{"vulnerability": "cve-2026-89238", "sightings": [{"uuid": "700875a5-7eb5-481b-a8c8-344cceef2069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89238", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/hokryf3ogpmld", "content": "CVE-2026-89238: Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection", "creation_timestamp": "2026-09-30T11:59:54.716125Z"}, {"uuid": "4b4955e9-a12e-4eff-ade6-c35391c3163f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89238", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxb2ztj2mj2r", "content": "\ud83d\udccc CVE-2026-89238 - WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the decrypted header, leading to incorrect confidentia... https://www.cyberhub.blog/cves/CVE-2026-89238", "creation_timestamp": "2026-10-07T04:07:07.691731Z"}]}