https://vulnerability.circl.lu/sightings/feed 2026-09-05T00:59:11.486797+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/284e9ff8-afbd-4271-8397-3db16eca7a67/export 2026-09-05T00:59:11.510672+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "284e9ff8-afbd-4271-8397-3db16eca7a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5432", "type": "published-proof-of-concept", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-04T00:00:45.053316Z"} 2026-08-04T00:00:45.053316+00:00 https://vulnerability.circl.lu/sighting/54e2e513-a233-4f5e-9221-4b44291c4a3c/export 2026-09-05T00:59:11.512643+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "54e2e513-a233-4f5e-9221-4b44291c4a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5432", "type": "seen", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-03T08:00:03.021063Z"} 2026-08-03T08:00:03.021063+00:00 https://vulnerability.circl.lu/sighting/83f9bc26-64ed-4dee-9045-c6a8063f1439/export 2026-09-05T00:59:11.512731+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "83f9bc26-64ed-4dee-9045-c6a8063f1439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54329", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqf5agynjb2r", "content": "\ud83d\udfe0 CVE-2026-54329 - High (8.5)\n\nSnipe-IT is an IT asset/license management system. Prior to 8.6.2, the Accessories API create pat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54329/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T17:00:54.680386Z"} 2026-07-11T17:00:54.680386+00:00 https://vulnerability.circl.lu/sighting/74d6ad14-9fc7-4ac3-ba4b-2880711cae72/export 2026-09-05T00:59:11.512805+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "74d6ad14-9fc7-4ac3-ba4b-2880711cae72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54329", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcwmrbo5x25", "content": "CVE-2026-54329 - Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API\nCVE ID : CVE-2026-54329\n \n Published : July 10, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the Accessories API create path mass...", "creation_timestamp": "2026-07-10T19:57:12.112215Z"} 2026-07-10T19:57:12.112215+00:00 https://vulnerability.circl.lu/sighting/88529f5a-1368-45cf-96bf-3c256192e432/export 2026-09-05T00:59:11.512877+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "88529f5a-1368-45cf-96bf-3c256192e432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54324", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moyamnmddw26", "content": "CVE-2026-54324 - Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join\nCVE ID : CVE-2026-54324\n \n Published : June 23, 2026, 6:07 p.m. | 1\u00a0hour, 36\u00a0minutes ago\n \n Description : Daytona is a secure and elastic infrastructure runtim...", "creation_timestamp": "2026-06-23T20:31:37.115264Z"} 2026-06-23T20:31:37.115264+00:00 https://vulnerability.circl.lu/sighting/1f8ed2da-1744-4520-b559-99f2c493ef59/export 2026-09-05T00:59:11.512943+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1f8ed2da-1744-4520-b559-99f2c493ef59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moyagoino72a", "content": "CVE-2026-54321 - Daytona: Public sandbox previews remain accessible for up to one hour after being made private\nCVE ID : CVE-2026-54321\n \n Published : June 23, 2026, 6:10 p.m. | 1\u00a0hour, 34\u00a0minutes ago\n \n Description : Daytona is a secure and elastic infrastructure runtime for ...", "creation_timestamp": "2026-06-23T20:28:16.478108Z"} 2026-06-23T20:28:16.478108+00:00 https://vulnerability.circl.lu/sighting/fd43a49a-d356-4896-ab3f-b0f13b2e2494/export 2026-09-05T00:59:11.513010+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fd43a49a-d356-4896-ab3f-b0f13b2e2494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54322", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moy7xvxbae2l", "content": "CVE-2026-54322 - Daytona: Cross-org IDOR in organization role update/delete \u2014 any org owner can rewrite or destroy another org's roles\nCVE ID : CVE-2026-54322\n \n Published : June 23, 2026, 6:07 p.m. | 1\u00a0hour, 36\u00a0minutes ago\n \n Description : Daytona is a secure and elastic infr...", "creation_timestamp": "2026-06-23T20:20:00.880671Z"} 2026-06-23T20:20:00.880671+00:00 https://vulnerability.circl.lu/sighting/d02dfaf2-37a5-415a-9c2a-c270a77b274b/export 2026-09-05T00:59:11.513074+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d02dfaf2-37a5-415a-9c2a-c270a77b274b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54323", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moy7ixesuo2r", "content": "CVE-2026-54323 - Daytona: Git credential leak via git clone with TLS verification disabled\nCVE ID : CVE-2026-54323\n \n Published : June 23, 2026, 6:06 p.m. | 1\u00a0hour, 37\u00a0minutes ago\n \n Description : Daytona is a secure and elastic infrastructure runtime for AI-generated code exe...", "creation_timestamp": "2026-06-23T20:11:39.107264Z"} 2026-06-23T20:11:39.107264+00:00 https://vulnerability.circl.lu/sighting/b2094464-a4f8-49ca-9482-2e7e5ee5b87d/export 2026-09-05T00:59:11.513139+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b2094464-a4f8-49ca-9482-2e7e5ee5b87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54320", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moy7cs26fp2f", "content": "CVE-2026-54320 - Daytona: Cross-tenant organization takeover via invitation acceptance with an unverified email\nCVE ID : CVE-2026-54320\n \n Published : June 23, 2026, 6:11 p.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : Daytona is a secure and elastic infrastructure runtime for ...", "creation_timestamp": "2026-06-23T20:08:12.256339Z"} 2026-06-23T20:08:12.256339+00:00