https://vulnerability.circl.lu/sightings/feed 2026-09-27T21:35:10.994353+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9d4f634d-1860-4070-bc14-ba161fd53fcf/export 2026-09-27T21:35:11.011214+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9d4f634d-1860-4070-bc14-ba161fd53fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47116", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw5akyqmng22", "content": "\ud83d\udea8 CVE-2026-47116 \u2014 CVSS 9.3 CRITICAL\n\nLTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account passwords...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47116\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T22:10:21.391969Z"} 2026-09-22T22:10:21.391969+00:00 https://vulnerability.circl.lu/sighting/55a3c357-67ba-4ad9-8fbc-0428109fc42d/export 2026-09-27T21:35:11.012884+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "55a3c357-67ba-4ad9-8fbc-0428109fc42d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47116", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw56utr4dq24", "content": "CVE-2026-47116 - ltk3500sf\nThe LTSecurity LTK3500SF device stores its root and guest passwords in a way that can be easily uncovered. Anyone who discovers these passwords can log in through Telnet or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ltk3500sf #ltsecurity #CVE #infosec", "creation_timestamp": "2026-09-22T21:40:04.721202Z"} 2026-09-22T21:40:04.721202+00:00 https://vulnerability.circl.lu/sighting/3b60bd22-40ea-4cb7-9a71-9300082e60f9/export 2026-09-27T21:35:11.013044+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3b60bd22-40ea-4cb7-9a71-9300082e60f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47116", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aw5ny7jgkeoge", "content": "CVE-2026-47116 - LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH\nCVE ID : CVE-2026-47116\n \n Published : Sept. 22, 2026, 7:19 p.m. | 39\u00a0minutes ago\n \n Description : LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where root and guest account pass...", "creation_timestamp": "2026-09-22T20:46:52.761093Z"} 2026-09-22T20:46:52.761093+00:00 https://vulnerability.circl.lu/sighting/b0b6445a-420c-410f-a2f6-a6ee2ba7e63f/export 2026-09-27T21:35:11.013178+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b0b6445a-420c-410f-a2f6-a6ee2ba7e63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47691", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4x2lpu5p2g", "content": "CVE-2026-47691 - netty\nThe Netty DNS resolver library used in Java applications can be exploited to run unauthorized code on a server. This could let attackers take control of the affected system. Apply the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#netty #Java #CVE #infosec", "creation_timestamp": "2026-09-22T19:20:07.179773Z"} 2026-09-22T19:20:07.179773+00:00 https://vulnerability.circl.lu/sighting/05e1add5-8c00-443f-80f7-4b8d2dbfedb4/export 2026-09-27T21:35:11.013290+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "05e1add5-8c00-443f-80f7-4b8d2dbfedb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47065", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw23szyqif24", "content": "\ud83d\udea8 CVE-2026-94301 \u2014 CVSS 9.8 CRITICAL\n\nThe fix for CVE-2026-47065/ZDRES-232 (\"resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94301\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-21T16:07:23.577355Z"} 2026-09-21T16:07:23.577355+00:00 https://vulnerability.circl.lu/sighting/65c38da4-2cab-4144-8ce1-77882c5fad2a/export 2026-09-27T21:35:11.013426+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "65c38da4-2cab-4144-8ce1-77882c5fad2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47065", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117309819472613244", "content": "sev:CRIT bypass of CVE-2026-47065 in Apache MINA.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-94301\n\nThe fix for CVE-2026-47065/ZDRES-232 (\"resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java.lang.reflect.Proxy\"), released on 2026-06-02 and announced as \"Fully addressed\" in MINA 2.2.8, 2.1.13 and 2.0.29, was committed to the 2.2.X branch only. The 2.0.X and 2.1.X maintenance branches never received the resolveProxyClass() override, so the 2.0.29 and 2.1.13 artifacts listed as fixed -- and every later release on those lines, up to and including the current 2.0.30 and 2.1.14 -- remain vulnerable to the exact allow-list bypass that CVE-2026-47065 was meant to close.", "creation_timestamp": "2026-09-21T15:49:52.175870Z"} 2026-09-21T15:49:52.175870+00:00 https://vulnerability.circl.lu/sighting/66f39ae9-e05d-4b49-ac1d-6f6585fb3b55/export 2026-09-27T21:35:11.013562+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "66f39ae9-e05d-4b49-ac1d-6f6585fb3b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47627", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvw5osvoz226", "content": "\u300cNVIDIA Triton Inference Server\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\nNVIDIA\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670818\u65e5\u3001\u300cNVIDIA Triton Inference Server\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u6df1\u523b\u306a\u8106\u5f31\u6027\u3092\u89e3\u6d88\u3057\u305f\u3068\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u88fd\u54c1\u306f\u3001AI\u3084\u6a5f\u68b0\u5b66\u7fd2\u30e2\u30c7\u30eb\u3092\u5229\u7528\u3059\u308b\u30b7\u30b9\u30c6\u30e0\u306b\u304a\u3044\u3066\u3001\u63a8\u8ad6\u51e6\u7406\u3092\u5b9f\u884c\u3059\u308b\u57fa\u76e4\u3068\u3057\u3066\u7528\u3044\u3089\u308c\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3002Linux\u7248\u306e\u300c\u540c26.05\u300d\u304a\u3088\u3073\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b5\u4ef6\u306e\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c...\n\n\u4eca\u56de\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u306b\u304a\u3044\u3066\u3001\u3082\u3063\u3068\u3082\u5f71\u97ff\u304c\u5927\u304d\u3044\u3068\u3055\u308c\u308b\u306e\u304c\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u8106\u5f31\u6027\u300cCVE-2026-47627\u300d\u3002", "creation_timestamp": "2026-09-20T02:30:11.275634Z"} 2026-09-20T02:30:11.275634+00:00 https://vulnerability.circl.lu/sighting/c7cb1f0e-a2d3-4b8a-867e-2c479990a515/export 2026-09-27T21:35:11.013676+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c7cb1f0e-a2d3-4b8a-867e-2c479990a515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47252", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqfbs2y542n", "content": "CVE-2026-47252 - julien040\nIf you use Anyquery's plugins for Chrome, Brave, Edge or Safari on macOS, a specially crafted web address can break out of the script and run arbitrary commands on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#julien040 #anyquery #Golang #CVE #infosec", "creation_timestamp": "2026-09-17T19:30:04.783047Z"} 2026-09-17T19:30:04.783047+00:00 https://vulnerability.circl.lu/sighting/5257c6d3-33dc-49fb-ba21-3653cc68f4a5/export 2026-09-27T21:35:11.013791+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5257c6d3-33dc-49fb-ba21-3653cc68f4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmd3iz53c22", "content": "CVE-2026-47424 - org.openidentityplatform.openam:openam-scripting\nVersions of OpenAM before 16.1.1 let a user who can create or edit scripts bypass the built\u2011in safety checks and execute commands\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openidentityplatform #Java #CVE #infosec", "creation_timestamp": "2026-09-16T04:40:07.365208Z"} 2026-09-16T04:40:07.365208+00:00 https://vulnerability.circl.lu/sighting/9bf41418-8eed-42d4-86ce-d8c075e3c552/export 2026-09-27T21:35:11.013900+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9bf41418-8eed-42d4-86ce-d8c075e3c552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47837", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mveil43mkq2i", "content": "A critical-severity fix just shipped for Vmware Spring Cloud Config. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-47837", "creation_timestamp": "2026-09-13T01:57:01.639147Z"} 2026-09-13T01:57:01.639147+00:00