{"vulnerability": "CVE-2026-68079", "sightings": [{"uuid": "b6949382-f999-43cf-b658-6501b46a7fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68079", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgfc5inum2h", "content": "CVE-2026-68079 - apache cxf\nApache CXF's authorization code system has a flaw that allows a captured code to be used repeatedly, which is against security rules. To fix this, users should update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:48:04.408226Z"}, {"uuid": "b1bdc7d5-276c-421e-b9a4-03b07326b019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68079", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/i4vkmjasii72h", "content": "CVE-2026-68079: Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay", "creation_timestamp": "2026-08-06T21:24:06.085265Z"}, {"uuid": "8b2e2ee9-5661-4c58-a510-2c5464ef8c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68079", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msholnmkru2c", "content": "\ud83d\udccc CVE-2026-68079 - In Apache CXF's DefaultEncryptingCodeDataProvider,\u00a0a captured authorization code can be redeemed an unlimited number of times due to a flaw in the imp... https://www.cyberhub.blog/cves/CVE-2026-68079", "creation_timestamp": "2026-08-07T04:07:06.712934Z"}]}