https://vulnerability.circl.lu/sightings/feed 2026-09-17T12:13:56.709715+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/cfcdee15-5a9b-4ab1-804e-3c30f6ba9cf6/export 2026-09-17T12:13:56.729679+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "cfcdee15-5a9b-4ab1-804e-3c30f6ba9cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1168", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-25", "content": "", "creation_timestamp": "2026-09-14T07:45:55.807322Z"} 2026-09-14T07:45:55.807322+00:00 https://vulnerability.circl.lu/sighting/f55676be-cf9b-4389-827e-bd0bc48efd51/export 2026-09-17T12:13:56.732314+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "f55676be-cf9b-4389-827e-bd0bc48efd51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1168", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260914", "content": "", "creation_timestamp": "2026-09-14T07:45:10.716166Z"} 2026-09-14T07:45:10.716166+00:00 https://vulnerability.circl.lu/sighting/f21f14d8-3de8-4b78-a0a0-90319af3087a/export 2026-09-17T12:13:56.732472+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f21f14d8-3de8-4b78-a0a0-90319af3087a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11748", "type": "seen", "source": "https://gist.github.com/alon710/c05d2b733514467507b538dab5375550", "content": "# CVE-2026-11748: CVE-2026-11748: Unauthenticated LDAP Injection in Central Dogma Server Authentication\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-09-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11748\n\n## Summary\nAn LDAP injection vulnerability exists in the centraldogma-server-auth-shiro module of LY Corporation Central Dogma before version 0.84.0. The search logic dynamically constructs LDAP search filters by interpolating user-provided usernames without escaping RFC 4515 metacharacters. Unauthenticated remote attackers can leverage this flaw to bypass authentication, enumerate directory hierarchies, and access unauthorized resources.\n\n## TL;DR\nUnauthenticated LDAP injection in LY Corporation Central Dogma before version 0.84.0 allows remote attackers to bypass authentication and query directory contents due to unsafe handling of RFC 4515 metacharacters in username fields.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-90\n- **Attack Vector**: Network\n- **CVSS v4.0**: 6.9 (Medium)\n- **EPSS Score**: 0.00618 (Percentile: 47.64%)\n- **Impact**: Authentication Bypass / Directory Enumeration\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- LY Corporation Central Dogma centraldogma-server-auth-shiro module\n- **Central Dogma**: < 0.84.0 (Fixed in: `0.84.0`)\n\n## Mitigation\n\n- Upgrade the Central Dogma installation to version 0.84.0 or above.\n- Implement WAF input validation rules to block the execution of LDAP control characters in authentication queries.\n- Disable unauthenticated binds on the backend LDAP/Active Directory controllers.\n- Enforce least-privilege access permissions on the directory service account utilized by the Central Dogma server.\n\n**Remediation Steps:**\n1. Identify all deployment nodes running Central Dogma versions prior to 0.84.0.\n2. Update dependencies in build.gradle or pom.xml to target centraldogma-server-auth-shiro version 0.84.0.\n3. Recompile and redeploy the Central Dogma server services.\n4. Validate the fix by attempting to log in with wildcard characters (e.g., '*' and 'admin*)(objectClass=*') to verify they are rejected or treated as literal characters.\n\n## References\n\n- [GHSA-98q5-5qh2-7w75: LDAP Injection in centraldogma-server-auth-shiro](https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75)\n- [Central Dogma Security Patch Commit](https://github.com/line/centraldogma/commit/f78719f33d2bde9c37d99aafe612427d3a6f43f6)\n- [CVE.org CVE-2026-11748 Detail](https://www.cve.org/CVERecord?id=CVE-2026-11748)\n- [NVD - CVE-2026-11748 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-11748)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11748) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-12T04:32:07.906348Z"} 2026-09-12T04:32:07.906348+00:00 https://vulnerability.circl.lu/sighting/3a764fcd-bfec-401b-9c29-2c3f6a598b6f/export 