Common Vulnerabilities and Exposures (CVE)

CVE-2026-61466

Aug 6, 2026 15:19:29 UTC

In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client registration request verbatim, without validating it against an AS-defined allowlist. This cou...

CVE-2026-63687

Aug 6, 2026 15:18:27 UTC

Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitive parameters. A client that can produce a validly-signed request JWT (e.g., one whose clie...

CVE-2026-65508

Aug 6, 2026 15:18:11 UTC

Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.

CVE-2026-65583

Aug 6, 2026 15:17:49 UTC

Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enabling authentication bypass with crafted tokens. However, not...

CVE-2026-61964

Aug 6, 2026 15:17:11 UTC

Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions.

CVE-2026-68079

Aug 6, 2026 15:17:09 UTC

In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the removeCodeGrant functionality. This violates the RFC requirement that "...

CVE-2026-32469

Aug 6, 2026 15:16:25 UTC

Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions.

CVE-2026-19024

Aug 6, 2026 15:16:14 UTC

NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.1.1 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value message has the "defined" flag set together with a negative size field, which is ...

CVE-2026-67591

Aug 6, 2026 15:16:01 UTC

An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fix...

CVE-2026-19023

Aug 6, 2026 15:15:50 UTC

Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.1.1 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, whi...

CVE-2026-28177

Aug 6, 2026 15:15:44 UTC

Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions.

CVE-2026-68481

Aug 6, 2026 15:15:38 UTC

In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospectionService reports active:true. The same applies to refresh tokens. This violates the RFC stipulations that 'The author...

CVE-2026-5423

Aug 6, 2026 15:15:29 UTC

@neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. As a result, any unauthenticated remote client that can open a...

CVE-2026-65432

Aug 6, 2026 15:14:47 UTC

Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. However, any <wsdl:import> or <xsd:import> referenced from that top-level WSDL is handed off to WSDL4J, which does not dis...

CVE-2026-66276

Aug 6, 2026 15:14:36 UTC

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are...