https://vulnerability.circl.lu/sightings/feed 2026-09-15T10:46:09.061640+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a682989f-f0e5-42a8-ac69-42e55af9c8da/export 2026-09-15T10:46:09.089705+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a682989f-f0e5-42a8-ac69-42e55af9c8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22807", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-03T00:00:48.391116Z"} 2026-09-03T00:00:48.391116+00:00 https://vulnerability.circl.lu/sighting/cbb201ac-a7f5-4370-8912-821b833cf31b/export 2026-09-15T10:46:09.092281+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cbb201ac-a7f5-4370-8912-821b833cf31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22807", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-02T06:00:13.935259Z"} 2026-09-02T06:00:13.935259+00:00 https://vulnerability.circl.lu/sighting/3d2b1a93-28fe-4105-99c5-cfacf145ee44/export 2026-09-15T10:46:09.092427+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3d2b1a93-28fe-4105-99c5-cfacf145ee44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17215", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:29.377091Z"} 2026-08-28T00:00:29.377091+00:00 https://vulnerability.circl.lu/sighting/238d787a-0ec5-4ca8-98ca-16799233ec85/export 2026-09-15T10:46:09.092574+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "238d787a-0ec5-4ca8-98ca-16799233ec85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17215", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.114948Z"} 2026-08-27T20:00:04.114948+00:00 https://vulnerability.circl.lu/sighting/7dba37fd-27b0-4c00-afa9-204a1e2d1f84/export 2026-09-15T10:46:09.092706+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7dba37fd-27b0-4c00-afa9-204a1e2d1f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31537", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.000429Z"} 2026-08-16T00:00:25.000429+00:00 https://vulnerability.circl.lu/sighting/7fe1cf6c-376c-490f-82e2-e51ede2f7f73/export 2026-09-15T10:46:09.092834+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7fe1cf6c-376c-490f-82e2-e51ede2f7f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31536", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.676380Z"} 2026-08-16T00:00:24.676380+00:00 https://vulnerability.circl.lu/sighting/5fac373a-e951-4119-a2ed-da96443a1c03/export 2026-09-15T10:46:09.092951+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5fac373a-e951-4119-a2ed-da96443a1c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31537", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T14:00:04.601097Z"} 2026-08-15T14:00:04.601097+00:00 https://vulnerability.circl.lu/sighting/cffc268e-7f48-4fcc-9f02-0272c24dc1dd/export 2026-09-15T10:46:09.093065+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cffc268e-7f48-4fcc-9f02-0272c24dc1dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22804", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31536", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T14:00:04.279568Z"} 2026-08-15T14:00:04.279568+00:00 https://vulnerability.circl.lu/sighting/4a95a901-edc0-48bc-ab71-f627896e6d9b/export 2026-09-15T10:46:09.093178+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4a95a901-edc0-48bc-ab71-f627896e6d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22805", "type": "seen", "source": "Telegram/lg_uE38htKCDsrEIH_zbRJLgqsKSDV6aHHtfYRxKZkwP2V8", "content": "", "creation_timestamp": "2026-04-10T15:17:16.000000Z"} 2026-04-10T15:17:16+00:00 https://vulnerability.circl.lu/sighting/ca3502b0-bd05-4712-9308-4a5140191afa/export 2026-09-15T10:46:09.093275+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "ca3502b0-bd05-4712-9308-4a5140191afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-22803", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/2b58b75c-ed2f-43e6-9955-22f649ee1814", "content": "", "creation_timestamp": "2026-02-18T14:20:55.000000Z"} 2026-02-18T14:20:55+00:00