https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T06:13:13.094784+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-65583 fkie_cve-2026-65583 2026-10-01T06:13:13.122745+00:00

Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in the validator. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fixes this issue.

 https://db.gcve.eu/vuln/ghsa-9rwm-8rh4-8q53 GHSA-9rwm-8rh4-8q53 2026-10-01T06:13:13.122842+00:00

Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in the validator. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fixes this issue.

 https://db.gcve.eu/vuln/wid-sec-w-2026-2682 WID-SEC-W-2026-2682 — Apache CXF: Mehrere Schwachstellen 2026-10-01T06:13:13.122871+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.