<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 06 Aug 2026 23:35:16 +0000</lastBuildDate>
    <item>
      <title>3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8</title>
      <link>https://vulnerability.circl.lu/sighting/3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8/export</link>
      <description>{"uuid": "3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl", "content": "CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters", "creation_timestamp": "2026-08-06T21:11:57.981043Z"}</description>
      <content:encoded>{"uuid": "3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl", "content": "CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters", "creation_timestamp": "2026-08-06T21:11:57.981043Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8/export</guid>
      <pubDate>Thu, 06 Aug 2026 21:11:57 +0000</pubDate>
    </item>
    <item>
      <title>52860476-9ff4-402f-99c3-2f5c72c1a84f</title>
      <link>https://vulnerability.circl.lu/sighting/52860476-9ff4-402f-99c3-2f5c72c1a84f/export</link>
      <description>{"uuid": "52860476-9ff4-402f-99c3-2f5c72c1a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u", "content": "CVE-2026-63687 - apache cxf\nApache CXF's JWT filter copies sensitive data from JWTs into the authorization map. This allows malicious clients to manipulate security parameters, compromising PKCE\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:04.918438Z"}</description>
      <content:encoded>{"uuid": "52860476-9ff4-402f-99c3-2f5c72c1a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u", "content": "CVE-2026-63687 - apache cxf\nApache CXF's JWT filter copies sensitive data from JWTs into the authorization map. This allows malicious clients to manipulate security parameters, compromising PKCE\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:04.918438Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/52860476-9ff4-402f-99c3-2f5c72c1a84f/export</guid>
      <pubDate>Thu, 06 Aug 2026 15:50:04 +0000</pubDate>
    </item>
  </channel>
</rss>