2026-09-17T12:13:56.734211+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3a764fcd-bfec-401b-9c29-2c3f6a598b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11746", "type": "seen", "source": "https://gist.github.com/alon710/bd396251a8687bea5416d129d9cb5f66", "content": "# CVE-2026-11746: CVE-2026-11746: Use of Hard-coded ZooKeeper Replication Secret 'ch4n63m3' in Central Dogma Server\n\n> **CVSS Score:** 9.4\n> **Published:** 2026-09-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11746\n\n## Summary\nCVE-2026-11746 is a critical vulnerability in Central Dogma Server prior to version 0.84.0, where an embedded ZooKeeper replication secret silently falls back to a publicly known, hard-coded default string ('ch4n63m3'). Remote attackers with access to the replication network can authenticate as legitimate cluster peers, potentially leading to unauthorized data exposure, state manipulation, or complete cluster takeover.\n\n## TL;DR\nUnauthenticated remote attackers with access to Central Dogma's replication ports can take over the cluster by authenticating with the default hard-coded replication secret 'ch4n63m3'.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-798\n- **Attack Vector**: Adjacent Network\n- **CVSS v4.0 Score**: 9.4 (Critical)\n- **EPSS Score**: 0.00229\n- **Impact**: Complete Cluster Takeover / Information Disclosure\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Central Dogma Server\n\n## Mitigation\n\n- Upgrade Central Dogma Server to version 0.84.0 or above to enforce secure cryptographic secrets on startup.\n- Explicitly configure a strong, random 'replication.secret' of at least 16 characters in dogma.json on all nodes.\n- Implement host-based firewalls or security groups to strictly isolate replication ports from unauthorized network segments.\n\n**Remediation Steps:**\n1. Verify the current running version of Central Dogma Server and retrieve the dogma.json configuration.\n2. Generate a secure 32-character hex secret using 'openssl rand -hex 32'.\n3. Update dogma.json on every replica cluster node to include the generated secret within the 'replication' block.\n4. Upgrade the Central Dogma server installations to version 0.84.0 or later.\n5. Restart the services and verify the log output to confirm that the configuration is loaded securely.\n\n## References\n\n- [GitHub Security Advisory GHSA-2j95-gqxf-v3vg](https://github.com/line/centraldogma/security/advisories/GHSA-2j95-gqxf-v3vg)\n- [Fix Commit](https://github.com/line/centraldogma/commit/a38baa1f162ce7417ee0d7317a036fd52f3cd844)\n- [v0.84.0 Release Changelog](https://github.com/line/centraldogma/commit/09b5db8bd2f16394bfc21097e77d720d3103b8b6)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11746) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-12T03:31:29.284057Z"} 2026-09-12T03:31:29.284057+00:00 https://vulnerability.circl.lu/sighting/ac402d67-49fb-4fe8-84f7-a6c8e945b447/export 2026-09-17T12:13:56.734354+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "ac402d67-49fb-4fe8-84f7-a6c8e945b447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11748", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75", "content": "", "creation_timestamp": "2026-09-11T22:37:28.197079Z"} 2026-09-11T22:37:28.197079+00:00 https://vulnerability.circl.lu/sighting/443fe8ed-70a9-401b-a74c-4b6a03771297/export 2026-09-17T12:13:56.734458+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "443fe8ed-70a9-401b-a74c-4b6a03771297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11746", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-2j95-gqxf-v3vg", "content": "", "creation_timestamp": "2026-09-11T22:37:25.982210Z"} 2026-09-11T22:37:25.982210+00:00 https://vulnerability.circl.lu/sighting/c488a8f3-d1b4-4dc5-a12c-a62987b85e46/export 2026-09-17T12:13:56.734559+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "c488a8f3-d1b4-4dc5-a12c-a62987b85e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11745", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-vjfw-cpmh-xwv3", "content": "", "creation_timestamp": "2026-09-11T22:37:23.305097Z"} 2026-09-11T22:37:23.305097+00:00 https://vulnerability.circl.lu/sighting/3892dadd-a3b1-41bb-b072-1515861f7143/export 2026-09-17T12:13:56.734671+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3892dadd-a3b1-41bb-b072-1515861f7143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11746", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvbjqqanfy2g", "content": "CVE-2026-11746 - com.linecorp.centraldogma:centraldogma-server\nThe Central Dogma server uses a hard\u2011coded password (\u201cch4n63m3\u201d) for its built\u2011in ZooKeeper communication if administrators do not set their own secret.