https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:31:18.213967+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-111788 EUVD-2026-111788 2026-10-02T21:31:18.236543+00:00 EUVD-2026-111788 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3451 fkie_cve-2012-3451 2026-10-02T21:31:18.236585+00:00

Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.

 https://cve.radiocsirt.org/vuln/ghsa-55j7-f5wf-43m4 GHSA-55j7-f5wf-43m4 — Remote web-service operation execution in Apache CXF 2026-10-02T21:31:18.236618+00:00

Affected: Maven: org.apache.cxf:cxf

Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body.

 https://cve.radiocsirt.org/vuln/gsd-2012-3451 gsd-2012-3451 2026-10-02T21:31:18.236644+00:00 gsd-2012-3451 https://cve.radiocsirt.org/vuln/rhsa-2012:1591 RHSA-2012:1591 — Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update 2026-10-02T21:31:18.236657+00:00

httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled apache-cxf: Certain child policies of WS-SecurityPolicy 1.1 SupportingToken policy not applied on the client side apache-cxf: Apache CXF does not verify that elements were signed / encrypted by a particular Supporting Token Mojarra: deployed web applications can read FacesContext from other applications under certain conditions httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabled JBoss: Datasource connection manager returns valid connection for wrong credentials when using security-domains apache-cxf: SOAPAction spoofing on document literal web services JBoss Enterprise Application Platform: org.jboss.as.ejb3: JBoss Enterprise Application Platform: Access restriction bypass via improper EJB method authorization JBoss Enterprise Application Platform: JBoss EAP: JBEAP: JBoss Enterprise Application Platform: Unauthorized EJB access via authorization module bypass