https://vulnerability.circl.lu/sightings/feed 2026-09-24T14:48:07.330685+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9165d524-b15a-42d4-91ff-10eb43f4ff78/export 2026-09-24T14:48:07.355526+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9165d524-b15a-42d4-91ff-10eb43f4ff78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67231", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2rg52q2l", "content": "Daily IT Security Digest \u2014 2026-09-24\nusing forged certificates. This exploit is possible if the attacker knows the whitelisted certificate issuer and serial number. Security experts recommend patching immediately or disabling the plugin entirely.\nhttps://radar.offseq.com/threat/cve-2026-67231\n\n##", "creation_timestamp": "2026-09-24T05:02:26.117138Z"} 2026-09-24T05:02:26.117138+00:00 https://vulnerability.circl.lu/sighting/a11a08c6-cb02-41e3-9820-a0fa31235b8e/export 2026-09-24T14:48:07.357754+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a11a08c6-cb02-41e3-9820-a0fa31235b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67231", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2r54yw2a", "content": "Daily IT Security Digest \u2014 2026-09-24\ncompromised.\nhttps://mastodon.online/@jonsnow/117316586994987048\n\n## 3. Critical RabbitMQ Trust-Store Plugin Flaw (CVE-2026-67231)\nA critical vulnerability with CVSS 9.1 in the rabbitmq-server trust-store plugin allows attackers to bypass TLS client", "creation_timestamp": "2026-09-24T05:02:25.638491Z"} 2026-09-24T05:02:25.638491+00:00 https://vulnerability.circl.lu/sighting/ce17d5c7-49b7-4c9d-a6a9-1442f1cbbe9c/export 2026-09-24T14:48:07.357894+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ce17d5c7-49b7-4c9d-a6a9-1442f1cbbe9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67231", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwagbk7j7t2j", "content": "CVE-2026-67231 in rabbitmq-server (CRITICAL, CVSS 9.1): trust-store plugin flaw allows TLS client auth bypass with forged certs. Upgrade to fixed version or disable plugin. https://radar.offseq.com/threat/cve-2026-67231-cwe-295-improper-certificate-validation-in-rabbitmq-rabbitmq-server-e521f17aa...", "creation_timestamp": "2026-09-24T04:30:26.392056Z"} 2026-09-24T04:30:26.392056+00:00 https://vulnerability.circl.lu/sighting/9a27e0e3-2d53-455e-9583-d34e2cc60123/export 2026-09-24T14:48:07.358005+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9a27e0e3-2d53-455e-9583-d34e2cc60123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67231", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117324134725564104", "content": "CVE-2026-67231: Critical flaw in rabbitmq-server trust-store plugin (CVSS 9.1) lets attackers bypass TLS client auth with forged certs if they know whitelisted issuer/serial. Patch or disable plugin ASAP. https://radar.offseq.com/threat/cve-2026-67231-cwe-295-improper-certificate-validation-in-rabbitmq-rabbitmq-server-e521f17aa9be427c #OffSeq #RabbitMQ #Vuln #TLS #InfoSec", "creation_timestamp": "2026-09-24T04:30:24.465065Z"} 2026-09-24T04:30:24.465065+00:00 https://vulnerability.circl.lu/sighting/9059b803-5653-4dfe-bab0-3b2f4cf8cb1d/export 2026-09-24T14:48:07.358108+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9059b803-5653-4dfe-bab0-3b2f4cf8cb1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67231", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa4qwr3il2y", "content": "CVE-2026-67231 - rabbitmq-server\nRabbitMQ servers that run the trust\u2011store plug\u2011in on older versions can be tricked into trusting a fabricated certificate if an attacker knows the issuer name and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rabbitmqserver #rabbitmq #CVE #infosec", "creation_timestamp": "2026-09-24T01:40:05.116101Z"} 2026-09-24T01:40:05.116101+00:00 https://vulnerability.circl.lu/sighting/75021bb6-9c8d-455e-af88-987f03bfa0a8/export 2026-09-24T14:48:07.358216+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "75021bb6-9c8d-455e-af88-987f03bfa0a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67231", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7qxhaiz42l", "content": "\ud83d\udea8 CVE-2026-67231 \u2014 CVSS 9.1 CRITICAL\n\nRabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67231\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T22:08:58.834376Z"} 2026-09-23T22:08:58.834376+00:00