<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 08 Aug 2026 20:04:28 +0000</lastBuildDate>
    <item>
      <title>d475fe35-406b-48d9-a286-03f8f6b56e10</title>
      <link>https://vulnerability.circl.lu/sighting/d475fe35-406b-48d9-a286-03f8f6b56e10/export</link>
      <description>{"uuid": "d475fe35-406b-48d9-a286-03f8f6b56e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msiazqqg4724", "content": "\ud83d\udccc CVE-2026-61466 - In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client regi... https://www.cyberhub.blog/cves/CVE-2026-61466", "creation_timestamp": "2026-08-07T09:37:07.187915Z"}</description>
      <content:encoded>{"uuid": "d475fe35-406b-48d9-a286-03f8f6b56e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msiazqqg4724", "content": "\ud83d\udccc CVE-2026-61466 - In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client regi... https://www.cyberhub.blog/cves/CVE-2026-61466", "creation_timestamp": "2026-08-07T09:37:07.187915Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d475fe35-406b-48d9-a286-03f8f6b56e10/export</guid>
      <pubDate>Fri, 07 Aug 2026 09:37:07 +0000</pubDate>
    </item>
    <item>
      <title>c9e36c87-8817-4748-9f93-dc93a1a8d3ed</title>
      <link>https://vulnerability.circl.lu/sighting/c9e36c87-8817-4748-9f93-dc93a1a8d3ed/export</link>
      <description>{"uuid": "c9e36c87-8817-4748-9f93-dc93a1a8d3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61466", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4hv3t36k4hvzo", "content": "CVE-2026-61466: Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation", "creation_timestamp": "2026-08-06T21:05:57.663307Z"}</description>
      <content:encoded>{"uuid": "c9e36c87-8817-4748-9f93-dc93a1a8d3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61466", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4hv3t36k4hvzo", "content": "CVE-2026-61466: Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation", "creation_timestamp": "2026-08-06T21:05:57.663307Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c9e36c87-8817-4748-9f93-dc93a1a8d3ed/export</guid>
      <pubDate>Thu, 06 Aug 2026 21:05:57 +0000</pubDate>
    </item>
    <item>
      <title>240cce85-adff-4913-a74d-d276d37c3050</title>
      <link>https://vulnerability.circl.lu/sighting/240cce85-adff-4913-a74d-d276d37c3050/export</link>
      <description>{"uuid": "240cce85-adff-4913-a74d-d276d37c3050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61466", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffrr5pn2s", "content": "CVE-2026-61466 - apache cxf\nApache CXF's OAuth2 registration process does not properly check the scope of access, potentially allowing clients to gain unauthorized access. This is fixed in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:06.068069Z"}</description>
      <content:encoded>{"uuid": "240cce85-adff-4913-a74d-d276d37c3050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61466", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffrr5pn2s", "content": "CVE-2026-61466 - apache cxf\nApache CXF's OAuth2 registration process does not properly check the scope of access, potentially allowing clients to gain unauthorized access. This is fixed in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:06.068069Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/240cce85-adff-4913-a74d-d276d37c3050/export</guid>
      <pubDate>Thu, 06 Aug 2026 15:50:06 +0000</pubDate>
    </item>
  </channel>
</rss>
