{"vulnerability": "cve-2026-6368", "sightings": [{"uuid": "52860476-9ff4-402f-99c3-2f5c72c1a84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgffqh7u42u", "content": "CVE-2026-63687 - apache cxf\nApache CXF's JWT filter copies sensitive data from JWTs into the authorization map. This allows malicious clients to manipulate security parameters, compromising PKCE\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:50:04.918438Z"}, {"uuid": "3b1f66c9-552f-4ee7-b1f1-6e5fb9946fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fqsngttlj2rzl", "content": "CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters", "creation_timestamp": "2026-08-06T21:11:57.981043Z"}, {"uuid": "1882ac03-55c9-473d-a264-db9a539a598c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6368", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mtgbqtkneu2h", "content": "glibc: 2.42-67 -> 2.42-84, fixes CVE-2026-6368 & CVE-2026-6791\n\nhttps://github.com/NixOS/nixpkgs/pull/553328\n\n#security", "creation_timestamp": "2026-08-19T08:09:54.468903Z"}, {"uuid": "89aa3b38-475c-4f53-af51-6345d32c6291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63687", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msicpfbeo724", "content": "\ud83d\udccc CVE-2026-63687 - Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitiv... https://www.cyberhub.blog/cves/CVE-2026-63687", "creation_timestamp": "2026-08-07T10:07:06.982742Z"}, {"uuid": "c09c692b-d78d-4568-a289-fd95ef64a8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63683", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbdueogpd2i", "content": "CVE-2026-63683 - Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager\nCVE ID : CVE-2026-63683\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : IP and GeoIP conditions trusted spoofable forwarded heade...", "creation_timestamp": "2026-07-22T22:13:58.227861Z"}, {"uuid": "702520f5-1796-4a82-9309-391febdd630c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbfdnvrpm2a", "content": "CVE-2026-63685 - Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension\nCVE ID : CVE-2026-63685\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : Administrator routes and replacement requests did not consistently require Supe...", "creation_timestamp": "2026-07-22T22:40:24.840878Z"}, {"uuid": "3c4a159a-42ee-48ec-847f-ccc22b463077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrbfvljljw2i", "content": "CVE-2026-63684 - Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension\nCVE ID : CVE-2026-63684\n \n Published : July 22, 2026, 9:18 p.m. | 28\u00a0minutes ago\n \n Description : A...", "creation_timestamp": "2026-07-22T22:50:26.449889Z"}]}