CVE-2026-44894

Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the tokenHandler used when the application does not set one. Prior to version 4.2.15.Final, its writeToken returns false server will not send Retry — acceptable, but validateToken...

CVE-2026-47825

creationtimestamp| type| source ---|---|--- 2026-06-12 12:55:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3rytodm42d...

GHSA-F8P7-H97Q-7VX7 Apache CXF OAuth2 Log Injection via Unsanitized Client Identifier

The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This allows an attacker to inject arbitrary content, including fake log entries, into the server's log files. Users are recommended to upgra...

ECHO-4A9D-DE37-CA7B

Bulletin has no description...

ECHO-F52E-9E52-AAA7

Bulletin has no description...

CGA-5CWR-GVVH-754V

Bulletin has no description...

ECHO-7DAD-A83A-CD30

Bulletin has no description...

CGA-WHQR-C84J-V82M

Bulletin has no description...

ECHO-1AE5-1AA8-8736

Bulletin has no description...

ECHO-1D9F-02A2-CD6E

Bulletin has no description...

ECHO-EBFF-11FA-7124

Bulletin has no description...

CVE-2026-50629 Apache CXF: OAuth2: Log Injection via Unsanitized Client Identifier

The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This allows an attacker to inject arbitrary content, including fake log entries, into the server's log files. Users are recommended to upgra...

EUVD-2026-36397

The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This allows an attacker to inject arbitrary content, including fake log entries, into the server's log files. Users are recommended to upgra...

CVE-2026-50629 Apache CXF: OAuth2: Log Injection via Unsanitized Client Identifier

The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This allows an attacker to inject arbitrary content, including fake log entries, into the server's log files. Users are recommended to upgra...

CGA-4VWC-3X55-4M28

Bulletin has no description...

CVE-2026-9271

Vulnerability Title...

CGA-9MQF-WXGF-RMVC

Bulletin has no description...

CVE-2026-47365

creationtimestamp| type| source ---|---|--- 2026-06-12 05:12:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2y54jypy25 2026-06-12 07:19:28+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mo37a36mva2v 2026-06-12 08:01:49+00:00| seen|...

CVE-2026-47370

creationtimestamp| type| source ---|---|--- 2026-06-12 04:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mo2vrtqjbs2k 2026-06-12 05:56:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo32lzdr7t2o 2026-06-12 08:00:53+00:00| seen|...

CVE-2026-46558

creationtimestamp| type| source ---|---|--- 2026-06-12 02:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo2ph5flk72c 2026-07-16 19:00:30+00:00| seen| Telegram/cp2rVOV36WL3kV8x4ScnxuKP0fsnO5ojw1d2EB8ZtBxrfQ 2026-07-17 00:00:47+00:00| seen|...