CVE-2026-61466

In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client registration request verbatim, without validating it against an AS-defined allowlist. This could lead to a client self-assigning privileged scopes at registration time. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.

• CWE-304

• https://lists.apache.org/thread/2l1r16g79tpxd7fzrzr2q9oscwrjgljsMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2026/08/06/21

Published

Aug 6, 2026

Last Modified

Aug 7, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-61460Krayin CRM through 2.2.3 contains an insecure direct object …8.8
• CVE-2026-61461Dify before 1.16.0-rc1 contains a SQL injection vulnerabilit…8.8
• CVE-2026-61462mcp-gitlab contains a path traversal vulnerability in the jo…9.2
• CVE-2026-61463Shiori contains a privilege escalation vulnerability in the …8.8
• CVE-2026-61464ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-ba…1.8
• CVE-2026-61465ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check…6.5
• CVE-2026-6147The LightSync Pro plugin for WordPress is vulnerable to arbi…8.8
• CVE-2026-61474An improper authorization check in MISP’s attribute creation…5.3
• CVE-2026-61477An injection vulnerability was found in libvirt's virtual ne…2.3
• CVE-2026-6148A vulnerability was detected in code-projects Vehicle Showro…7.3
• CVE-2026-61483** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulne…7.5
• CVE-2026-61484** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted…9.8