https://vulnerability.circl.lu/sightings/feed 2026-10-20T11:48:18.678200+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7a29d0df-b52a-4177-bf84-ea7582f6cfb4/export 2026-10-20T11:48:18.705738+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7a29d0df-b52a-4177-bf84-ea7582f6cfb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g7cwonbvyreey", "content": "CVE-2026-92877 - JAXB XML External Entity Injection\nCVE ID : CVE-2026-92877\n \n Published : Oct. 12, 2026, 3:17 p.m. | 14\u00a0minutes ago\n \n Description : The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolut...", "creation_timestamp": "2026-10-12T16:18:11.626907Z"} 2026-10-12T16:18:11.626907+00:00 https://vulnerability.circl.lu/sighting/2fbbe980-76fb-4259-95cd-32618db7a97a/export 2026-10-20T11:48:18.708359+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2fbbe980-76fb-4259-95cd-32618db7a97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92877", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117428443041907989", "content": "CVE-2026-92877 The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local files via out-of-band XXE.\nhttps://www.cve.org/CVERecord?id=CVE-2026-92877https://github.com/eclipse-ee4j/jaxb-ri/pull/2013https://gitlab.eclipse.org/security/cve-assignment/-/work_items/310#EclipseFoundation #jaxb-ri(core)#CVE_2026_92877#bot", "creation_timestamp": "2026-10-12T14:37:22.891039Z"} 2026-10-12T14:37:22.891039+00:00