https://vulnerability.circl.lu/sightings/feed 2026-08-28T02:30:05.455983+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0aa9f15c-2d98-433a-9830-c5481d862793/export 2026-08-28T02:30:05.479871+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0aa9f15c-2d98-433a-9830-c5481d862793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcweh45yo2e", "content": "\ud83d\udea8 CVE-2026-71424 \u2014 CVSS 9.6 CRITICAL\n\nOnyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71424\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T00:08:07.777070Z"} 2026-08-18T00:08:07.777070+00:00 https://vulnerability.circl.lu/sighting/4f10f3d9-a768-4290-82cb-7f3bf385be5b/export 2026-08-28T02:30:05.481742+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4f10f3d9-a768-4290-82cb-7f3bf385be5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcvw3oz5b2p", "content": "CVE-2026-71424 - onyx\nOnyx's API endpoints, used for managing servers, exposed another user's login credentials to anyone with certain access permissions. This issue has been fixed in versions 3.1.10, 3.2.14, and 4.0.0\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#onyx #CVE #infosec", "creation_timestamp": "2026-08-18T00:00:07.899120Z"} 2026-08-18T00:00:07.899120+00:00 https://vulnerability.circl.lu/sighting/3c747ee0-61e5-4518-b132-efb5db4e7292/export 2026-08-28T02:30:05.481894+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3c747ee0-61e5-4518-b132-efb5db4e7292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gfy45mtzysrmc", "content": "CVE-2026-71424 - Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers\nCVE ID : CVE-2026-71424\n \n Published : Aug. 17, 2026, 10:17 p.m. | 18\u00a0minutes ago\n \n Description : Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's G...", "creation_timestamp": "2026-08-17T23:41:50.397902Z"} 2026-08-17T23:41:50.397902+00:00 https://vulnerability.circl.lu/sighting/fe01c103-b1d2-44e6-aca8-8996f25e70f3/export 2026-08-28T02:30:05.482016+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fe01c103-b1d2-44e6-aca8-8996f25e70f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcsm7ra6a22", "content": "\ud83d\udd34 CVE-2026-71424 - Critical (9.6)\n\nOnyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/serve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71424/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-17T23:00:54.272093Z"} 2026-08-17T23:00:54.272093+00:00