https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:56:50.798564+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-113166 EUVD-2026-113166 2026-10-03T08:56:50.807323+00:00 EUVD-2026-113166 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5633 fkie_cve-2012-5633 2026-10-03T08:56:50.807364+00:00

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.

 https://cve.radiocsirt.org/vuln/ghsa-xf9f-32gh-h2w4 GHSA-xf9f-32gh-h2w4 — Improper Authentication in Apache CXF 2026-10-03T08:56:50.807397+00:00

Affected: Maven: org.apache.cxf:cxf

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request.

 https://cve.radiocsirt.org/vuln/gsd-2012-5633 gsd-2012-5633 2026-10-03T08:56:50.807424+00:00 gsd-2012-5633 https://cve.radiocsirt.org/vuln/rhsa-2013:0256 RHSA-2013:0256 — Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 security update 2026-10-03T08:56:50.807436+00:00

apache-cxf: SOAPAction spoofing on document literal web services apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor