https://vulnerability.circl.lu/sightings/feed 2026-08-24T23:14:04.728909+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c2d1d901-589b-4378-8cb3-ae4eca1b76f2/export 2026-08-24T23:14:04.751708+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c2d1d901-589b-4378-8cb3-ae4eca1b76f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4671", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mtt7sklh442o", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-4671\n\njusthtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification. Applications that evalua...", "creation_timestamp": "2026-08-24T11:39:40.802231Z"} 2026-08-24T11:39:40.802231+00:00 https://vulnerability.circl.lu/sighting/66922478-86f3-4012-b7c8-184703a55dfb/export 2026-08-24T23:14:04.754855+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "66922478-86f3-4012-b7c8-184703a55dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4671", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtr4bk7ikr2b", "content": "justhtml 1.18.0\u672a\u6e80\u3067\u306f\u3001CSS\u30bb\u30ec\u30af\u30bf\u51e6\u7406\u3084\u30ea\u30f3\u30af\u5316\u306b\u8907\u6570\u306e\u4f4e\u6df1\u523b\u5ea6DoS\u8106\u5f31\u6027\u3002CPU/\u30e1\u30e2\u30ea\u6d88\u8cbb\u5897\u5927\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-4671 CVSS 7.5 | HIGH", "creation_timestamp": "2026-08-23T15:31:09.200586Z"} 2026-08-23T15:31:09.200586+00:00 https://vulnerability.circl.lu/sighting/106573b2-16e1-447e-8fe7-3e411f1d7210/export 2026-08-24T23:14:04.754994+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "106573b2-16e1-447e-8fe7-3e411f1d7210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4671", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2mbkvv227", "content": "\ud83d\udfe0 CVE-2026-4671 - High (7.5)\n\njusthtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector ha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4671/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T15:01:22.971242Z"} 2026-08-23T15:01:22.971242+00:00 https://vulnerability.circl.lu/sighting/42fe2218-a324-433d-a7d9-bbd7e91c7b75/export 2026-08-24T23:14:04.755097+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "42fe2218-a324-433d-a7d9-bbd7e91c7b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46713", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7lsq36if2b", "content": "CVE-2026-46713\nVersions of the Misskey social media platform released between 12.37.0 and 2026.5.4 are at risk of accepting fake social media activities as real. This can lead to misinformation and compromised user trust.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-03T22:56:07.827530Z"} 2026-08-03T22:56:07.827530+00:00 https://vulnerability.circl.lu/sighting/c0c1a77a-7c61-4249-96ea-2529db958653/export 2026-08-24T23:14:04.755199+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c0c1a77a-7c61-4249-96ea-2529db958653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46712", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j6xxqshilthsi", "content": "CVE-2026-46712 - Misskey: Lack of proper permission checks in Direct Messaging feature\nCVE ID : CVE-2026-46712\n \n Published : Aug. 3, 2026, 9:29 p.m. | 28\u00a0minutes ago\n \n Description : Misskey is an open source, federated social media platform. Versions 2025.3.2 and later, but ...", "creation_timestamp": "2026-08-03T22:26:17.088006Z"} 2026-08-03T22:26:17.088006+00:00 https://vulnerability.circl.lu/sighting/74c9870a-29e4-417d-a4d4-71673d2e4a91/export 2026-08-24T23:14:04.755300+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "74c9870a-29e4-417d-a4d4-71673d2e4a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46710", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpwzbige2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-46710 \u0432 Notepad++: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E7B47411-9210-4E0F-8A4C-E847826A26ED", "creation_timestamp": "2026-06-29T14:43:07.225079Z"} 2026-06-29T14:43:07.225079+00:00 https://vulnerability.circl.lu/sighting/b6c6a99f-b108-4275-8420-9d87968bd726/export 2026-08-24T23:14:04.755403+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b6c6a99f-b108-4275-8420-9d87968bd726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46710", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wzuqcse27", "content": "CVE-2026-46710 - Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path\nCVE ID : CVE-2026-46710\n \n Published : June 26, 2026, 8:16 p.m. | 1\u00a0hour, 28\u00a0minutes ago\n \n Description : Notepad++ is a free and open-source source code editor. From 8.9....", "creation_timestamp": "2026-06-26T22:01:20.999255Z"} 2026-06-26T22:01:20.999255+00:00 https://vulnerability.circl.lu/sighting/e32ffe2c-66f7-4c90-b77f-93106037688b/export 2026-08-24T23:14:04.755501+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e32ffe2c-66f7-4c90-b77f-93106037688b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46717", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo5hwpjwq22y", "content": "\ud83d\udfe0 CVE-2026-46717 - High (7.7)\n\nNezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. F...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46717/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T05:02:44.253266Z"} 2026-06-13T05:02:44.253266+00:00 https://vulnerability.circl.lu/sighting/e3b6ac7e-690a-4079-a2e9-f3a23fc4543a/export 2026-08-24T23:14:04.755605+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e3b6ac7e-690a-4079-a2e9-f3a23fc4543a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46716", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116740209204595402", "content": "\ud83d\udea8 CRITICAL: CVE-2026-46716 in nezhahq nezha Monitoring (<2.0.8) lets RoleMember users inject OS commands on all servers, breaching tenant isolation. Upgrade to 2.0.8+ ASAP. RCE and data exposure risk! https://radar.offseq.com/threat/cve-2026-46716-cwe-78-improper-neutralization-of-s-991afd28 #OffSeq #infosec #vuln #CVE202646716", "creation_timestamp": "2026-06-13T01:30:28.345215Z"} 2026-06-13T01:30:28.345215+00:00 https://vulnerability.circl.lu/sighting/501190ba-3125-405b-a28f-d97e8e97eb1f/export 2026-08-24T23:14:04.755702+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "501190ba-3125-405b-a28f-d97e8e97eb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46718", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnco32yoiu2o", "content": "CVE-2026-46718 - Apache Calcite: A user-controled model can load arbitrary classes, leading to code execution\nCVE ID : CVE-2026-46718\n \n Published : June 2, 2026, 10:16 a.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : Use of Externally-Controlled Input to Select Classes or Code...", "creation_timestamp": "2026-06-02T13:08:33.392173Z"} 2026-06-02T13:08:33.392173+00:00