https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:55:59.744119+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-96619 EUVD-2026-96619 2026-10-03T09:55:59.778511+00:00 EUVD-2026-96619 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0034 fkie_cve-2014-0034 2026-10-03T09:55:59.778550+00:00

The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.

 https://cve.radiocsirt.org/vuln/ghsa-38x2-fp9m-87mx GHSA-38x2-fp9m-87mx — Improper Input Validation in Apache CXF 2026-10-03T09:55:59.778582+00:00

Affected: Maven: org.apache.cxf:cxf-rt-ws-security

The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token.

 https://cve.radiocsirt.org/vuln/gsd-2014-0034 gsd-2014-0034 2026-10-03T09:55:59.778606+00:00 gsd-2014-0034 https://cve.radiocsirt.org/vuln/rhsa-2014:0797 RHSA-2014:0797 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.4 update 2026-10-03T09:55:59.778618+00:00

CXF: The SecurityTokenService accepts certain invalid SAML Tokens as valid CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy CXF: HTML content posted to SOAP endpoint could cause OOM errors CXF: Large invalid content could cause temporary space to fill JAX-RS: Information disclosure via XML eXternal Entity (XXE)