https://vulnerability.circl.lu/sightings/feed 2026-09-28T16:14:32.627372+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/abe21aa7-62be-48f4-8455-0ad238a2901d/export 2026-09-28T16:14:32.652456+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "abe21aa7-62be-48f4-8455-0ad238a2901d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75939", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mw4buyqhq52t", "content": "Nieuwe kwetsbaarheid in Red Hat OpenShift maakt isolatie van systemen kwetsbaar \n\nEen beveiligingslek, gedetecteerd als CVE-2026-75939, is op 21 september 2026 openbaar gemaakt. Het betreft een kwetsbaarheid in het openshift/oc-mirror-hulpprogramma, een essentieel onderdeel voor het kopi\u00ebren...", "creation_timestamp": "2026-09-22T13:01:11.482358Z"} 2026-09-22T13:01:11.482358+00:00 https://vulnerability.circl.lu/sighting/8d6c1439-e567-46ed-85c7-09ed7a0ff092/export 2026-09-28T16:14:32.655020+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8d6c1439-e567-46ed-85c7-09ed7a0ff092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75936", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244430815419051", "content": "CVE-2026-85786: DoS via crafted compressed Ion data in Amazon ion-java <1.12.1. Expansion bomb bypasses GZIP opt-out (CVE-2026-75936). CVSS 7.5. Update to 1.12.1 now. https://www.valtersit.com/cve/CVE-2026-85786/ #CVE #infosec #AWS", "creation_timestamp": "2026-09-10T02:40:41.934644Z"} 2026-09-10T02:40:41.934644+00:00 https://vulnerability.circl.lu/sighting/a49ee179-9ead-4511-8f52-b26abc37acd6/export 2026-09-28T16:14:32.655177+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a49ee179-9ead-4511-8f52-b26abc37acd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75936", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv4zmdvnk22b", "content": "CVE-2026-85786: DoS via crafted compressed Ion data in Amazon ion-java <1.12.1. Expansion bomb bypasses GZIP opt-out (CVE-2026-75936). CVSS 7.5. Update to 1.12.1 now. https://www.valtersit.com/cve/CVE-2026-85786/ #CVE #infosec #AWS", "creation_timestamp": "2026-09-10T02:40:39.098235Z"} 2026-09-10T02:40:39.098235+00:00 https://vulnerability.circl.lu/sighting/059bc356-2489-45d4-9070-7abe053ef9f2/export 2026-09-28T16:14:32.655301+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "059bc356-2489-45d4-9070-7abe053ef9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75931", "type": "seen", "source": "https://gist.github.com/alon710/6d6bc08cb0fafac0bb8a8c33b4c587ed", "content": "# CVE-2026-75931: CVE-2026-75931: Host Confusion and SSRF Bypass via Scheme-Relative URIs in fast-uri\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75931\n\n## Summary\nA host confusion vulnerability exists in the fast-uri Node.js library when parsing scheme-relative URI references. Due to inconsistent domain name canonicalization, applications validating resolved hosts can be bypassed by downstream WHATWG-compliant parsers, facilitating Server-Side Request Forgery (SSRF).\n\n## TL;DR\nA discrepancy in host canonicalization within fast-uri allows bypasses of SSRF and access-control filters when handling scheme-relative URI references.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-436 (Interpretation Conflict)\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 7.5 (High)\n- **EPSS Score**: 0.00247 (15.89th percentile)\n- **Impact**: SSRF Filter Bypass / Host Obfuscation\n- **Exploit Status**: PoC / Conceptual\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- fast-uri (Node.js NPM package)\n- **fast-uri**: >= 2.4.2, < 2.4.5 (Fixed in: `2.4.5`)\n- **fast-uri**: >= 3.1.3, < 3.1.6 (Fixed in: `3.1.6`)\n- **fast-uri**: >= 4.0.1, < 4.1.3 (Fixed in: `4.1.3`)\n\n## Mitigation\n\n- Upgrade fast-uri to safe versions (2.4.5, 3.1.6, or 4.1.3)\n- Use native WHATWG URL parser to validate hostnames in security gateways\n- Force package resolutions/overrides for transitive fast-uri dependencies\n\n**Remediation Steps:**\n1. Identify and audit fast-uri versions