https://vulnerability.circl.lu/sightings/feed 2026-09-29T21:12:15.070709+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/35fb2d23-5c4e-418d-9457-ccb753addd83/export 2026-09-29T21:12:15.090264+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "35fb2d23-5c4e-418d-9457-ccb753addd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwbgiztmbx2u", "content": "\ud83d\udea8 CVE-2026-19072 \u2014 CVSS 9.9 CRITICAL\n\nVelociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifac...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19072\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T14:07:16.971885Z"} 2026-09-24T14:07:16.971885+00:00 https://vulnerability.circl.lu/sighting/73f0192b-ce44-4057-b1cc-32c0d361b71c/export 2026-09-29T21:12:15.092646+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "73f0192b-ce44-4057-b1cc-32c0d361b71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbeyf3spn25", "content": "CVE-2026-19072 - velociraptor\nIn Velociraptor, a user with the investigator role can change an internal setting that lets them run any query on the server, bypassing normal permission checks. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#velociraptor #rapid7 #CVE #infosec", "creation_timestamp": "2026-09-24T13:40:04.690518Z"} 2026-09-24T13:40:04.690518+00:00 https://vulnerability.circl.lu/sighting/b6cdf379-0360-40d8-baf7-36ebbae7e098/export 2026-09-29T21:12:15.092976+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b6cdf379-0360-40d8-baf7-36ebbae7e098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbep2jegn2k", "content": "\ud83d\udd34 CVE-2026-19072 - Critical (9.9)\n\nVelociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19072/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T13:34:52.910693Z"} 2026-09-24T13:34:52.910693+00:00 https://vulnerability.circl.lu/sighting/1b6b07b0-57f9-4587-af83-35133c9dd37c/export 2026-09-29T21:12:15.093238+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1b6b07b0-57f9-4587-af83-35133c9dd37c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19072", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwbeh73ktv2b", "content": "CRITICAL: Rapid7 Velociraptor <0.77.2 has a privilege escalation flaw (CVE-2026-19072, CVSS 9.9). 'Investigator' users can gain admin by injecting VQL. Upgrade to 0.77.2+ ASAP. https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velocira...", "creation_timestamp": "2026-09-24T13:30:28.660662Z"} 2026-09-24T13:30:28.660662+00:00 https://vulnerability.circl.lu/sighting/ff887304-78b0-413d-b932-09aceae9270b/export 2026-09-29T21:12:15.093483+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ff887304-78b0-413d-b932-09aceae9270b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19072", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117326258214428675", "content": "CVE-2026-19072 (CRITICAL, CVSS 9.9) impacts Rapid7 Velociraptor <0.77.2. 'Investigator' role can escalate to admin by injecting arbitrary VQL via API. Patch by upgrading to 0.77.2+. Details: https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velociraptor-1faa73dd4a3adad9 #OffSeq #Velociraptor #CVE #Infosec", "creation_timestamp": "2026-09-24T13:30:26.543361Z"} 2026-09-24T13:30:26.543361+00:00