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#Java #CVE #infosec", "creation_timestamp": "2026-09-11T21:40:05.024723Z"} 2026-09-11T21:40:05.024723+00:00 https://vulnerability.circl.lu/sighting/64fb7440-fda3-43bb-a73b-ee0695f2121a/export 2026-09-17T12:13:56.734799+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "64fb7440-fda3-43bb-a73b-ee0695f2121a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11745", "type": "seen", "source": "https://gist.github.com/alon710/411b8b7ebc2e2afc168687232502ef72", "content": "# CVE-2026-11745: CVE-2026-11745: Host Key Verification Bypass in Central Dogma Git Mirror SSH Client\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-09-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11745\n\n## Summary\nAn issue was identified in Central Dogma prior to version 0.84.0. The Git mirror SSH client does not verify remote host keys for git+ssh:// connections, which allows an on-path attacker to execute man-in-the-middle attacks and compromise mirrored repositories.\n\n## TL;DR\nCentral Dogma versions prior to 0.84.0 fail to verify SSH host keys during Git mirror processes. This vulnerability enables adjacent or on-path attackers to perform Man-in-the-Middle attacks, allowing them to exfiltrate configurations or introduce malicious commits.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-322\n- **Attack Vector**: Adjacent Network\n- **CVSS v4.0 Score**: 8.8\n- **EPSS Score**: 0.00219\n- **EPSS Percentile**: 12.34%\n- **Exploit Status**: poc\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Central Dogma Server\n- centraldogma-server-mirror-git\n- **centraldogma-server-mirror-git**: < 0.84.0 (Fixed in: `0.84.0`)\n\n## Mitigation\n\n- Upgrade Central Dogma server dependencies to version 0.84.0 or above.\n- Explicitly configure remote Git host public key fingerprints inside the trustedHostKeys mapping of the dogma.json configuration.\n- Restrict outbound SSH connectivity from Central Dogma instances to known, static IP blocks matching your Git hosting provider.\n- Monitor application standard output for warnings regarding missing trustedHostKeys configurations.\n\n**Remediation Steps:**\n1. Retrieve the cryptographic fingerprints of your remote Git hosting endpoints using the ssh-keyscan tool.\n2. Open your deployment configuration file (dogma.json) and locate the MirroringServicePluginConfig entry.\n3. Insert the retrieved fingerprints under the trustedHostKeys property mapped to the appropriate hostname.\n4. Update your service configuration script, Dockerfile, or Maven POM to require centraldogma-server-mirror-git version 0.84.0 or greater.\n5. Redeploy the Central Dogma service instance and inspect the startup logs to ensure no unverified key warning messages are emitted.\n\n## References\n\n- [GitHub Security Advisory GHSA-vjfw-cpmh-xwv3](https://github.com/line/centraldogma/security/advisories/GHSA-vjfw-cpmh-xwv3)\n- [NVD - CVE-2026-11745](https://nvd.nist.gov/vuln/detail/CVE-2026-11745)\n- [Central Dogma Setup & Mirroring Documentation](https://line.github.io/centraldogma/setup-configuration.html)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11745) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-11T21:32:59.311713Z"} 2026-09-11T21:32:59.311713+00:00 https://vulnerability.circl.lu/sighting/c6d63571-2df0-409f-8e58-be7d25afa5a2/export 2026-09-17T12:13:56.734938+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c6d63571-2df0-409f-8e58-be7d25afa5a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11765", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b5wh3kjztmjxi", "content": "CVE-2026-11765 - Argument Injection in TUBITAK BILGEM's Pardus Pen\nCVE ID : CVE-2026-11765\n \n Published : Sept. 11, 2026, 1:20 p.m. | 24\u00a0minutes ago\n \n Description : Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BIL...", "creation_timestamp": "2026-09-11T14:59:59.071272Z"} 2026-09-11T14:59:59.071272+00:00