CVE-2026-61466

Apache CXF’s OAuth2 Dynamic Client Registration endpoint is vulnerable: the server accepts the scope value from a registration request verbatim without validating it against an allowlist, enabling a client to self-assign privileged scopes at creation. Impact is privilege escalation via mis-scoped...