https://vulnerability.circl.lu/sightings/feed 2026-08-07T10:04:54.542949+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4de8c4e5-634c-4077-9409-5ebdb27da7bc/export 2026-08-07T10:04:54.563182+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4de8c4e5-634c-4077-9409-5ebdb27da7bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66909", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mshqbc63ne2r", "content": "\ud83d\udccc CVE-2026-66909 - Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage\u00a0using native Java deserialization, with no type restrictions in plac... https://www.cyberhub.blog/cves/CVE-2026-66909", "creation_timestamp": "2026-08-07T04:37:07.104182Z"} 2026-08-07T04:37:07.104182+00:00 https://vulnerability.circl.lu/sighting/d890cc29-013f-4e6b-85e9-1eea3ed26c9e/export 2026-08-07T10:04:54.565870+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d890cc29-013f-4e6b-85e9-1eea3ed26c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66909", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/5h65hmmkj3bok", "content": "CVE-2026-66909: Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage", "creation_timestamp": "2026-08-06T20:45:57.930517Z"} 2026-08-06T20:45:57.930517+00:00 https://vulnerability.circl.lu/sighting/451dcf86-53e3-4c9b-af15-933a44a466bd/export 2026-08-07T10:04:54.566104+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "451dcf86-53e3-4c9b-af15-933a44a466bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66909", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgf6ln3fh2l", "content": "CVE-2026-66909 - apache cxf\nApache CXF's JMS transport can be tricked into running malicious code. This can cause a server crash or allow an attacker to take control of the server. To fix this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:46:04.998938Z"} 2026-08-06T15:46:04.998938+00:00