https://vulnerability.circl.lu/sightings/feed 2026-08-18T02:14:13.964754+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/76aa69a1-6446-4c4d-a005-5a4bdc6873ef/export 2026-08-18T02:14:13.985803+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "76aa69a1-6446-4c4d-a005-5a4bdc6873ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73421", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msyu3f3q5p2x", "content": "CRITICAL vuln in nextauthjs next-auth (CVE-2026-73421): Invalid server config may let unauthenticated users access protected routes. Upgrade to 5.0.0-beta.32+ now. https://radar.offseq.com/threat/cve-2026-73421-cwe-285-improper-authorization-in-nextauthjs-next-auth-287433c9f8ab5781 #OffSeq #nexta...", "creation_timestamp": "2026-08-14T00:00:39.392037Z"} 2026-08-14T00:00:39.392037+00:00 https://vulnerability.circl.lu/sighting/96135f29-906d-4ad9-bd10-ca1f29b23750/export 2026-08-18T02:14:13.987198+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "96135f29-906d-4ad9-bd10-ca1f29b23750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73421", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117090919143371675", "content": "CVE-2026-73421 (CRITICAL, CVSS 9.1): nextauthjs next-auth (5.0.0-beta.0 to <5.0.0-beta.32) improper authorization bug lets unauthenticated users access protected routes if config is invalid. Patch now! https://radar.offseq.com/threat/cve-2026-73421-cwe-285-improper-authorization-in-nextauthjs-next-auth-287433c9f8ab5781 #OffSeq #nextauthjs #CVE202673421 #infosec", "creation_timestamp": "2026-08-14T00:00:37.296707Z"} 2026-08-14T00:00:37.296707+00:00 https://vulnerability.circl.lu/sighting/4ea2a241-ee48-4ffc-9523-3f97ea0e8854/export 2026-08-18T02:14:13.987295+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4ea2a241-ee48-4ffc-9523-3f97ea0e8854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73421", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msyohjsrxs2t", "content": "CVE-2026-73421 - next-auth\nIf you use Auth.js to control access to your website or application, a misconfigured Auth.js setup can allow anyone to access your resources. This happens when the server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nextauth #nextauthjs #npm #CVE #infosec", "creation_timestamp": "2026-08-13T22:20:04.336192Z"} 2026-08-13T22:20:04.336192+00:00