https://vulnerability.circl.lu/sightings/feed 2026-09-14T21:56:30.892372+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/25ca0d3e-8eef-47bd-9a28-b34b0184d68c/export 2026-09-14T21:56:30.912904+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "25ca0d3e-8eef-47bd-9a28-b34b0184d68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "Telegram/SISeOiJWiDHPKa0-EGjfIE-t_IZnqvMDmbIqcTRDP3O63UA", "content": "", "creation_timestamp": "2026-09-14T03:00:13.529181Z"} 2026-09-14T03:00:13.529181+00:00 https://vulnerability.circl.lu/sighting/36a8a15c-160f-4996-9379-d0d05cfdd102/export 2026-09-14T21:56:30.915239+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "36a8a15c-160f-4996-9379-d0d05cfdd102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "Telegram/kfB0INME4u0KlXUgzu2Kc3QZx_kW1-RqcQVuun_hv92a7q0", "content": "", "creation_timestamp": "2026-09-14T00:00:12.932809Z"} 2026-09-14T00:00:12.932809+00:00 https://vulnerability.circl.lu/sighting/9bb5a064-d282-49c6-8551-5e264299eb85/export 2026-09-14T21:56:30.915370+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9bb5a064-d282-49c6-8551-5e264299eb85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvgd6wjk4y24", "content": "Weekly threat recap: credential theft, session hijacking, fast-moving exploit chains, and AI abuse patterns. Highlights include BigBear 2.0, HVNC, ClearFake/WebDAV, ChatGPT clipboard leakage, and Marimo CVE-2026-39987. #BigBear #ClearFake #AIabuse", "creation_timestamp": "2026-09-13T19:26:03.810200Z"} 2026-09-13T19:26:03.810200+00:00 https://vulnerability.circl.lu/sighting/5e14deb5-da6f-4fdc-ac19-0a226305e4e9/export 2026-09-14T21:56:30.915479+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5e14deb5-da6f-4fdc-ac19-0a226305e4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "Telegram/kfB0INME4u0KlXUgzu2Kc3QZx_kW1-RqcQVuun_hv92a7q0", "content": "", "creation_timestamp": "2026-09-13T15:00:05.474559Z"} 2026-09-13T15:00:05.474559+00:00 https://vulnerability.circl.lu/sighting/c90833ad-9d14-4d00-b603-ce904c2a02f4/export 2026-09-14T21:56:30.915585+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c90833ad-9d14-4d00-b603-ce904c2a02f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvf3pk2l2g2t", "content": "Machine speed, hold the AI: Hand-rolled marimo CVE-2026-39987 exploit", "creation_timestamp": "2026-09-13T07:39:31.852236Z"} 2026-09-13T07:39:31.852236+00:00 https://vulnerability.circl.lu/sighting/d0ceccb1-4fed-4130-afa7-b56b8a41e5b7/export 2026-09-14T21:56:30.915683+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d0ceccb1-4fed-4130-afa7-b56b8a41e5b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvbu45xm4a2l", "content": "Hand-built Python tooling exploited CVE-2026-39987 in marimo, turning pre-auth WebSocket access into SSH on a bastion in 8 seconds, with AWS credential harvesting and EC2 enumeration. #marimo #AWS #Linode", "creation_timestamp": "2026-09-12T00:45:26.668056Z"} 2026-09-12T00:45:26.668056+00:00 https://vulnerability.circl.lu/sighting/fdd161e8-15d2-4798-9a36-06f7b1afe962/export 2026-09-14T21:56:30.915782+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fdd161e8-15d2-4798-9a36-06f7b1afe962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102072", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987_POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a julichaan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-11 18:30:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMarimo WS Preauth RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-12T00:00:12.557035Z"} 2026-09-12T00:00:12.557035+00:00 https://vulnerability.circl.lu/sighting/acedb41c-54bf-4c98-99c8-749b7f5e550a/export 2026-09-14T21:56:30.915888+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "acedb41c-54bf-4c98-99c8-749b7f5e550a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/193877", "content": "There are vulnerabilities that require chaining multiple weaknesses, bypassing filters, and spending hours building an exploitation path.Continue reading on Medium \u00bb (https://medium.com/@espadar.julian/a-websocket-a-shell-and-a-critical-cve-discovering-cve-2026-39987-1e97b8e46394?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-12T00:00:09.682822Z"} 2026-09-12T00:00:09.682822+00:00 https://vulnerability.circl.lu/sighting/515edd7e-2672-43ae-9650-1bd785b9bdd7/export 2026-09-14T21:56:30.915984+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "515edd7e-2672-43ae-9650-1bd785b9bdd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/193875", "content": "A WebSocket, a Shell, and a Critical CVE: Discovering CVE-2026\u201339987\nhttps://medium.com/@espadar.julian/a-websocket-a-shell-and-a-critical-cve-discovering-cve-2026-39987-1e97b8e46394?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-12T00:00:09.627983Z"} 2026-09-12T00:00:09.627983+00:00 https://vulnerability.circl.lu/sighting/0924c802-6bfc-436e-82e1-d950dc212863/export 2026-09-14T21:56:30.916082+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0924c802-6bfc-436e-82e1-d950dc212863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://t.me/GithubRedTeam/102072", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39987_POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a julichaan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-11 18:30:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMarimo WS Preauth RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T21:00:03.736047Z"} 2026-09-11T21:00:03.736047+00:00