CVE-2026-6277

creationtimestamp| type| source ---|---|--- 2026-06-11 12:45:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260612...

CVE-2026-1500

creationtimestamp| type| source ---|---|--- 2026-06-11 12:45:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260612...

CVE-2026-9746

creationtimestamp| type| source ---|---|--- 2026-06-11 12:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxhchwy25...

CVE-2026-9735

creationtimestamp| type| source ---|---|--- 2026-06-11 12:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxhchwy25...

CVE-2026-9743

creationtimestamp| type| source ---|---|--- 2026-06-11 12:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxhchwy25...

CVE-2026-40997

creationtimestamp| type| source ---|---|--- 2026-06-11 12:40:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaoi3n5f2d...

CVE-2026-41862

creationtimestamp| type| source ---|---|--- 2026-06-11 12:40:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaoi3n5f2d 2026-06-24 00:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moymtyjg6x2a 2026-06-24 00:16:48+00:00| seen|...

CVE-2026-40986

creationtimestamp| type| source ---|---|--- 2026-06-11 12:40:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaoi3n5f2d...

CVE-2026-40994

creationtimestamp| type| source ---|---|--- 2026-06-11 09:46:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnywye22ia2f 2026-06-11 10:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyxri5dqj2g 2026-06-11 12:40:06+00:00| seen|...

CVE-2026-53901

creationtimestamp| type| source ---|---|--- 2026-06-11 09:31:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnyw5ibyo624...

CVE-2026-40999

creationtimestamp| type| source ---|---|--- 2026-06-11 09:22:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnyvmtyfww2y 2026-06-11 10:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyxrwqa5y2s 2026-06-11 12:40:07+00:00| seen|...

CVE-2026-41700

creationtimestamp| type| source ---|---|--- 2026-06-11 08:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyr33x2kg26 2026-06-11 09:51:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnyxbciz3y2d 2026-06-12 15:07:07+00:00| seen|...

CVE-2026-40994

Wss4jSecurityInterceptor initialized its BSP WS-I Basic Security Profile compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. Services that validate WS-Security on the network could therefore accept messages that violate BSP rules, weakening protocol-level...

CVE-2026-40994

Wss4jSecurityInterceptor initialized its BSP WS-I Basic Security Profile compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. Services that validate WS-Security on the network could therefore accept messages that violate BSP rules, weakening protocol-level...

UBUNTU-CVE-2026-40994

Wss4jSecurityInterceptor initialized its BSP WS-I Basic Security Profile compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. Services that validate WS-Security on the network could therefore accept messages that violate BSP rules, weakening protocol-level...

CVE-2026-40992

creationtimestamp| type| source ---|---|--- 2026-06-11 06:47:07+00:00| seen| https://bsky.app/profile/0.5ritter.de/post/3mnymx7g2722u 2026-06-11 06:49:07+00:00| seen| https://bsky.app/profile/0.5ritter.de/post/3mnyn2l2qo22u 2026-06-11 12:40:06+00:00| seen|...

CVE-2026-41001

creationtimestamp| type| source ---|---|--- 2026-06-11 06:47:07+00:00| seen| https://bsky.app/profile/0.5ritter.de/post/3mnymx7g2722u 2026-06-11 06:49:09+00:00| seen| https://bsky.app/profile/0.5ritter.de/post/3mnyn2l2qo22u 2026-06-16 12:15:14+00:00| seen|...

CVE-2026-40985

creationtimestamp| type| source ---|---|--- 2026-06-11 05:32:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnyir5lyst2d 2026-06-11 12:40:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaoi3n5f2d...

CVE-2026-40994 Wss4jSecurityInterceptor disables WS-I BSP validation by default

Wss4jSecurityInterceptor initialized its BSP WS-I Basic Security Profile compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. Services that validate WS-Security on the network could therefore accept messages that violate BSP rules, weakening protocol-level...

CVE-2026-40994

Summary: CVE-2026-40994 affects Spring Web Services where Wss4jSecurityInterceptor initializes its BSP flag to disable BSP enforcement on inbound data, weakening protocol-level WS-Security checks. Affected versions: Spring Web Services 5.0.0–5.0.1; 4.1.0–4.1.3; 4.0.0–4.0.18; 3.1.0–3.1.8. Impact (...