https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 14 Aug 2026 11:36:34 +0000 https://vulnerability.circl.lu/sighting/89aa3b38-475c-4f53-af51-6345d32c6291/export {"uuid": "89aa3b38-475c-4f53-af51-6345d32c6291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msicpfbeo724", "content": "\ud83d\udccc CVE-2026-63687 - Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitiv... https://www.cyberhub.blog/cves/CVE-2026-63687", "creation_timestamp": "2026-08-07T10:07:06.982742Z"} {"uuid": "89aa3b38-475c-4f53-af51-6345d32c6291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msicpfbeo724", "content": "\ud83d\udccc CVE-2026-63687 - Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitiv... https://www.cyberhub.blog/cves/CVE-2026-63687", "creation_timestamp": "2026-08-07T10:07:06.982742Z"} https://vulnerability.circl.lu/sighting/89aa3b38-475c-4f53-af51-6345d32c6291/export Fri, 07 Aug 2026 10:07:06 +0000 https://vulnerability.circl.lu/sighting/3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8/export {"uuid": "3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl", "content": "CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters", "creation_timestamp": "2026-08-06T21:11:57.981043Z"} {"uuid": "3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl", "content": "CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters", "creation_timestamp": "2026-08-06T21:11:57.981043Z"} https://vulnerability.circl.lu/sighting/3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8/export Thu, 06 Aug 2026 21:11:57 +0000 https://vulnerability.circl.lu/sighting/52860476-9ff4-402f-99c3-2f5c72c1a84f/export {"uuid": "52860476-9ff4-402f-99c3-2f5c72c1a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u", "content": "CVE-2026-63687 - apache cxf\nApache CXF's JWT filter copies sensitive data from JWTs into the authorization map. This allows malicious clients to manipulate security parameters, compromising PKCE\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:04.918438Z"} {"uuid": "52860476-9ff4-402f-99c3-2f5c72c1a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u", "content": "CVE-2026-63687 - apache cxf\nApache CXF's JWT filter copies sensitive data from JWTs into the authorization map. This allows malicious clients to manipulate security parameters, compromising PKCE\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:04.918438Z"} https://vulnerability.circl.lu/sighting/52860476-9ff4-402f-99c3-2f5c72c1a84f/export Thu, 06 Aug 2026 15:50:04 +0000 https://vulnerability.circl.lu/sighting/3c4a159a-42ee-48ec-847f-ccc22b463077/export {"uuid": "3c4a159a-42ee-48ec-847f-ccc22b463077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbfvljljw2i", "content": "CVE-2026-63684 - Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension\nCVE ID : CVE-2026-63684\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : A...", "creation_timestamp": "2026-07-22T22:50:26.449889Z"} {"uuid": "3c4a159a-42ee-48ec-847f-ccc22b463077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbfvljljw2i", "content": "CVE-2026-63684 - Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension\nCVE ID : CVE-2026-63684\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : A...", "creation_timestamp": "2026-07-22T22:50:26.449889Z"} https://vulnerability.circl.lu/sighting/3c4a159a-42ee-48ec-847f-ccc22b463077/export Wed, 22 Jul 2026 22:50:26 +0000 https://vulnerability.circl.lu/sighting/702520f5-1796-4a82-9309-391febdd630c/export {"uuid": "702520f5-1796-4a82-9309-391febdd630c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbfdnvrpm2a", "content": "CVE-2026-63685 - Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension\nCVE ID : CVE-2026-63685\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : Administrator routes and replacement requests did not consistently require Supe...", "creation_timestamp": "2026-07-22T22:40:24.840878Z"} {"uuid": "702520f5-1796-4a82-9309-391febdd630c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbfdnvrpm2a", "content": "CVE-2026-63685 - Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension\nCVE ID : CVE-2026-63685\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : Administrator routes and replacement requests did not consistently require Supe...", "creation_timestamp": "2026-07-22T22:40:24.840878Z"} https://vulnerability.circl.lu/sighting/702520f5-1796-4a82-9309-391febdd630c/export Wed, 22 Jul 2026 22:40:24 +0000 https://vulnerability.circl.lu/sighting/c09c692b-d78d-4568-a289-fd95ef64a8c6/export {"uuid": "c09c692b-d78d-4568-a289-fd95ef64a8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63683", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbdueogpd2i", "content": "CVE-2026-63683 - Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager\nCVE ID : CVE-2026-63683\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : IP and GeoIP conditions trusted spoofable forwarded heade...", "creation_timestamp": "2026-07-22T22:13:58.227861Z"} {"uuid": "c09c692b-d78d-4568-a289-fd95ef64a8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63683", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbdueogpd2i", "content": "CVE-2026-63683 - Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager\nCVE ID : CVE-2026-63683\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : IP and GeoIP conditions trusted spoofable forwarded heade...", "creation_timestamp": "2026-07-22T22:13:58.227861Z"} https://vulnerability.circl.lu/sighting/c09c692b-d78d-4568-a289-fd95ef64a8c6/export Wed, 22 Jul 2026 22:13:58 +0000