https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 07 Aug 2026 22:40:50 +0000 https://vulnerability.circl.lu/sighting/594af0f7-4180-43d5-a893-cfcbf7485ec8/export {"uuid": "594af0f7-4180-43d5-a893-cfcbf7485ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfywzjdvg2y", "content": "\ud83d\udccc CVE-2026-50622 - Description:\nMissing Authorization\u00a0in Apache Atlas.\nA missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated u... https://www.cyberhub.blog/cves/CVE-2026-50622", "creation_timestamp": "2026-08-06T12:07:06.625337Z"} {"uuid": "594af0f7-4180-43d5-a893-cfcbf7485ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfywzjdvg2y", "content": "\ud83d\udccc CVE-2026-50622 - Description:\nMissing Authorization\u00a0in Apache Atlas.\nA missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated u... https://www.cyberhub.blog/cves/CVE-2026-50622", "creation_timestamp": "2026-08-06T12:07:06.625337Z"} https://vulnerability.circl.lu/sighting/594af0f7-4180-43d5-a893-cfcbf7485ec8/export Thu, 06 Aug 2026 12:07:06 +0000 https://vulnerability.circl.lu/sighting/8f3c645d-4dd2-485f-9aef-5bbddfe5030d/export {"uuid": "8f3c645d-4dd2-485f-9aef-5bbddfe5030d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5062", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msfimwvxgu23", "content": "CVE-2026-5062 pretty-link (CVSS Score 4.9) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T07:15:08.153033Z"} {"uuid": "8f3c645d-4dd2-485f-9aef-5bbddfe5030d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5062", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msfimwvxgu23", "content": "CVE-2026-5062 pretty-link (CVSS Score 4.9) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T07:15:08.153033Z"} https://vulnerability.circl.lu/sighting/8f3c645d-4dd2-485f-9aef-5bbddfe5030d/export Thu, 06 Aug 2026 07:15:08 +0000 https://vulnerability.circl.lu/sighting/2631bf78-5d03-46af-b1db-c10d5ea4f1a4/export {"uuid": "2631bf78-5d03-46af-b1db-c10d5ea4f1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5062", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4wo5wjdsnkavp", "content": "CVE-2026-5062 - PrettyLinks\nCVE ID : CVE-2026-5062\n \n Published : Aug. 5, 2026, 5:27 a.m. | 49\u00a0minutes ago\n \n Description : The PrettyLinks \u2013 Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL Injection...", "creation_timestamp": "2026-08-05T06:42:43.479002Z"} {"uuid": "2631bf78-5d03-46af-b1db-c10d5ea4f1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5062", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4wo5wjdsnkavp", "content": "CVE-2026-5062 - PrettyLinks\nCVE ID : CVE-2026-5062\n \n Published : Aug. 5, 2026, 5:27 a.m. | 49\u00a0minutes ago\n \n Description : The PrettyLinks \u2013 Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL Injection...", "creation_timestamp": "2026-08-05T06:42:43.479002Z"} https://vulnerability.circl.lu/sighting/2631bf78-5d03-46af-b1db-c10d5ea4f1a4/export Wed, 05 Aug 2026 06:42:43 +0000 https://vulnerability.circl.lu/sighting/624d338b-a89f-42f3-9d82-a28e5adabfff/export {"uuid": "624d338b-a89f-42f3-9d82-a28e5adabfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrrqpxictt2a", "content": "CVE-2026-50622 - Apache Atlas: Missing Authorization on Admin Endpoints\nCVE ID : CVE-2026-50622\n \n Published : July 29, 2026, 9:10 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Description:\nMissing Authorization\u00a0in Apache Atlas.\nA missing authorization vulnerability in Apache...", "creation_timestamp": "2026-07-29T10:46:44.514940Z"} {"uuid": "624d338b-a89f-42f3-9d82-a28e5adabfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrrqpxictt2a", "content": "CVE-2026-50622 - Apache Atlas: Missing Authorization on Admin Endpoints\nCVE ID : CVE-2026-50622\n \n Published : July 29, 2026, 9:10 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Description:\nMissing Authorization\u00a0in Apache Atlas.\nA missing authorization vulnerability in Apache...", "creation_timestamp": "2026-07-29T10:46:44.514940Z"} https://vulnerability.circl.lu/sighting/624d338b-a89f-42f3-9d82-a28e5adabfff/export Wed, 29 Jul 2026 10:46:44 +0000 https://vulnerability.circl.lu/sighting/f9ecdad7-b908-46d5-9057-c91daf3165fb/export {"uuid": "f9ecdad7-b908-46d5-9057-c91daf3165fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrrfmf67nj24", "content": "CVE-2026-50622: Apache Atlas: Missing Authorization on Admin Endpoints", "creation_timestamp": "2026-07-29T07:27:53.502711Z"} {"uuid": "f9ecdad7-b908-46d5-9057-c91daf3165fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrrfmf67nj24", "content": "CVE-2026-50622: Apache Atlas: Missing Authorization on Admin Endpoints", "creation_timestamp": "2026-07-29T07:27:53.502711Z"} https://vulnerability.circl.lu/sighting/f9ecdad7-b908-46d5-9057-c91daf3165fb/export Wed, 29 Jul 2026 07:27:53 +0000 https://vulnerability.circl.lu/sighting/7a01ce37-5383-4f01-a352-fd7898910edc/export {"uuid": "7a01ce37-5383-4f01-a352-fd7898910edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50628", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mqng6a55dz2o", "content": "A critical-severity fix just shipped for Apache Cxf. