026-06-15T10:56:16.278344+00:00