{"vulnerability": "CVE-2026-100227", "sightings": [{"uuid": "aed309bb-1545-4f30-aa1e-9e53c961e22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100227", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mxgscqkvh32h", "content": "CVE-2026-100227: The Apache Software Foundation patched three Apache CXF flaws: XML signature wrapping, MTOM attachment DoS (CVE-2026-107937), and missing TLS hostname verification in the Netty client (CVE-2026-107938). Fixed in 4.2.4, 4.1.9, 3.6.13.", "creation_timestamp": "2026-10-09T10:47:01.507920Z"}, {"uuid": "4824acd1-aa2f-4883-8ef5-ee6ade1e4d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100227", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/ahsauxxn6j4w7", "content": "CVE-2026-100227: Apache CXF: XML Signature wrapping in JAX-RS XML Security", "creation_timestamp": "2026-10-09T11:08:21.106042Z"}, {"uuid": "35f5fecc-94f4-48c4-b4ce-656b2c8cf7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100227", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7j4kww5xz3vsj", "content": "CVE-2026-100227 - Apache CXF: XML Signature wrapping in JAX-RS XML Security\nCVE ID : CVE-2026-100227\n \n Published : Oct. 9, 2026, 10:19 a.m. | 1\u00a0hour ago\n \n Description : Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module....", "creation_timestamp": "2026-10-09T11:39:26.965962Z"}]}