https://vulnerability.circl.lu/sightings/feed 2026-09-28T10:24:17.610068+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/14bfd34d-b987-444d-83d8-0bb4e0227e95/export 2026-09-28T10:24:17.640326+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "14bfd34d-b987-444d-83d8-0bb4e0227e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvzvgskwqkh2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-089\nLenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT Gateway\nCVE-2026-75925\n\nThe Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the [\u2026]", "creation_timestamp": "2026-09-21T14:13:16.201468Z"} 2026-09-21T14:13:16.201468+00:00 https://vulnerability.circl.lu/sighting/9253cd03-05df-4a59-bd67-5e726a691cf9/export 2026-09-28T10:24:17.642716+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9253cd03-05df-4a59-bd67-5e726a691cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117309439231849832", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-089Lenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT GatewayCVE-2026-75925\nThe Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the computer running the client with elevated privile\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-089CSAF JSON: https://lenze.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-089.json\n#OT #Advisory", "creation_timestamp": "2026-09-21T14:13:08.665090Z"} 2026-09-21T14:13:08.665090+00:00 https://vulnerability.circl.lu/sighting/584cdaf5-ed78-4585-b71f-3115847f46f1/export 2026-09-28T10:24:17.642858+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "584cdaf5-ed78-4585-b71f-3115847f46f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117232828506352595", "content": "CVE-2026-75925: CRLF injection in IXON VPN Client (<1.4.7) lets unauthenticated attackers execute commands as root/SYSTEM via crafted config values. CVSS 9.6. Unpatched\u2014assume risk now. Update immediately if using this client. Details: https://www.valtersit.com/cve/CVE-2026-75925", "creation_timestamp": "2026-09-08T01:30:02.949688Z"} 2026-09-08T01:30:02.949688+00:00 https://vulnerability.circl.lu/sighting/56d2dc72-0564-4878-9722-7333e3937912/export 2026-09-28T10:24:17.642966+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "56d2dc72-0564-4878-9722-7333e3937912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxuqa775u27", "content": "CVE-2026-75925: CRLF injection in IXON VPN Client (<1.4.7) lets unauthenticated attackers execute commands as root/SYSTEM via crafted config values. CVSS 9.6. Unpatched\u2014assume risk now. Update immediately if using this client. Details: https://www.valtersit.com/cve/CVE-2026-75925", "creation_timestamp": "2026-09-08T01:30:02.000486Z"} 2026-09-08T01:30:02.000486+00:00 https://vulnerability.circl.lu/sighting/ea64060f-8cca-46df-8fd2-3e94cee1ac4b/export 2026-09-28T10:24:17.643074+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ea64060f-8cca-46df-8fd2-3e94cee1ac4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muq6poakgw2t", "content": "\ud83d\udea8 CVE-2026-75925 \u2014 CVSS 9.4 CRITICAL\n\nImproper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to exe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75925\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T00:07:22.980345Z"} 2026-09-05T00:07:22.980345+00:00 https://vulnerability.circl.lu/sighting/6f9ea744-691e-4e93-91b4-85d470710348/export 2026-09-28T10:24:17.643173+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6f9ea744-691e-4e93-91b4-85d470710348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muq336j23o2s", "content": "\ud83d\udd34 CVE-2026-75925 - Critical (9.6)\n\nImproper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75925/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T23:02:14.743104Z"} 2026-09-04T23:02:14.743104+00:00 https://vulnerability.circl.lu/sighting/820cadde-fa5d-43d8-afa1-95fde2baadd2/export 2026-09-28T10:24:17.643280+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "820cadde-fa5d-43d8-afa1-95fde2baadd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2bsq4p4l67sch", "content": "CVE-2026-75925 - IXON VPN Client CRLF Injection\nCVE ID : CVE-2026-75925\n \n Published : Sept. 4, 2026, 10:17 p.m. | 20\u00a0minutes ago\n \n Description : Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root o...", "creation_timestamp": "2026-09-04T22:58:56.506449Z"} 2026-09-04T22:58:56.506449+00:00 https://vulnerability.circl.lu/sighting/ec0cd7b9-4503-4326-acc8-4d4330ffa09e/export 2026-09-28T10:24:17.643375+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ec0cd7b9-4503-4326-acc8-4d4330ffa09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupzboykz22j", "content": "CVE-2026-75925 - ixon vpn client\nThe IXON VPN client (versions before 1.4.7) can be tricked into adding extra commands to its own configuration file. Because the client does not check who is making changes, an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ixon #CVE #infosec", "creation_timestamp": "2026-09-04T22:30:04.809228Z"} 2026-09-04T22:30:04.809228+00:00 https://vulnerability.circl.lu/sighting/b2caf8c2-57c3-42f8-bdb6-eebec56484de/export 2026-09-28T10:24:17.643469+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b2caf8c2-57c3-42f8-bdb6-eebec56484de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75922", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtsry2hlui26", "content": "CVE-2026-75922 is trending. Hype score 2, currently #10 on cvemon.\n\nReverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line. PSGI hands PATH_INFO to an\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-75922", "creation_timestamp": "2026-08-24T07:32:16.473715Z"} 2026-08-24T07:32:16.473715+00:00 https://vulnerability.circl.lu/sighting/a54790f3-6d2e-4dcb-9ccb-7fb3d1bddd89/export 2026-09-28T10:24:17.643615+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a54790f3-6d2e-4dcb-9ccb-7fb3d1bddd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75922", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gqak3r26wcsli", "content": "CVE-2026-75922 - Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line\nCVE ID : CVE-2026-75922\n \n Published : Aug. 23, 2026, 7:16 p.m. | 44\u00a0minutes ago\n \n Description : Reverse::...", "creation_timestamp": "2026-08-23T20:06:41.554481Z"} 2026-08-23T20:06:41.554481+00:00