https://vulnerability.circl.lu/sightings/feed 2026-05-27T18:40:39.844815+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0bc554f2-b39a-47ce-b12c-ad1e59ed3b37/export 2026-05-27T18:40:40.258904+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0bc554f2-b39a-47ce-b12c-ad1e59ed3b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlaimg64462k", "content": "CVE-2026-41002 - Spring Cloud Config Git Repository TOCTOU Vulnerability\nCVE ID : CVE-2026-41002\n \n Published : May 7, 2026, 3:53 a.m. | 31\u00a0minutes ago\n \n Description : The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clon...", "creation_timestamp": "2026-05-07T05:35:10.661072Z"} 2026-05-07T05:35:10.661072+00:00 https://vulnerability.circl.lu/sighting/58d89070-377d-4d59-b891-24e07f3bbe9d/export 2026-05-27T18:40:40.258775+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "58d89070-377d-4d59-b891-24e07f3bbe9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlakplsqy52v", "content": "CVE-2026-41004 - Spring Cloud Config: Information Disclosure through Trace Logging\nCVE ID : CVE-2026-41004\n \n Published : May 7, 2026, 3:51 a.m. | 33\u00a0minutes ago\n \n Description : When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plai...", "creation_timestamp": "2026-05-07T06:12:44.558474Z"} 2026-05-07T06:12:44.558474+00:00 https://vulnerability.circl.lu/sighting/1add11f9-d011-440f-8b21-927e05f9a27d/export 2026-05-27T18:40:40.258640+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "1add11f9-d011-440f-8b21-927e05f9a27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-431", "content": "", "creation_timestamp": "2026-05-07T06:48:23.000000Z"} 2026-05-07T06:48:23+00:00 https://vulnerability.circl.lu/sighting/be5abccc-dbb9-43b6-bbc4-0e7cffa8bcca/export 2026-05-27T18:40:40.258491+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "be5abccc-dbb9-43b6-bbc4-0e7cffa8bcca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41004", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-spring-cloud-config", "content": "", "creation_timestamp": "2026-05-07T07:29:50.000000Z"} 2026-05-07T07:29:50+00:00 https://vulnerability.circl.lu/sighting/5f615537-bd45-4d1c-a25c-752821bbb6b5/export 2026-05-27T18:40:40.257324+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "5f615537-bd45-4d1c-a25c-752821bbb6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-spring-cloud-config", "content": "", "creation_timestamp": "2026-05-07T07:29:50.000000Z"} 2026-05-07T07:29:50+00:00 https://vulnerability.circl.lu/sighting/5c087124-999c-4dad-8db8-0b1ec15c84ab/export 2026-05-27T18:40:40.257198+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5c087124-999c-4dad-8db8-0b1ec15c84ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh3arwaw2e", "content": "\ud83d\udd17 CVE : CVE-2026-40981, CVE-2026-40982, CVE-2026-41002, CVE-2026-41004", "creation_timestamp": "2026-05-07T14:40:20.558435Z"} 2026-05-07T14:40:20.558435+00:00 https://vulnerability.circl.lu/sighting/902f12d6-ca8a-4462-aca8-e85146dca4f7/export 2026-05-27T18:40:40.257057+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "902f12d6-ca8a-4462-aca8-e85146dca4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41004", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh3arwaw2e", "content": "\ud83d\udd17 CVE : CVE-2026-40981, CVE-2026-40982, CVE-2026-41002, CVE-2026-41004", "creation_timestamp": "2026-05-07T14:40:20.722675Z"} 2026-05-07T14:40:20.722675+00:00 https://vulnerability.circl.lu/sighting/82feaa8b-a76e-477d-9fad-dde312b1885b/export 2026-05-27T18:40:40.256889+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "82feaa8b-a76e-477d-9fad-dde312b1885b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4100", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mlxp2p5ko22h", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-4100 Paid Memberships\u00a0Pro\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nPaid Memberships Pro\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u3001\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\uff083.6.5\u3092\u542b\u3080\uff09\u306b\u304a\u3044\u3066\u3001Stripe webhook\u306e\u8a2d\u5b9a\u304c\u4e0d\u6b63\u306b\u5909\u66f4\u3055\u308c\u308b\u8106\u5f31\u6027\u3092\u62b1\u3048\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-05-16T11:02:08.797878Z"} 2026-05-16T11:02:08.797878+00:00 https://vulnerability.circl.lu/sighting/aaff4eea-e638-4de2-a6e5-d54aac6b71bf/export 2026-05-27T18:40:40.254950+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "aaff4eea-e638-4de2-a6e5-d54aac6b71bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt6mzraeh2k", "content": "CVE-2026-41009 - Local Blobstore may allow arbitrary reads/deletes\nCVE ID : CVE-2026-41009\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by Agen...", "creation_timestamp": "2026-05-27T09:22:20.219393Z"} 2026-05-27T09:22:20.219393+00:00