https://vulnerability.circl.lu/sightings/feed 2026-10-05T14:29:25.236479+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/407463f4-aca2-4fd6-af46-de46d8e6461f/export 2026-10-05T14:29:25.264658+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "407463f4-aca2-4fd6-af46-de46d8e6461f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45006", "type": "seen", "source": "https://t.me/shimiscyberworld/1364", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-11\n\n\ud83d\udcca 17 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 16 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2026-42864 (9.9) \u2014 CVE-2026-42864: Unauthenticated RCE in FireFighter Incident\u2026\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2026-45006 (8.8) \u2014 OpenClaw Improper Access Control Bypasses Denylist, Allows\u2026\n \u2022 CVE-2026-45223 (8.8) \u2014 CVE-2026-45223: Crabbox Authentication Bypass Allows Admin\u2026\n \u2022 CVE-2026-42858 (8.5) \u2014 Open edX Platform SSRF via Unvalidated URL Parameter\u2026\n \u2022 CVE-2026-42860 (8.5) \u2014 Open edX Enterprise Service Vulnerability Allows SSRF via\u2026\n \u2022 CVE-2026-42313 (8.3) \u2014 CVE-2026-42313: pyLoad Proxy Bypass Exposes Outbound Traffic\n \u2022 CVE-2026-44413 (8.2) \u2014 JetBrains TeamCity CVE-2026-44413: Authenticated Exposure\u2026\n \u2022 CVE-2026-42315 (8.1) \u2014 CVE-2026-42315: pyLoad Directory Traversal Puts Data at Risk\n \u2022 CVE-2026-43640 (8.1) \u2014 Bitwarden Server CVE-2026-43640: SCIM API Key Exposed\u2026\n \u2022 CVE-2026-41431 (8) \u2014 CVE-2026-41431: Zen Browser Updater Strips Signature\u2026\n \u2022 CVE-2026-43639 (8) \u2014 Bitwarden Server CVE-2026-43639 Allows Organization\u2026\n \u2026 and 6 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:07.861108Z"} 2026-09-12T10:00:07.861108+00:00 https://vulnerability.circl.lu/sighting/358101b1-61b4-4cba-a461-5a7f4f882118/export 2026-10-05T14:29:25.268129+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "358101b1-61b4-4cba-a461-5a7f4f882118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllylfpivv2k", "content": "CVE-2026-45006 - OpenClaw\nCVE ID : CVE-2026-45006\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and config.patch operations that allows com...", "creation_timestamp": "2026-05-11T19:20:13.302513Z"} 2026-05-11T19:20:13.302513+00:00 https://vulnerability.circl.lu/sighting/ce2ff165-999b-44f8-8ce1-d986568d2623/export 2026-10-05T14:29:25.268298+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ce2ff165-999b-44f8-8ce1-d986568d2623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45005", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllychagb52q", "content": "CVE-2026-45005 - OpenClaw\nCVE ID : CVE-2026-45005\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.23 caches resolved webhook route secrets backed by SecretRef values, allowing stale secrets to remain valid after rotation and relo...", "creation_timestamp": "2026-05-11T19:15:12.996272Z"} 2026-05-11T19:15:12.996272+00:00 https://vulnerability.circl.lu/sighting/0b8c4dfb-6554-4731-bb77-e503b4e23f1e/export 2026-10-05T14:29:25.268431+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0b8c4dfb-6554-4731-bb77-e503b4e23f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlly2rocca2q", "content": "CVE-2026-45004 - OpenClaw\nCVE ID : CVE-2026-45004\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd...", "creation_timestamp": "2026-05-11T19:10:55.478894Z"} 2026-05-11T19:10:55.478894+00:00 https://vulnerability.circl.lu/sighting/cc6ae80c-a8fd-4f4c-b60e-ad853f62edde/export 2026-10-05T14:29:25.268570+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cc6ae80c-a8fd-4f4c-b60e-ad853f62edde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllxo3pxue2r", "content": "CVE-2026-45003 - OpenClaw\nCVE ID : CVE-2026-45003\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors. Attacke...", "creation_timestamp": "2026-05-11T19:03:49.837918Z"} 2026-05-11T19:03:49.837918+00:00 https://vulnerability.circl.lu/sighting/ab704992-c149-4b15-82ce-809f332c3679/export 2026-10-05T14:29:25.268693+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ab704992-c149-4b15-82ce-809f332c3679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45000", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllxipqunm2i", "content": "CVE-2026-45000 - OpenClaw\nCVE ID : CVE-2026-45000\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. ...", "creation_timestamp": "2026-05-11T19:00:49.354245Z"} 2026-05-11T19:00:49.354245+00:00 https://vulnerability.circl.lu/sighting/a79be7ba-597b-46c2-925e-4f0a221654d5/export 2026-10-05T14:29:25.268811+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a79be7ba-597b-46c2-925e-4f0a221654d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllx7csja72h", "content": "CVE-2026-45002 - OpenClaw\nCVE ID : CVE-2026-45002\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in res...", "creation_timestamp": "2026-05-11T18:55:33.939511Z"} 2026-05-11T18:55:33.939511+00:00 https://vulnerability.circl.lu/sighting/a0119b06-7cd3-4f57-b9bd-4be5345c5175/export 2026-10-05T14:29:25.268928+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a0119b06-7cd3-4f57-b9bd-4be5345c5175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45001", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllwtodafh2e", "content": "CVE-2026-45001 - OpenClaw\nCVE ID : CVE-2026-45001\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect ...", "creation_timestamp": "2026-05-11T18:49:06.629702Z"} 2026-05-11T18:49:06.629702+00:00 https://vulnerability.circl.lu/sighting/17eaac55-fd77-47f5-8f21-513abead9b3a/export 2026-10-05T14:29:25.269036+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "17eaac55-fd77-47f5-8f21-513abead9b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45006", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdoj2cq2q", "content": "\ud83d\udfe0 CVE-2026-45006 - High (8.8)\n\nOpenClaw before 2026.4.23 contains an improper access control vulnerability in the gateway tool's...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45006/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T18:22:13.650353Z"} 2026-05-11T18:22:13.650353+00:00 https://vulnerability.circl.lu/sighting/9fe749c2-45d1-49c5-861a-cc4068f8cc2f/export 2026-10-05T14:29:25.269156+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9fe749c2-45d1-49c5-861a-cc4068f8cc2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45004", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdh5omh2t", "content": "\ud83d\udfe0 CVE-2026-45004 - High (7.8)\n\nOpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45004/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T18:22:05.657809Z"} 2026-05-11T18:22:05.657809+00:00