https://vulnerability.circl.lu/sightings/feed 2026-10-06T07:35:55.118262+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7e562b46-6510-49bf-a326-eb4822aa3092/export 2026-10-06T07:35:55.146211+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7e562b46-6510-49bf-a326-eb4822aa3092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73194", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0375", "content": "Oracle heeft 31 kwetsbaarheden verholpen in diverse Oracle Communications-producten, waaronder Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications MetaSolv Solution Module - ASR, Oracle Communications Service Catalog and Design en Oracle Communications Operations Monitor. De kwetsbaarheden betreffen verschillende beveiligingsproblemen in Oracle Communications-producten, waaronder mogelijkheden voor niet-geauthenticeerde en laaggeprivilegieerde kwaadwillenden om via netwerktoegang ongeautoriseerde acties uit te voeren. De kwetsbaarheden hebben CVSS-scores vari\u00ebrend van laag tot kritiek. Van de in totaal 31 kwetsbaarheden zijn vier als kritiek aangemerkt en kunnen 23 kwetsbaarheden zonder authenticatie op afstand worden misbruikt. Succesvol misbruik kan onder meer leiden tot het verkrijgen van ongeautoriseerde toegang tot gevoelige informatie, het wijzigen van gegevens en het verstoren van de beschikbaarheid van getroffen systemen. Sommige kwetsbaarheden vereisen gebruikersinteractie of voorafgaande toegangsrechten, terwijl andere volledig op afstand en zonder authenticatie kunnen worden misbruikt.\n\nDe vier kwetsbaarheden die als kritiek zijn aangemerkt, CVE-2026-44024, CVE-2026-17544, CVE-2026-71290 en CVE-2026-73194, hebben een CVSS-score van 9,1 of hoger en bevinden zich in verschillende Core-componenten van Oracle Communications Unified Assurance, waaronder Fluentd, PHP, Apache HttpClient en DBI. Deze kwetsbaarheden kunnen zonder authenticatie op afstand worden misbruikt en kunnen een hoge impact hebben op de vertrouwelijkheid en, afhankelijk van de kwetsbaarheid, de integriteit en beschikbaarheid van getroffen systemen.\n\nHet NCSC adviseert om de beveiligingsupdates voor de kritieke kwetsbaarheden met voorrang toe te passen.", "creation_timestamp": "2026-09-16T16:00:44.736247Z"} 2026-09-16T16:00:44.736247+00:00 https://vulnerability.circl.lu/sighting/8d2acaab-c17b-4992-a0ab-725a8a389f45/export 2026-10-06T07:35:55.148616+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8d2acaab-c17b-4992-a0ab-725a8a389f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73191", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/iv3uk4clfttjy", "content": "CVE-2026-73191 - Apache Syncope: CAS service URL injection via Forwarded HTTP headers\nCVE ID : CVE-2026-73191\n \n Published : Sept. 14, 2026, 1:24 p.m. | 36\u00a0minutes ago\n \n Description : URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Syncope.\n\n\n\n\n\nWh...", "creation_timestamp": "2026-09-14T14:30:30.498565Z"} 2026-09-14T14:30:30.498565+00:00 https://vulnerability.circl.lu/sighting/3e136a09-38a3-4735-a334-198352b3c2cf/export 2026-10-06T07:35:55.148772+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3e136a09-38a3-4735-a334-198352b3c2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73198", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3pxlh6prwitvc", "content": "CVE-2026-73198 - Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read\nCVE ID : CVE-2026-73198\n \n Published : Aug. 20, 2026, 11:16 a.m. | 19\u00a0minutes ago\n \n Description : A flaw was found in FreeIPA. A remote, unauthenticated attacker can exp...", "creation_timestamp": "2026-08-20T12:08:59.790454Z"} 2026-08-20T12:08:59.790454+00:00 https://vulnerability.circl.lu/sighting/82d73ae0-599e-419e-8f0e-80469f00c932/export 2026-10-06T07:35:55.148885+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "82d73ae0-599e-419e-8f0e-80469f00c932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73199", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/emduqmfggpiy6", "content": "CVE-2026-73199 - Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value\nCVE ID : CVE-2026-73199\n \n Published : Aug. 20, 2026, 11:16 a.m. | 19\u00a0minutes ago\n \n Description : A flaw was found in the `ipa-enrollment` SLA...", "creation_timestamp": "2026-08-20T12:02:59.839736Z"} 2026-08-20T12:02:59.839736+00:00 https://vulnerability.circl.lu/sighting/89040750-f605-4282-86d0-3839fd50374e/export 2026-10-06T07:35:55.148998+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "89040750-f605-4282-86d0-3839fd50374e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73198", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtj75trz4i22", "content": "\ud83d\udfe0 CVE-2026-73198 - High (7.5)\n\nA flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73198/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T12:01:30.825226Z"} 2026-08-20T12:01:30.825226+00:00 https://vulnerability.circl.lu/sighting/4a683a81-b256-48af-bef5-8b96f7bc5ff0/export 2026-10-06T07:35:55.149123+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4a683a81-b256-48af-bef5-8b96f7bc5ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73197", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtj75n3yyz27", "content": "\ud83d\udfe0 CVE-2026-73197 - High (7.5)\n\nA flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73197/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T12:01:28.936971Z"} 2026-08-20T12:01:28.936971+00:00 https://vulnerability.circl.lu/sighting/7e971f22-26c4-4a88-9d62-27523376188f/export 2026-10-06T07:35:55.149233+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7e971f22-26c4-4a88-9d62-27523376188f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73194", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdwuzuukb2u", "content": "CVE-2026-73194 - libdbi-perl\nAn issue in the Debian Linux package manager affects how it handles certain files. This allows unprivileged users to gain elevated privileges on the system, which can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#libdbiperl #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-18T09:50:04.263909Z"} 2026-08-18T09:50:04.263909+00:00 https://vulnerability.circl.lu/sighting/48e65673-a863-437f-ad5f-591f85174aba/export 2026-10-06T07:35:55.149340+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "48e65673-a863-437f-ad5f-591f85174aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73193", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdwuzcmyk24", "content": "CVE-2026-73193 - libdbi-perl\nA security issue in Debian Linux allows unprivileged users to access files outside their intended directory. This could potentially allow an attacker to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#libdbiperl #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-18T09:50:03.614379Z"} 2026-08-18T09:50:03.614379+00:00 https://vulnerability.circl.lu/sighting/156edc3a-8d33-45b7-8276-407200e0bb1f/export 2026-10-06T07:35:55.149457+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "156edc3a-8d33-45b7-8276-407200e0bb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73194", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtconmlbjj2y", "content": "CVE-2026-73194\nPerl DBI versions before 1.652 contain a security flaw that can be exploited by untrusted input, potentially allowing an attacker to execute malicious code. This issue affects anyone using untrusted input in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-17T21:50:06.290601Z"} 2026-08-17T21:50:06.290601+00:00 https://vulnerability.circl.lu/sighting/18fb7071-a981-46ac-8f55-9db0c6c087a0/export 2026-10-06T07:35:55.149572+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "18fb7071-a981-46ac-8f55-9db0c6c087a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73193", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtconlew4b2c", "content": "CVE-2026-73193\nOld versions of the Perl DBI library have a security issue that can cause data corruption on 32-bit systems. This can happen when an attacker passes a very long piece of data to the library, which can then\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-17T21:50:05.254847Z"} 2026-08-17T21:50:05.254847+00:00