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-50628", "creation_timestamp": "2026-07-15T00:02:01.822109Z"} {"uuid": "7a01ce37-5383-4f01-a352-fd7898910edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50628", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mqng6a55dz2o", "content": "A critical-severity fix just shipped for Apache Cxf. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-50628", "creation_timestamp": "2026-07-15T00:02:01.822109Z"} https://vulnerability.circl.lu/sighting/7a01ce37-5383-4f01-a352-fd7898910edc/export Wed, 15 Jul 2026 00:02:01 +0000 https://vulnerability.circl.lu/sighting/cb0efa86-c003-4c66-93c0-0689470a5f4c/export {"uuid": "cb0efa86-c003-4c66-93c0-0689470a5f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50627", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppaqcro5i2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50627 \u0432 Apache CXF: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E2F6BBC9-E0A1-46F0-AD11-D08B49F95233", "creation_timestamp": "2026-07-03T00:04:53.909953Z"} {"uuid": "cb0efa86-c003-4c66-93c0-0689470a5f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50627", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppaqcro5i2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50627 \u0432 Apache CXF: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E2F6BBC9-E0A1-46F0-AD11-D08B49F95233", "creation_timestamp": "2026-07-03T00:04:53.909953Z"} https://vulnerability.circl.lu/sighting/cb0efa86-c003-4c66-93c0-0689470a5f4c/export Fri, 03 Jul 2026 00:04:53 +0000 https://vulnerability.circl.lu/sighting/bd0c9a71-fdc8-41ec-a1cd-ccaae7dce911/export {"uuid": "bd0c9a71-fdc8-41ec-a1cd-ccaae7dce911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50628", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduzgn7pc2o", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-50628\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing requests from any other IP address. Enabling this\n\nsecurity feature inadvertently creates an inverse security che", "creation_timestamp": "2026-06-15T18:10:45.933209Z"} {"uuid": "bd0c9a71-fdc8-41ec-a1cd-ccaae7dce911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50628", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduzgn7pc2o", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-50628\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing requests from any other IP address. Enabling this\n\nsecurity feature inadvertently creates an inverse security che", "creation_timestamp": "2026-06-15T18:10:45.933209Z"} https://vulnerability.circl.lu/sighting/bd0c9a71-fdc8-41ec-a1cd-ccaae7dce911/export Mon, 15 Jun 2026 18:10:45 +0000 https://vulnerability.circl.lu/sighting/7fd0d99f-4a9d-4901-8124-15d961da1a5c/export {"uuid": "7fd0d99f-4a9d-4901-8124-15d961da1a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50627", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduz7pfex22", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-50627\n\nCVSS 9.1/10\n\n\ud83d\udccb WHAT IT IS:\nThe JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access tokens. This allows a JWT issued for one Resource Server to be successfully replayed against a completely different Resour", "creation_timestamp": "2026-06-15T18:10:38.934325Z"} {"uuid": "7fd0d99f-4a9d-4901-8124-15d961da1a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50627", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduz7pfex22", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-50627\n\nCVSS 9.1/10\n\n\ud83d\udccb WHAT IT IS:\nThe JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access tokens. This allows a JWT issued for one Resource Server to be successfully replayed against a completely different Resour", "creation_timestamp": "2026-06-15T18:10:38.934325Z"} https://vulnerability.circl.lu/sighting/7fd0d99f-4a9d-4901-8124-15d961da1a5c/export Mon, 15 Jun 2026 18:10:38 +0000 https://vulnerability.circl.lu/sighting/f892ea31-3a8e-411c-9654-f2add2b4cc62/export {"uuid": "f892ea31-3a8e-411c-9654-f2add2b4cc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50623", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mod4qikzm724", "content": "Apache CXF published a cluster of 2026 advisories, more than a dozen CVEs in its OAuth2 and JAX-WS code paths. The headline is CVE-2026-50623, an authentication bypass in the OAuth2 TokenIntrospectionService. Running CXF anywhere in your stack?\n#security", "creation_timestamp": "2026-06-15T10:56:16.278344Z"} {"uuid": "f892ea31-3a8e-411c-9654-f2add2b4cc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50623", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mod4qikzm724", "content": "Apache CXF published a cluster of 2026 advisories, more than a dozen CVEs in its OAuth2 and JAX-WS code paths. The headline is CVE-2026-50623, an authentication bypass in the OAuth2 TokenIntrospectionService. Running CXF anywhere in your stack?\n#security", "creation_timestamp": "2026-06-15T10:56:16.278344Z"} https://vulnerability.circl.lu/sighting/f892ea31-3a8e-411c-9654-f2add2b4cc62/export Mon, 15 Jun 2026 10:56:16 +0000