← All credits
Guanping Zhang reported this vulnerability
4 vulnerability records and advisories credit this contributor.
CVE-2026-50628
Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control
CVE-2026-68481
Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider
CVE-2026-68079
Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay
CVE-2026-57818
Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider