https://vulnerability.circl.lu/sightings/feed 2026-08-14T11:36:34.280150+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/89aa3b38-475c-4f53-af51-6345d32c6291/export 2026-08-14T11:36:34.299148+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "89aa3b38-475c-4f53-af51-6345d32c6291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msicpfbeo724", "content": "\ud83d\udccc CVE-2026-63687 - Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitiv... https://www.cyberhub.blog/cves/CVE-2026-63687", "creation_timestamp": "2026-08-07T10:07:06.982742Z"} 2026-08-07T10:07:06.982742+00:00 https://vulnerability.circl.lu/sighting/3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8/export 2026-08-14T11:36:34.301033+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl", "content": "CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters", "creation_timestamp": "2026-08-06T21:11:57.981043Z"} 2026-08-06T21:11:57.981043+00:00 https://vulnerability.circl.lu/sighting/52860476-9ff4-402f-99c3-2f5c72c1a84f/export 2026-08-14T11:36:34.301231+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "52860476-9ff4-402f-99c3-2f5c72c1a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u", "content": "CVE-2026-63687 - apache cxf\nApache CXF's JWT filter copies sensitive data from JWTs into the authorization map. This allows malicious clients to manipulate security parameters, compromising PKCE\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:04.918438Z"} 2026-08-06T15:50:04.918438+00:00 https://vulnerability.circl.lu/sighting/3c4a159a-42ee-48ec-847f-ccc22b463077/export 2026-08-14T11:36:34.301394+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3c4a159a-42ee-48ec-847f-ccc22b463077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbfvljljw2i", "content": "CVE-2026-63684 - Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension\nCVE ID : CVE-2026-63684\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : A...", "creation_timestamp": "2026-07-22T22:50:26.449889Z"} 2026-07-22T22:50:26.449889+00:00 https://vulnerability.circl.lu/sighting/702520f5-1796-4a82-9309-391febdd630c/export 2026-08-14T11:36:34.301567+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "702520f5-1796-4a82-9309-391febdd630c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbfdnvrpm2a", "content": "CVE-2026-63685 - Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension\nCVE ID : CVE-2026-63685\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : Administrator routes and replacement requests did not consistently require Supe...", "creation_timestamp": "2026-07-22T22:40:24.840878Z"} 2026-07-22T22:40:24.840878+00:00 https://vulnerability.circl.lu/sighting/c09c692b-d78d-4568-a289-fd95ef64a8c6/export 2026-08-14T11:36:34.301724+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c09c692b-d78d-4568-a289-fd95ef64a8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63683", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbdueogpd2i", "content": "CVE-2026-63683 - Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager\nCVE ID : CVE-2026-63683\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : IP and GeoIP conditions trusted spoofable forwarded heade...", "creation_timestamp": "2026-07-22T22:13:58.227861Z"} 2026-07-22T22:13:58.227861+00:00