https://vulnerability.circl.lu/sightings/feed 2026-09-28T15:43:12.078636+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ddcd68f7-a2f1-49ad-b4ca-3108e5e0718e/export 2026-09-28T15:43:12.084912+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ddcd68f7-a2f1-49ad-b4ca-3108e5e0718e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h2zf3rzuygpfi", "content": "CVE-2026-97335 - Incorrect authorization in LXD storage volume API allows reading volumes from other projects\nCVE ID : CVE-2026-97335\n \n Published : 28. September 2026 14:17 | 15\u00a0Minuten ago\n \n Description : Incorrect authorization in the custom storage volume creation endpoin...", "creation_timestamp": "2026-09-28T15:34:29.090626Z"} 2026-09-28T15:34:29.090626+00:00 https://vulnerability.circl.lu/sighting/6424639c-cdc0-4f67-b5de-0edfb88a7781/export 2026-09-28T15:43:12.086262+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6424639c-cdc0-4f67-b5de-0edfb88a7781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100833", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk4grsumi2c", "content": "\ud83d\udfe0 CVE-2026-100833 - High (8.2)\n\nContrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100833/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T01:01:03.053256Z"} 2026-09-28T01:01:03.053256+00:00 https://vulnerability.circl.lu/sighting/a753b351-a085-441a-b5b3-0898634a1a61/export 2026-09-28T15:43:12.086398+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a753b351-a085-441a-b5b3-0898634a1a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54533", "type": "published-proof-of-concept", "source": "Telegram/V6WsEYC19zqLWLlPrT79w3lT0V9EeVfsqgldKLADaf1PSOM", "content": "", "creation_timestamp": "2026-09-27T21:04:13.000000Z"} 2026-09-27T21:04:13+00:00 https://vulnerability.circl.lu/sighting/107840f2-81a6-483a-8322-f2b363d1d8df/export 2026-09-28T15:43:12.086502+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "107840f2-81a6-483a-8322-f2b363d1d8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54533", "type": "seen", "source": "Telegram/V6WsEYC19zqLWLlPrT79w3lT0V9EeVfsqgldKLADaf1PSOM", "content": "", "creation_timestamp": "2026-09-27T21:04:13.000000Z"} 2026-09-27T21:04:13+00:00 https://vulnerability.circl.lu/sighting/6e20cc9e-1296-4f27-9453-9d1e1f846117/export 2026-09-28T15:43:12.086604+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6e20cc9e-1296-4f27-9453-9d1e1f846117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jwfnyyuo6vm25", "content": "CVE-2026-101033 - KitchenOwl through 0.7.10 IDOR via unchecked category ID\nCVE ID : CVE-2026-101033\n \n Published : Sept. 27, 2026, 1:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household i...", "creation_timestamp": "2026-09-27T15:07:09.666534Z"} 2026-09-27T15:07:09.666534+00:00 https://vulnerability.circl.lu/sighting/ef1fb4a2-9925-44ad-8516-d08e0d594b38/export 2026-09-28T15:43:12.086718+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ef1fb4a2-9925-44ad-8516-d08e0d594b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93302", "type": "seen", "source": "https://gist.github.com/ichintu/295c47a4fdd1542fe1dda3872969c6bd", "content": "This daily threat intelligence update covers emerging AI security practices and critical software vulnerabilities:\n\n\u2022 **AI Guardrails:** Teams are developing adaptable, general-purpose proxy-layer frameworks to detect LLM threats like prompt injection and jailbreaks. Implementation faces a trade-off between evaluation metrics and documented capabilities, particularly regarding jailbreak detection and language support.\n\n\u2022 **wolfSSL (3 HIGH/8.3 CVEs):** Multiple flaws undermine TLS/DTLS certificate verification and authentication. Issues include ignoring public keys in trusted peer validation (CVE-2026-93302), accepting unsolicited RawPublicKey certificates (CVE-2026-89136), and incorrectly validating OCSP stapling issuers (CVE-2026-89102), all enabling authentication bypasses and certificate forgery.\n\n\u2022 **hMailServer (CRITICAL/9.8):** An Eval Injection vulnerability (CVE-2026-100741) allows unauthenticated remote code execution via JScript event scripting when exploited through specific SMTP/POP3/IMAP login sequences.\n\n\u2022 **Citrix NetScaler:** Two unpatched zero-day RCE flaws are actively exploited in the wild, prompting some administrators to preemptively take affected appliances offline.", "creation_timestamp": "2026-09-27T12:00:40.000000Z"} 2026-09-27T12:00:40+00:00 https://vulnerability.circl.lu/sighting/ca25f013-74e7-4b3c-8400-7d4f42448cd0/export 2026-09-28T15:43:12.086827+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ca25f013-74e7-4b3c-8400-7d4f42448cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93302", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4q4746ucfgq7e", "content": "CVE-2026-93302 - Trusted peer certificate match ignores public key, allowing forged CA clones\nCVE ID : CVE-2026-93302\n \n Published : Sept. 27, 2026, 9:07 a.m. | 39\u00a0minutes ago\n \n Description : MatchTrustedPeer ignores the public key used, leading to forged CA clones passing ve...", "creation_timestamp": "2026-09-27T10:22:08.373323Z"} 2026-09-27T10:22:08.373323+00:00 https://vulnerability.circl.lu/sighting/6ebb49f4-66a1-474e-b85d-6b975b4c94ca/export 2026-09-28T15:43:12.086924+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6ebb49f4-66a1-474e-b85d-6b975b4c94ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9733", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-27)", "content": "", "creation_timestamp": "2026-09-27T00:00:00.000000Z"} 2026-09-27T00:00:00+00:00 https://vulnerability.circl.lu/sighting/24fec866-4fae-4ef7-822f-58841224e841/export 2026-09-28T15:43:12.087013+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "24fec866-4fae-4ef7-822f-58841224e841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-3396", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-27)", "content": "", "creation_timestamp": "2026-09-27T00:00:00.000000Z"} 2026-09-27T00:00:00+00:00 https://vulnerability.circl.lu/sighting/1a2b0a5c-c6ae-4bc4-9877-5bf3b1d41bc3/export 2026-09-28T15:43:12.087102+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1a2b0a5c-c6ae-4bc4-9877-5bf3b1d41bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23347", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-27)", "content": "", "creation_timestamp": "2026-09-27T00:00:00.000000Z"} 2026-09-27T00:00:00+00:00