Search: CVE-2026-68079

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.7%	CVE-2026-68079Apache CXF · Authentication Bypass by Capture-replay Critical9.8EPSS 0.7%2026-08-06CVE Database V5CVE-2026-68079 CVE-2026-68079 is a critical authentication bypass vulnerability in Apache CXF's DefaultEncryptingCodeDataProvider. The flaw allows a captured authorization code to be redeemed multiple times, violating the RFC requirement that authorization codes must only be used once. This issue affects multiple versions of Apache CXF prior to 4.2.3, 4.1.8, and 3.6.12, which contain the fixes. EPSS 0.7%Vulnerability Apache Software Foundation CWE-294 #ghsa-7mxw-qv85-693m	CVE Database V5	2026-08-06

Page 1 of 1