https://vulnerability.circl.lu/sightings/feed 2026-07-23T11:14:33.590473+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/62d0d62f-65e0-466d-a05c-91f31e44dfcb/export 2026-07-23T11:14:33.619349+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "62d0d62f-65e0-466d-a05c-91f31e44dfcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3ttbetjd2q", "content": "CVE-2026-63429 - HeyForm has unauthenticated /api/upload endpoint that accepts arbitrary files with no auth/session/form context\nCVE ID : CVE-2026-63429\n \n Published : July 20, 2026, 4:17 p.m. | 18\u00a0minutes ago\n \n Description : HeyForm is an open-source form builder. Prior to v...", "creation_timestamp": "2026-07-20T17:43:44.186669Z"} 2026-07-20T17:43:44.186669+00:00 https://vulnerability.circl.lu/sighting/cf31724e-7a43-4a7b-afb7-be8c6cfd35d3/export 2026-07-23T11:14:33.621600+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cf31724e-7a43-4a7b-afb7-be8c6cfd35d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63429", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116953416257282503", "content": "CVE-2026-63429 - Critical auth bypass in Heyform open-source form builder. Anonymous users can upload files up to 10MB to a public URL with no authentication checks. CVSS 8.6. No patch yet - restrict access immediately. #CVE #Heyform #infosec\nhttps://www.valtersit.com/cve/CVE-2026-63429/", "creation_timestamp": "2026-07-20T17:11:49.339882Z"} 2026-07-20T17:11:49.339882+00:00 https://vulnerability.circl.lu/sighting/f4ec0e5b-e561-4db6-b6b0-1aefccd6fab9/export 2026-07-23T11:14:33.621748+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f4ec0e5b-e561-4db6-b6b0-1aefccd6fab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63429", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr3s2aonz52z", "content": "CVE-2026-63429 - Critical auth bypass in Heyform open-source form builder. Anonymous users can upload files up to 10MB to a public URL with no authentication checks. CVSS 8.6. No patch yet - restrict access immediately. #CVE #Heyform #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-63429/", "creation_timestamp": "2026-07-20T17:11:49.043354Z"} 2026-07-20T17:11:49.043354+00:00 https://vulnerability.circl.lu/sighting/85bf0a3b-20ce-4879-81c3-9246be0edadf/export 2026-07-23T11:14:33.621862+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "85bf0a3b-20ce-4879-81c3-9246be0edadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63429", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rg45qoq2j", "content": "\ud83d\udfe0 CVE-2026-63429 - High (8.6)\n\nHeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no au...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63429/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T17:00:33.714332Z"} 2026-07-20T17:00:33.714332+00:00