https://vulnerability.circl.lu/sightings/feed 2026-08-08T20:04:27.489009+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d475fe35-406b-48d9-a286-03f8f6b56e10/export 2026-08-08T20:04:27.508711+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d475fe35-406b-48d9-a286-03f8f6b56e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msiazqqg4724", "content": "\ud83d\udccc CVE-2026-61466 - In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client regi... https://www.cyberhub.blog/cves/CVE-2026-61466", "creation_timestamp": "2026-08-07T09:37:07.187915Z"} 2026-08-07T09:37:07.187915+00:00 https://vulnerability.circl.lu/sighting/c9e36c87-8817-4748-9f93-dc93a1a8d3ed/export 2026-08-08T20:04:27.509759+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c9e36c87-8817-4748-9f93-dc93a1a8d3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61466", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4hv3t36k4hvzo", "content": "CVE-2026-61466: Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation", "creation_timestamp": "2026-08-06T21:05:57.663307Z"} 2026-08-06T21:05:57.663307+00:00 https://vulnerability.circl.lu/sighting/240cce85-adff-4913-a74d-d276d37c3050/export 2026-08-08T20:04:27.509847+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "240cce85-adff-4913-a74d-d276d37c3050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61466", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffrr5pn2s", "content": "CVE-2026-61466 - apache cxf\nApache CXF's OAuth2 registration process does not properly check the scope of access, potentially allowing clients to gain unauthorized access. This is fixed in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:06.068069Z"} 2026-08-06T15:50:06.068069+00:00