https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:50:34.500601+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-111070 EUVD-2026-111070 2026-10-02T18:50:34.549486+00:00 EUVD-2026-111070 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2379 fkie_cve-2012-2379 2026-10-02T18:50:34.549552+00:00

Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors.

 https://cve.radiocsirt.org/vuln/ghsa-2g99-c67p-56hm GHSA-2g99-c67p-56hm — XML Signature/Encryption Not Validated in Apache CXF 2026-10-02T18:50:34.549584+00:00

Affected: Maven: org.apache.cxf:cxf

Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element is signed or encrypted, which has unspecified impact and attack vectors.

 https://cve.radiocsirt.org/vuln/gsd-2012-2379 gsd-2012-2379 2026-10-02T18:50:34.549611+00:00 gsd-2012-2379 https://cve.radiocsirt.org/vuln/rhsa-2012:1559 RHSA-2012:1559 — Red Hat Security Advisory: JBoss Enterprise BRMS Platform 5.3.0 security update 2026-10-02T18:50:34.549623+00:00

apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token