https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:46:01.861906+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349245 EUVD-2026-349245 2026-10-03T20:46:01.865053+00:00 EUVD-2026-349245 https://cve.radiocsirt.org/vuln/fkie_cve-2026-50634 fkie_cve-2026-50634 2026-10-03T20:46:01.865087+00:00

A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption

that accepted `Content-Type` or protected HTTP-header metadata came from a verified signature entry, and may steer downstream JAX-RS entity parsing or signed-header consistency checks. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or 3.6.12, which fix this issue.

 https://cve.radiocsirt.org/vuln/ghsa-33j8-j763-4fv5 GHSA-33j8-j763-4fv5 — Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry 2026-10-03T20:46:01.865123+00:00

Affected: Maven: org.apache.cxf:cxf-rt-rs-security-jose-jaxrs

A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption

that accepted `Content-Type` or protected HTTP-header metadata came from a verified signature entry, and may steer downstream JAX-RS entity parsing or signed-header consistency checks. Users are recommended to upgrade to versions 4.2.2 or 4.1.7, which fix this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1895 WID-SEC-W-2026-1895 — Apache CXF: Mehrere Schwachstellen 2026-10-03T20:46:01.865151+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um Sicherheitsvorkehrungen zu umgehen, XML-External-Entity-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.