CVE-2026-41000

The CVE-2026-41000 issue affects Spring Web Services where Wss4jSecurityInterceptor did not consistently wire Apache WSS4J ReplayCache instances into RequestData for validation-time checks. This undermines protections against replay of UsernameToken nonces and creation timestamps, as well as Time...

CVE-2026-42305

creationtimestamp| type| source ---|---|--- 2026-06-11 01:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxzms4j7p26 2026-06-11 02:54:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mny7xmg4vu2h 2026-06-11 03:37:00+00:00| seen|...

CVE-2026-49218

creationtimestamp| type| source ---|---|--- 2026-06-11 00:59:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxzkh72te2n 2026-06-11 02:10:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny5i4wo5u2v...

CVE-2026-45257

creationtimestamp| type| source ---|---|--- 2026-06-10 21:43:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxoldhoq72z 2026-06-10 22:08:57+00:00| seen| https://bsky.app/profile/andersonc0d3.bsky.social/post/3mnxpyp62lc2t 2026-06-11 00:53:06+00:00| seen|...

CVE-2025-6254

creationtimestamp| type| source ---|---|--- 2026-06-10 11:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwkntijit26 2026-06-10 11:11:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwlbd3rzn2c 2026-06-10 12:00:15+00:00| seen|...

CVE-2026-8071

creationtimestamp| type| source ---|---|--- 2026-06-10 10:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwkcoeuvv2r 2026-06-10 12:00:21+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnwnyiff372t 2026-06-10 12:00:36+00:00| seen|...

CVE-2026-53435

creationtimestamp| type| source ---|---|--- 2026-06-10 07:43:47+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-nuove-vulnerabilita-in-jenkins-1 2026-06-12 21:00:04+00:00| published-proof-of-concept| Telegram/8OrsKfIYkEk0-8uPkb8MstgNwn2ZcQVuOnxP5IJIO77AEwY 2026-06-15 12:35:16+00:00| seen|...

CVE-2026-46491

creationtimestamp| type| source ---|---|--- 2026-06-10 00:48:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvihvh6372u 2026-06-10 01:01:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvj6kzs4z2r...

Replay Attack

Overview Affected versions of this package are vulnerable to Replay Attack due to the Wss4jSecurityInterceptor class in Wss4jSecurityInterceptor.java not consistently wiring configured Apache WSS4J ReplayCache instances into RequestData for validation-time checks. As a result, replay protections...

CVE-2026-41031

creationtimestamp| type| source ---|---|--- 2026-06-09 12:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnu5ju3mrd2l 2026-06-09 12:07:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnu5wos3ls2h...

CVE-2026-40128

creationtimestamp| type| source ---|---|--- 2026-06-09 01:20:31+00:00| seen| https://www.acn.gov.it/portale/w/sap-security-patch-day-17 2026-06-09 03:02:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116717913644166220 2026-06-09 03:20:44+00:00| seen|...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via the handleGetAuditLog function. An attacker can access sensitive audit log information, including cross-tenant actor names, host and operator IDs, action timestamps, and masked IP entries, by using any operato...

CVE-2024-58349

creationtimestamp| type| source ---|---|--- 2026-06-08 04:50:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqv2o5l6e2o 2026-06-08 05:14:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqwfrkn7r2y...

CVE-2026-11452

creationtimestamp| type| source ---|---|--- 2026-06-07 05:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnofn37ej62d 2026-06-07 06:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116707297322046281 2026-06-07 06:00:34+00:00| seen|...

CVE-2025-71317

creationtimestamp| type| source ---|---|--- 2026-06-05 19:16:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116699103506638031 2026-06-05 19:38:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkvb4gtlz2p 2026-06-06 00:01:11+00:00| seen|...

CVE-2026-11142

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11171

creationtimestamp| type| source ---|---|--- 2026-06-05 07:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjkwwqsph22 2026-06-05 13:24:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11306

creationtimestamp| type| source ---|---|--- 2026-06-05 03:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnj5jnm4ks2s 2026-06-05 03:01:09+00:00| seen| https://bsky.app/profile/potato.software/post/3mnj5jpel2f2s 2026-06-05 13:24:44+00:00| seen|...

CVE-2024-27890

creationtimestamp| type| source ---|---|--- 2026-06-04 23:37:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnis6aopqb2o 2026-06-05 02:04:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnj2djhret23...

CVE-2026-49185

creationtimestamp| type| source ---|---|--- 2026-06-04 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116689956169057665 2026-06-04 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mngs2jmfpk2q 2026-06-04 06:54:06+00:00| seen|...