inside node_modules and package lockfiles\n2. Run npm update fast-uri or yarn upgrade fast-uri to download fixed releases\n3. Implement package overrides or resolutions in package.json to pin secure versions\n4. Add WHATWG URL validation on policy enforcement checks as a defense-in-depth measure\n\n## References\n\n- [NVD Detail CVE-2026-75931](https://nvd.nist.gov/vuln/detail/CVE-2026-75931)\n- [GitHub Security Advisory GHSA-5jgf-p345-68v8](https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8)\n- [Remediation Commit 4e4ebd](https://github.com/fastify/fast-uri/commit/4e4ebd8b245f6ca16e448203559eea3e545453a3)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75931) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T16:31:29.955898Z"} 2026-09-02T16:31:29.955898+00:00 https://vulnerability.circl.lu/sighting/7cc42082-895e-4077-9dec-d0dae921a7a5/export 2026-09-28T16:14:32.655424+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7cc42082-895e-4077-9dec-d0dae921a7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75931", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mukcg4x6cn2r", "content": "fast-uri, CVE-2026-75931: it only canonicalizes a host to ASCII when the input has an explicit scheme, so resolving a scheme-relative //host/ reference against a scheme-bearing base emits the host verbatim. Re-parsing the resolved URI yields a different host than resolve() returned. #dev", "creation_timestamp": "2026-09-02T15:57:39.814690Z"} 2026-09-02T15:57:39.814690+00:00 https://vulnerability.circl.lu/sighting/0f176f5a-3b1d-47d1-8a72-9cedc5a1b92e/export 2026-09-28T16:14:32.655527+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0f176f5a-3b1d-47d1-8a72-9cedc5a1b92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75933", "type": "seen", "source": "https://t.me/hacking_Attack/191879", "content": "CISA Advisory: VA-26-232-02Continue reading on Medium \u00bb (https://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:04.579138Z"} 2026-09-01T20:00:04.579138+00:00 https://vulnerability.circl.lu/sighting/a21ce5ff-d514-43e4-8b1f-017a59e4c4da/export 2026-09-28T16:14:32.655633+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a21ce5ff-d514-43e4-8b1f-017a59e4c4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://t.me/hacking_Attack/191879", "content": "CISA Advisory: VA-26-232-02Continue reading on Medium \u00bb (https://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:04.538969Z"} 2026-09-01T20:00:04.538969+00:00 https://vulnerability.circl.lu/sighting/b8e1361e-9f09-4d35-8757-d740b04851bd/export 2026-09-28T16:14:32.655730+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b8e1361e-9f09-4d35-8757-d740b04851bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75933", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191877", "content": "CVE-2026-75932 & CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\nhttps://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:04.369621Z"} 2026-09-01T20:00:04.369621+00:00 https://vulnerability.circl.lu/sighting/565ed50a-74cc-48e6-8e1c-21bd1998a1dc/export 2026-09-28T16:14:32.655829+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "565ed50a-74cc-48e6-8e1c-21bd1998a1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191877", "content": "CVE-2026-75932 & CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\nhttps://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:04.324558Z"} 2026-09-01T20:00:04.324558+00:00 https://vulnerability.circl.lu/sighting/5ebff2ae-88a0-4f54-bccf-e8fc150a15ce/export 2026-09-28T16:14:32.655923+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5ebff2ae-88a0-4f54-bccf-e8fc150a15ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75933", "type": "seen", "source": "https://t.me/hacking_Attack/191874", "content": "CVE-2026-75932 & CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\n\nCISA Advisory: VA-26-232-02Continue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-01T20:00:04.192990Z"} 2026-09-01T20:00:04.192990+00:00