https://vulnerability.circl.lu/sightings/feed 2026-09-15T18:07:30.052760+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6598e9e8-b4ba-46bb-810a-93914b48c71e/export 2026-09-15T18:07:30.080779+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6598e9e8-b4ba-46bb-810a-93914b48c71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48717", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklmrwhjf2w", "content": "\ud83d\udea8 CVE-2026-48717 \u2014 CVSS 9.1 CRITICAL\n\nOpen Access Management (OpenAM) is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTy...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48717\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:07:37.510142Z"} 2026-09-15T12:07:37.510142+00:00 https://vulnerability.circl.lu/sighting/471975ca-dcae-4922-ac28-e578ecf19617/export 2026-09-15T18:07:30.082891+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "471975ca-dcae-4922-ac28-e578ecf19617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48717", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvkixutqr32p", "content": "CVE-2026-48717 - org.openidentityplatform.openam:openam-oauth2\nA security issue in OpenAM's OAuth2 authorization system allows an attacker to obtain access tokens without verifying the required\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openidentityplatform #Java #CVE #infosec", "creation_timestamp": "2026-09-15T11:20:08.464867Z"} 2026-09-15T11:20:08.464867+00:00 https://vulnerability.circl.lu/sighting/6201736c-e436-4dcb-a070-ac64c63a357b/export 2026-09-15T18:07:30.083080+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6201736c-e436-4dcb-a070-ac64c63a357b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/nik-kale.bsky.social/post/3mvdsx4cgbp2i", "content": "LiteLLM: CVE-2026-42271 chained with CVE-2026-48710 for remote code execution, then credential theft, database access and cryptomining. RAGFlow: provider credentials intercepted through application hooks.", "creation_timestamp": "2026-09-12T19:30:02.222186Z"} 2026-09-12T19:30:02.222186+00:00 https://vulnerability.circl.lu/sighting/b747c1bf-9a5b-478a-8082-4b2b95e196e3/export 2026-09-15T18:07:30.083211+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b747c1bf-9a5b-478a-8082-4b2b95e196e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48710", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muowzp2rfa27", "content": "Kludex Starlette HTTP Request/Response Smuggling Vulnerability https://0daynews.com/cves/cve-2026-48710", "creation_timestamp": "2026-09-04T12:17:09.308414Z"} 2026-09-04T12:17:09.308414+00:00 https://vulnerability.circl.lu/sighting/a28e03d8-ac0b-4304-a6f1-6409e4eb413c/export 2026-09-15T18:07:30.083353+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a28e03d8-ac0b-4304-a6f1-6409e4eb413c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mumzts2eon2i", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-48710 \u2013 Kludex Starlette HTTP Request/Response Smuggling\u00a0Vulnerability\n\nActive CISA KEV exploitation of CVE-2026-48710 exposes Starlette to request smuggling and auth bypass. Review board-ready governance, asset\u2026\n\nhttps://thecybermind.co/r67t", "creation_timestamp": "2026-09-03T18:02:13.402045Z"} 2026-09-03T18:02:13.402045+00:00 https://vulnerability.circl.lu/sighting/7966c171-06fa-4006-b1bb-6412de557198/export 2026-09-15T18:07:30.083482+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7966c171-06fa-4006-b1bb-6412de557198", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0ae77e06-8eea-4b3c-935d-a00f99b05c75", "content": "", "creation_timestamp": "2026-09-03T18:00:29.960125Z"} 2026-09-03T18:00:29.960125+00:00 https://vulnerability.circl.lu/sighting/bf66e4fb-6dce-46bf-8d14-5fe1df44e53c/export 2026-09-15T18:07:30.083623+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bf66e4fb-6dce-46bf-8d14-5fe1df44e53c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mumf3mrbwc2x", "content": "\u3010\u7dca\u6025\u3011LiteLLM \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-59822 / CVSS v3.1 \u3067 8.2 HIGH\uff09\n\n\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u507d\u306eAuthorization\u30d8\u30c3\u30c0\u3067\u8a8d\u8a3c\u3092\u56de\u907f\u3057\u3001MCP\u30c4\u30fc\u30eb\u306b\u5230\u9054\u3067\u304d\u307e\u3059\u3002CISA\u304c9\u67082\u65e5\u306b\u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u30ea\u30b9\u30c8\uff08KEV\uff09\u3078\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\u5bfe\u51e6: LiteLLM\u30921.84.0\u4ee5\u964d\u3078\u3002Starlette\uff08CVE-2026-48710\uff09\u30821.0.1\u4ee5\u964d\u3078\u66f4\u65b0\u3092\u3002\n\nforsmile.jp/articles/lit...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-03T11:50:49.362422Z"} 2026-09-03T11:50:49.362422+00:00 https://vulnerability.circl.lu/sighting/14d18a85-1fc5-46dd-80de-3ec78eb2d76f/export 2026-09-15T18:07:30.083720+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "14d18a85-1fc5-46dd-80de-3ec78eb2d76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mult7rnb4h2q", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-48710: \u26a0\ufe0f CVE-2026-48710: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 2.1%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-48710-starlette-is-a-lightweight-asgi-frameworktoolkit", "creation_timestamp": "2026-09-03T06:30:59.023043Z"} 2026-09-03T06:30:59.023043+00:00 https://vulnerability.circl.lu/sighting/bdaf13a8-eb82-47ed-bd50-abcd3c1547de/export 2026-09-15T18:07:30.083805+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bdaf13a8-eb82-47ed-bd50-abcd3c1547de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202988713449046", "content": "Looks like CISA's on a roll. Seven vulnerabilities have been added to the catalogue.\n- CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83549\n- CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83548\n- CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-9586\n- CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-82329\n- CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-49869\n- CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48710\n- CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-59822 #CISA #infosec #vulnerability", "creation_timestamp": "2026-09-02T19:01:24.648266Z"} 2026-09-02T19:01:24.648266+00:00 https://vulnerability.circl.lu/sighting/593da085-7711-40ae-9b90-5e184038e3c3/export 2026-09-15T18:07:30.083888+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "593da085-7711-40ae-9b90-5e184038e3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48710", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukjsx6mjj2v", "content": "\ud83d\uded1 CVE-2026-48710\nKludex Starlette\nCVSS 6.5 / EPSS 2% / KEV \u2705\nTL;DR: Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` r\u2026\nhttps://cvesentinel.com/report/CVE-2026-48710?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T18:10:05.881512Z"} 2026-09-02T18:10:05.881512+00:00