https://vulnerability.circl.lu/sightings/feed 2026-09-14T21:25:11.812953+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f657f279-0383-47b3-9047-56c8558b9916/export 2026-09-14T21:25:11.840748+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f657f279-0383-47b3-9047-56c8558b9916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71269", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117043528766793055", "content": "CVE-2026-71269 - Path traversal in Node-RED local-filesystem library storage. Authenticated users can read/write arbitrary files via GET/POST /library endpoints. CVSS 7.2. Unpatched - restrict access and monitor. #CVE #NodeRED #infosec\nhttps://www.valtersit.com/cve/CVE-2026-71269/", "creation_timestamp": "2026-08-05T15:08:37.320216Z"} 2026-08-05T15:08:37.320216+00:00 https://vulnerability.circl.lu/sighting/ff9db813-c8a3-4752-9c48-00f5ca0dbb97/export 2026-09-14T21:25:11.843009+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ff9db813-c8a3-4752-9c48-00f5ca0dbb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71262", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msdrztziyz2m", "content": "CVE-2026-71262\nThe IoTSharp BlobStorageController is not secure because it doesn't require authentication, making it accessible to anyone. This can lead to unauthorized access to and manipulation of files, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T14:58:19.674571Z"} 2026-08-05T14:58:19.674571+00:00 https://vulnerability.circl.lu/sighting/791fdcdb-bada-4bf0-ab0c-7e4db658970f/export 2026-09-14T21:25:11.843153+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "791fdcdb-bada-4bf0-ab0c-7e4db658970f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71268", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msdrzssxzv22", "content": "CVE-2026-71268 - openplc_v3\nAn attacker can write files to arbitrary locations on the system using OpenPLC Runtime v3. This can potentially lead to remote code execution. It's essential to update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openplcv3 #thiagoralves #CVE #infosec", "creation_timestamp": "2026-08-05T14:58:17.793116Z"} 2026-08-05T14:58:17.793116+00:00