https://vulnerability.circl.lu/sightings/feed 2026-07-21T01:21:05.028218+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/41a889ff-625c-4913-bdba-6568b8c83542/export 2026-07-21T01:21:05.054672+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "41a889ff-625c-4913-bdba-6568b8c83542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54523", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqzehcl4ei2j", "content": "\u2638\ufe0f TREND: Kyverno flaw CVE-2026-54523 (CVSS 9.6) now has a public PoC \u2014 any user who can create a namespaced Policy can ride Kyverno's admission-controller identity to admin ANY namespace, bypassing RBAC. If you run Kyverno, patch and audit Policy writers. Src: GitHub Advisory", "creation_timestamp": "2026-07-19T18:03:15.974521Z"} 2026-07-19T18:03:15.974521+00:00 https://vulnerability.circl.lu/sighting/17ff7c47-1e64-4af6-83ff-83229f9d2146/export 2026-07-21T01:21:05.057211+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "17ff7c47-1e64-4af6-83ff-83229f9d2146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54523", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116936632297942265", "content": "\u203c\ufe0f New Dark Web Informer Blog Post!\nTitle: One Namespace String to kube-system: Cross-Namespace Privilege Escalation in Kyverno (CVE-2026-54523)\nLink: https://darkwebinformer.com/one-namespace-string-to-kube-system-cross-namespace-privilege-escalation-in-kyverno-cve-2026-54523/\n\ud83d\udca5 Get early visibility into underground claims, including unblurred screenshots, before they turn into headlines: https://darkwebinformer.com/pricing", "creation_timestamp": "2026-07-17T18:03:26.413269Z"} 2026-07-17T18:03:26.413269+00:00 https://vulnerability.circl.lu/sighting/83ceb13d-7ec7-47a6-9fb0-0e387c2a8750/export 2026-07-21T01:21:05.057349+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "83ceb13d-7ec7-47a6-9fb0-0e387c2a8750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54523", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqtt7pkz5a2v", "content": "Kyverno vulnerability CVE-2026-54523 (CVSS 9.6) is public with PoC exploit code. It lets a tenant gain admin in any namespace. Update to v1.18.2.\n\n#Kyverno #CVE202654523 #PrivilegeEscalation #Kubernetes #CyberSecurity", "creation_timestamp": "2026-07-17T13:11:29.004847Z"} 2026-07-17T13:11:29.004847+00:00