https://vulnerability.circl.lu/sightings/feed 2026-09-28T10:24:04.361442+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/86a40013-f429-4475-aeba-27c0c506ee11/export 2026-09-28T10:24:04.415039+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "86a40013-f429-4475-aeba-27c0c506ee11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwcc4boogk2t", "content": "\u300cOAuth2 Proxy\u300d\u306b\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u306f\u672a\u516c\u958b\n\n\u8a8d\u8a3c\u30d7\u30ed\u30af\u30b7\u300cOAuth2 Proxy\u300d\u306b\u8a8d\u8a3c\u3092\u56de\u907f\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30bd\u30fc\u30b9\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u304a\u3044\u3066\u4fee\u6b63\u304c\u9032\u3081\u3089\u308c\u3066\u3044\u308b\u304c\u3001\u4fee\u6b63\u7248\u306f\u672a\u63d0\u4f9b\u3068\u306a\u3063\u3066\u3044\u308b\u3002\n\n\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30af\u30b7\u30e2\u30fc\u30c9\u3067\u300ctrusted_proxy_ip\u300d\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u3001\u7d30\u5de5\u3057\u305f\u300cX-Forwarded-Uri\u300d\u30d8\u30c3\u30c0\u306b\u3088\u3063\u3066\u8a8d\u8a3c\u3092\u56de\u907f\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-76835\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3082\u306e\u3002\u30c7\u30d5\u30a9\u30eb\u30c8\u69cb\u6210\u3067\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3044\u3046\u3002\n\n...\n\n\u300c\u540c7.15.2\u300d\u306b\u3066\u300cCVE-2026-40575\u300d\u3068\u3057\u3066\u5bfe\u7b56\u3092\u5b9f\u65bd\u3057\u305f\u3082\u306e\u306e\u3001...", "creation_timestamp": "2026-09-24T22:21:14.820807Z"} 2026-09-24T22:21:14.820807+00:00 https://vulnerability.circl.lu/sighting/518e0363-4133-4a26-a324-660106178c06/export 2026-09-28T10:24:04.417275+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "518e0363-4133-4a26-a324-660106178c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76834", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqas4yzw52r", "content": "\ud83d\udea8 CVE-2026-76834 \u2014 CVSS 9.2 CRITICAL\n\nb2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serializ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76834\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T18:09:44.402538Z"} 2026-09-17T18:09:44.402538+00:00 https://vulnerability.circl.lu/sighting/33d32e78-0ab2-46db-b16f-70b507d0d77c/export 2026-09-28T10:24:04.417370+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "33d32e78-0ab2-46db-b16f-70b507d0d77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76834", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq6lez25l2f", "content": "CVE-2026-76834 - b2evolution cms\nVersions 6.7.8 through 7.2.5 of b2evolution CMS can be tricked into loading malicious data when a specially crafted web request is sent. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#b2evolutioncms #b2evolution #CVE #infosec", "creation_timestamp": "2026-09-17T17:30:10.256640Z"} 2026-09-17T17:30:10.256640+00:00 https://vulnerability.circl.lu/sighting/272f7ef5-8e04-4ac8-929f-94e0bbe8da27/export 2026-09-28T10:24:04.417440+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "272f7ef5-8e04-4ac8-929f-94e0bbe8da27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://www.acn.gov.it/portale/w/oauth2-poc-pubblico-per-lo-sfruttamento-di-una-vulnerabilita-con-gravita-critica-", "content": "Disponibile un Proof of Concept (PoC) per la CVE-2026-76835 presente in OAuth2 Proxy. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe permettere a un attaccante remoto non autenticato di eludere i meccanismi di autenticazione sui sistemi interessati.", "creation_timestamp": "2026-08-27T16:01:01.275590Z"} 2026-08-27T16:01:01.275590+00:00 https://vulnerability.circl.lu/sighting/0f3d60bc-b32b-42d4-8f9c-1ead45746fd5/export 2026-09-28T10:24:04.417511+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0f3d60bc-b32b-42d4-8f9c-1ead45746fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv46haca72p", "content": "CVE-2026-76836\nAnyone with only basic station profile permission can change the custom Liquidsoap configuration in AzuraCast. Those changes are written directly into the script and can run system commands when the station\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:40:04.453102Z"} 2026-08-25T05:40:04.453102+00:00 https://vulnerability.circl.lu/sighting/830ce985-d7ec-48ca-a855-263c6ffecf7e/export 2026-09-28T10:24:04.417588+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "830ce985-d7ec-48ca-a855-263c6ffecf7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtu4a2g2b225", "content": "\ud83d\udea8 CVE-2026-76835 \u2014 CVSS 9.3 CRITICAL\n\nOAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76835\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T20:08:18.115433Z"} 2026-08-24T20:08:18.115433+00:00 https://vulnerability.circl.lu/sighting/26da17b7-2ecc-4869-aea9-d1214cc0cd05/export 2026-09-28T10:24:04.417653+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "26da17b7-2ecc-4869-aea9-d1214cc0cd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtu23pht6c2y", "content": "CVE-2026-76835 - oauth2-proxy\nThe OAuth2 Proxy software treats any client as a trusted proxy by default, so it trusts the X-Forwarded-Uri header sent by the requester. An attacker can send a fake header that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oauth2proxy #CVE #infosec", "creation_timestamp": "2026-08-24T19:30:04.928191Z"} 2026-08-24T19:30:04.928191+00:00 https://vulnerability.circl.lu/sighting/f4aa6682-4c27-4ac5-9508-558dd9b7db15/export 2026-09-28T10:24:04.417716+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f4aa6682-4c27-4ac5-9508-558dd9b7db15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyixqmp52r", "content": "\ud83d\udd34 CVE-2026-76835 - Critical (9.1)\n\nOAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76835/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T19:01:44.179103Z"} 2026-08-24T19:01:44.179103+00:00 https://vulnerability.circl.lu/sighting/7f3cc094-6516-49d2-b0f2-9d4ffa56abaf/export 2026-09-28T10:24:04.417781+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7f3cc094-6516-49d2-b0f2-9d4ffa56abaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76838", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyijzlir27", "content": "\ud83d\udfe0 CVE-2026-76838 - High (8.5)\n\nHi.Events validates a webhook destination only when it is registered, never when it is used. NoIn...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76838/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T19:01:29.076320Z"} 2026-08-24T19:01:29.076320+00:00 https://vulnerability.circl.lu/sighting/ee771f58-af09-4fbb-823d-67fda9cce5c3/export 2026-09-28T10:24:04.417841+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ee771f58-af09-4fbb-823d-67fda9cce5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4r33lpgqkvzkk", "content": "CVE-2026-76837 - Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name\nCVE ID : CVE-2026-76837\n \n Published : Aug. 24, 2026, 5:36 p.m. | 27\u00a0minutes ago\n \n Description : Baserow interpolates a user's display name into the rich-text mention markup w...", "creation_timestamp": "2026-08-24T18:49:24.357052Z"} 2026-08-24T18:49:24.357052+00:00