https://vulnerability.circl.lu/sightings/feed 2026-08-08T22:08:48.086695+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/89aa3b38-475c-4f53-af51-6345d32c6291/export 2026-08-08T22:08:48.110366+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "89aa3b38-475c-4f53-af51-6345d32c6291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msicpfbeo724", "content": "\ud83d\udccc CVE-2026-63687 - Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitiv... https://www.cyberhub.blog/cves/CVE-2026-63687", "creation_timestamp": "2026-08-07T10:07:06.982742Z"} 2026-08-07T10:07:06.982742+00:00 https://vulnerability.circl.lu/sighting/3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8/export 2026-08-08T22:08:48.113164+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl", "content": "CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters", "creation_timestamp": "2026-08-06T21:11:57.981043Z"} 2026-08-06T21:11:57.981043+00:00 https://vulnerability.circl.lu/sighting/52860476-9ff4-402f-99c3-2f5c72c1a84f/export 2026-08-08T22:08:48.113335+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "52860476-9ff4-402f-99c3-2f5c72c1a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u", "content": "CVE-2026-63687 - apache cxf\nApache CXF's JWT filter copies sensitive data from JWTs into the authorization map. This allows malicious clients to manipulate security parameters, compromising PKCE\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:04.918438Z"} 2026-08-06T15:50:04.918438+00:00