{"vulnerability": "CVE-2026-63687", "sightings": [{"uuid": "52860476-9ff4-402f-99c3-2f5c72c1a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u", "content": "CVE-2026-63687 - apache cxf\nApache CXF's JWT filter copies sensitive data from JWTs into the authorization map. This allows malicious clients to manipulate security parameters, compromising PKCE\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:04.918438Z"}, {"uuid": "3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl", "content": "CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters", "creation_timestamp": "2026-08-06T21:11:57.981043Z"}, {"uuid": "89aa3b38-475c-4f53-af51-6345d32c6291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msicpfbeo724", "content": "\ud83d\udccc CVE-2026-63687 - Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitiv... https://www.cyberhub.blog/cves/CVE-2026-63687", "creation_timestamp": "2026-08-07T10:07:06.982742Z"}]}