{"vulnerability": "CVE-2026-5062", "sightings": [{"uuid": "2631bf78-5d03-46af-b1db-c10d5ea4f1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5062", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4wo5wjdsnkavp", "content": "CVE-2026-5062 - PrettyLinks\nCVE ID : CVE-2026-5062\n \n Published : Aug. 5, 2026, 5:27 a.m. | 49\u00a0minutes ago\n \n Description : The PrettyLinks \u2013 Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL Injection...", "creation_timestamp": "2026-08-05T06:42:43.479002Z"}, {"uuid": "d161afe7-1171-421a-a0bd-3889f72df2a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50628", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzt3n3bgh2t", "content": "CVE-2026-50628: Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control", "creation_timestamp": "2026-06-11T18:09:35.218074Z"}, {"uuid": "cb1b9de8-c9bc-49be-87ed-14878370479a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50623", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzqep6lp32e", "content": "CVE-2026-50623: Apache CXF: Authentication Bypass in OAuth2 TokenIntrospectionService", "creation_timestamp": "2026-06-11T17:20:58.015419Z"}, {"uuid": "d87bb536-3723-4389-aae0-8910ff7573a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50629", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzrjdlhjm25", "content": "CVE-2026-50629: Apache CXF: OAuth2: Log Injection via Unsanitized Client Identifier", "creation_timestamp": "2026-06-11T17:41:27.579853Z"}, {"uuid": "a9a9cfbc-b9a1-4665-b10b-3f2e2dd68a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50627", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnzsjocwhy2t", "content": "CVE-2026-50627: Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token Validator", "creation_timestamp": "2026-06-11T17:59:32.402367Z"}, {"uuid": "f892ea31-3a8e-411c-9654-f2add2b4cc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50623", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mod4qikzm724", "content": "Apache CXF published a cluster of 2026 advisories, more than a dozen CVEs in its OAuth2 and JAX-WS code paths. The headline is CVE-2026-50623, an authentication bypass in the OAuth2 TokenIntrospectionService. Running CXF anywhere in your stack?\n#security", "creation_timestamp": "2026-06-15T10:56:16.278344Z"}, {"uuid": "7fd0d99f-4a9d-4901-8124-15d961da1a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50627", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduz7pfex22", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-50627\n\nCVSS 9.1/10\n\n\ud83d\udccb WHAT IT IS:\nThe JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access tokens. This allows a JWT issued for one Resource Server to be successfully replayed against a completely different Resour", "creation_timestamp": "2026-06-15T18:10:38.934325Z"}, {"uuid": "bd0c9a71-fdc8-41ec-a1cd-ccaae7dce911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50628", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moduzgn7pc2o", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-50628\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing requests from any other IP address. Enabling this\n\nsecurity feature inadvertently creates an inverse security che", "creation_timestamp": "2026-06-15T18:10:45.933209Z"}, {"uuid": "8f3c645d-4dd2-485f-9aef-5bbddfe5030d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5062", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msfimwvxgu23", "content": "CVE-2026-5062 pretty-link (CVSS Score 4.9) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T07:15:08.153033Z"}, {"uuid": "594af0f7-4180-43d5-a893-cfcbf7485ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfywzjdvg2y", "content": "\ud83d\udccc CVE-2026-50622 - Description:\nMissing Authorization\u00a0in Apache Atlas.\nA missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated u... https://www.cyberhub.blog/cves/CVE-2026-50622", "creation_timestamp": "2026-08-06T12:07:06.625337Z"}, {"uuid": "cb0efa86-c003-4c66-93c0-0689470a5f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50627", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppaqcro5i2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50627 \u0432 Apache CXF: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E2F6BBC9-E0A1-46F0-AD11-D08B49F95233", "creation_timestamp": "2026-07-03T00:04:53.909953Z"}, {"uuid": "7a01ce37-5383-4f01-a352-fd7898910edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50628", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mqng6a55dz2o", "content": "A critical-severity fix just shipped for Apache Cxf. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-50628", "creation_timestamp": "2026-07-15T00:02:01.822109Z"}, {"uuid": "f9ecdad7-b908-46d5-9057-c91daf3165fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrrfmf67nj24", "content": "CVE-2026-50622: Apache Atlas: Missing Authorization on Admin Endpoints", "creation_timestamp": "2026-07-29T07:27:53.502711Z"}, {"uuid": "624d338b-a89f-42f3-9d82-a28e5adabfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50622", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrrqpxictt2a", "content": "CVE-2026-50622 - Apache Atlas: Missing Authorization on Admin Endpoints\nCVE ID : CVE-2026-50622\n \n Published : July 29, 2026, 9:10 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Description:\nMissing Authorization\u00a0in Apache Atlas.\nA missing authorization vulnerability in Apache...", "creation_timestamp": "2026-07-29T10:46:44.514940Z"}]}