{"vulnerability": "CVE-2026-6807", "sightings": [{"uuid": "37e4cc6f-d1bf-4292-8c92-a4d4e41d1b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mklg34qiug2q", "content": "", "creation_timestamp": "2026-04-28T20:23:48.907538Z"}, {"uuid": "a7e6945b-41ef-4ee2-b161-46271a1d2745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6807", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-118-01", "content": "", "creation_timestamp": "2026-04-28T05:00:00.000000Z"}, {"uuid": "cda39be0-468f-4aef-b2f8-34efc67fd916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6807", "type": "seen", "source": "Telegram/z6Mb3aOI5L_xG42Ye2ozZfLOAeq5z9oYh0c0S-elfU8N2lo", "content": "", "creation_timestamp": "2026-04-29T02:10:29.000000Z"}, {"uuid": "4d104a18-ce4c-429d-adb8-cafbc60909d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68074", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/7tqjwqrlr3y3w", "content": "CVE-2026-68074: Apache Qpid Broker-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion", "creation_timestamp": "2026-08-04T19:12:39.088882Z"}, {"uuid": "045955a4-fa57-4daf-9d9a-192de297e6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68075", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4gb3tsgdocdqi", "content": "CVE-2026-68075: Apache Qpid Broker-J: Incoming session flow control window can be exceeded", "creation_timestamp": "2026-08-04T19:18:41.246390Z"}, {"uuid": "183d1395-2305-4abd-8f27-594ef82a6fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68077", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/dmnlv6p3la6cs", "content": "CVE-2026-68077: Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service", "creation_timestamp": "2026-08-04T19:24:41.033894Z"}, {"uuid": "9c0d5278-8e57-4d54-8767-6e63f7a5f0e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6807", "type": "seen", "source": "https://bsky.app/profile/epowo-uzata.mast.qixto.com.ap.brid.gy/post/3mkqtkkgglvi2", "content": "https://www.theregister.com/2026/04/29/cisa_flags_datatheft_bug_in/\nXXE-haavoittuvuus NSA:n hyl\u00e4tyss\u00e4 GrassMarlin OT -ty\u00f6kalussa CISA on ilmoittanut CVE-2026-6807:n, joka on XML External Entity -haavoittuvuus GrassMarlinissa", "creation_timestamp": "2026-05-01T00:15:02.271089Z"}, {"uuid": "f488e73b-1123-4bf5-bf99-c5c2aa66050f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6807", "type": "published-proof-of-concept", "source": "Telegram/DejYBhAAqmnzlDgPgKJnfj-csYLXEQTMeHlFlO7t5L8Y-g8", "content": "", "creation_timestamp": "2026-04-29T03:00:06.000000Z"}, {"uuid": "b6949382-f999-43cf-b658-6501b46a7fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68079", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgfc5inum2h", "content": "CVE-2026-68079 - apache cxf\nApache CXF's authorization code system has a flaw that allows a captured code to be used repeatedly, which is against security rules. To fix this, users should update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:48:04.408226Z"}, {"uuid": "b1bdc7d5-276c-421e-b9a4-03b07326b019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68079", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/i4vkmjasii72h", "content": "CVE-2026-68079: Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay", "creation_timestamp": "2026-08-06T21:24:06.085265Z"}, {"uuid": "8b2e2ee9-5661-4c58-a510-2c5464ef8c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68079", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msholnmkru2c", "content": "\ud83d\udccc CVE-2026-68079 - In Apache CXF's DefaultEncryptingCodeDataProvider,\u00a0a captured authorization code can be redeemed an unlimited number of times due to a flaw in the imp... https://www.cyberhub.blog/cves/CVE-2026-68079", "creation_timestamp": "2026-08-07T04:07:06.712934Z"}]}