NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#cve-2026-97468

0 stories this week · 1 this month · 1 in 6 months · mostly security

Stories per day · 30 days

Relatedapache-cxf1 authentication-bypass1 hash-collision1 java1 sts1

1 stories, newest first · one card per story

oss-security21d ago

CVE-2026-97468: Apache CXF: Authentication bypass via weak cache keys for validated STS tokens

Apache CXF cached validated STS tokens under a 32-bit hash, enabling authentication bypass.

9 sources apache-cxf authentication-bypass

3