{"vulnerability": "cve-2026-47877", "sightings": [{"uuid": "aef1aa38-6fcd-42ce-84bc-5e4139211bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7umnmveqqjybc", "content": "CVE-2026-47877 - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)\nCVE ID : CVE-2026-47877\n \n Published : Aug. 27, 2026, 6:17 a.m. | 18\u00a0minutes ago\n \n Description : Spring Security Authorization Server's default consent page ...", "creation_timestamp": "2026-08-27T06:45:14.967400Z"}, {"uuid": "36094835-f8a8-4cd8-9ed7-61c14bf4637e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47877", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2bmprjhj2b", "content": "\ud83d\udfe0 CVE-2026-47877 - High (8.2)\n\nSpring Security Authorization Server's default consent page renders user-controlled values withou...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47877/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T07:00:51.144487Z"}, {"uuid": "f3023d7d-c396-405a-a9d4-b0767386162c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47877", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mun5htjswj23", "content": "\ud83d\udccc CVE-2026-47877 - Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding.\nSpring Security 7.1.0\nSpring ... https://www.cyberhub.blog/cves/CVE-2026-47877", "creation_timestamp": "2026-09-03T19:07:06.919944Z"}]}