https://vulnerability.circl.lu/sightings/feed 2026-09-14T17:31:09.663708+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3b0d8f34-ec71-4930-9d03-3e535f34f6c5/export 2026-09-14T17:31:09.692502+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3b0d8f34-ec71-4930-9d03-3e535f34f6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72831", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117116206832392341", "content": "CVE-2026-72831 - Auth bypass in Grav Flex Objects plugin \u22641.4.6. Improper authorization lets low-priv users exploit generic /api/v1 endpoint. CVSS 8.8. Exploit risk high. Update immediately. #CVE #GravCMS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72831/", "creation_timestamp": "2026-08-18T11:11:37.716663Z"} 2026-08-18T11:11:37.716663+00:00 https://vulnerability.circl.lu/sighting/bf903ddf-190a-4f8f-a518-11aa46cd855e/export 2026-09-14T17:31:09.695846+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bf903ddf-190a-4f8f-a518-11aa46cd855e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72831", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mte3gt5gp52k", "content": "CVE-2026-72831 - Auth bypass in Grav Flex Objects plugin \u22641.4.6. Improper authorization lets low-priv users exploit generic /api/v1 endpoint. CVSS 8.8. Exploit risk high. Update immediately. #CVE #GravCMS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-72831/", "creation_timestamp": "2026-08-18T11:11:36.038445Z"} 2026-08-18T11:11:36.038445+00:00 https://vulnerability.circl.lu/sighting/ab91a3d3-7c77-48a3-ac9a-3cb218cf2ec4/export 2026-09-14T17:31:09.695987+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ab91a3d3-7c77-48a3-ac9a-3cb218cf2ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "published-proof-of-concept", "source": "Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw", "content": "", "creation_timestamp": "2026-08-16T00:00:46.500190Z"} 2026-08-16T00:00:46.500190+00:00 https://vulnerability.circl.lu/sighting/c80df349-2ca4-42c1-a633-9c68d6102283/export 2026-09-14T17:31:09.696094+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c80df349-2ca4-42c1-a633-9c68d6102283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4sdjqoq223", "content": "CVE-2026-72839\nWhen self-signup is enabled on Filebrowser, attackers can create accounts with full access to all files on the server. This is a serious issue because it allows unauthorized access to sensitive data. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T13:40:04.267913Z"} 2026-08-15T13:40:04.267913+00:00 https://vulnerability.circl.lu/sighting/20ccec1a-1707-4352-ac5d-0bb62a0e959b/export 2026-09-14T17:31:09.696195+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "20ccec1a-1707-4352-ac5d-0bb62a0e959b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "seen", "source": "Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw", "content": "", "creation_timestamp": "2026-08-15T08:00:05.041663Z"} 2026-08-15T08:00:05.041663+00:00 https://vulnerability.circl.lu/sighting/01a9fae9-5902-4354-b803-ccff248efe7f/export 2026-09-14T17:31:09.696301+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "01a9fae9-5902-4354-b803-ccff248efe7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2aqvnzef2f", "content": "CVE-2026-72836 - filebrowser\nFileBrowser versions before 2.63.19 allow unauthorized access to other users' files on case-insensitive filesystems, like Windows. This means a new user can access and delete files\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#filebrowser #CVE #infosec", "creation_timestamp": "2026-08-14T13:20:05.365093Z"} 2026-08-14T13:20:05.365093+00:00 https://vulnerability.circl.lu/sighting/6ba89d74-1317-4dd4-872b-37a810d9c4f3/export 2026-09-14T17:31:09.696403+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6ba89d74-1317-4dd4-872b-37a810d9c4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fmzbywzbksnxu", "content": "CVE-2026-72837 - File Browser before 2.63.20 Privilege Escalation via Proxy Authentication\nCVE ID : CVE-2026-72837\n \n Published : Aug. 14, 2026, 11:35 a.m. | 37\u00a0minutes ago\n \n Description : File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy...", "creation_timestamp": "2026-08-14T13:12:42.308414Z"} 2026-08-14T13:12:42.308414+00:00 https://vulnerability.circl.lu/sighting/531c8e7d-0128-4c87-bf8f-0bfa29bda02e/export 2026-09-14T17:31:09.696504+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "531c8e7d-0128-4c87-bf8f-0bfa29bda02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hiobi5qimz7ko", "content": "CVE-2026-72836 - FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass\nCVE ID : CVE-2026-72836\n \n Published : Aug. 14, 2026, 11:35 a.m. | 37\u00a0minutes ago\n \n Description : FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home...", "creation_timestamp": "2026-08-14T13:06:51.249157Z"} 2026-08-14T13:06:51.249157+00:00 https://vulnerability.circl.lu/sighting/a650c9af-3f67-4a00-8dfd-c50479146612/export 2026-09-14T17:31:09.696606+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a650c9af-3f67-4a00-8dfd-c50479146612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72837", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt27ogqpiw2b", "content": "\ud83d\udfe0 CVE-2026-72837 - High (8.8)\n\nFile Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72837/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T13:00:49.695618Z"} 2026-08-14T13:00:49.695618+00:00 https://vulnerability.circl.lu/sighting/6e649e22-07ab-454d-9d8b-19144cce50ce/export 2026-09-14T17:31:09.696703+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6e649e22-07ab-454d-9d8b-19144cce50ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt27o7uejz26", "content": "\ud83d\udfe0 CVE-2026-72836 - High (8.1)\n\nFileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home d...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72836/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T13:00:43.736351Z"} 2026-08-14T13:00:43.736351+00:00