https://vulnerability.circl.lu/sightings/feed 2026-09-25T18:50:29.029443+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a00a6271-477a-417e-adb9-5f298280546f/export 2026-09-25T18:50:29.050702+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a00a6271-477a-417e-adb9-5f298280546f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81208", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw7u2wrscf2c", "content": "\ud83d\udfe0 CVE-2026-81208 - High (7.7)\n\nIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81208/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-23T23:04:39.037248Z"} 2026-09-23T23:04:39.037248+00:00 https://vulnerability.circl.lu/sighting/3121a8a5-bbac-49d1-99ea-45505217e912/export 2026-09-25T18:50:29.052818+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "3121a8a5-bbac-49d1-99ea-45505217e912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-81204", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0392", "content": "", "creation_timestamp": "2026-09-23T16:15:20.710316Z"} 2026-09-23T16:15:20.710316+00:00 https://vulnerability.circl.lu/sighting/0888f1fe-de97-4a09-a739-52a7172e3e61/export 2026-09-25T18:50:29.054203+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0888f1fe-de97-4a09-a739-52a7172e3e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81204", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0392", "content": "IBM heeft 12 kwetsbaarheden verholpen in IBM MQ, IBM MQ Appliance en Langflow OSS. De kwetsbaarheden kunnen leiden tot het uitvoeren van willekeurige code of commando's. Vier kwetsbaarheden zijn als kritiek aangemerkt en kunnen zonder authenticatie en gebruikersinteractie op afstand worden misbruikt.\n\nDe kwetsbaarheid met kenmerk CVE-2026-10747 heeft een CVSS-score van 10,0 en betreft een heap-based buffer overflow in IBM MQ. De kwetsbaarheden met kenmerk CVE-2026-79724, CVE-2026-85025 en CVE-2026-81204 hebben een CVSS-score van 9,8 en bevinden zich in Langflow OSS. Een niet-geauthenticeerde kwaadwillende kan deze kwetsbaarheden misbruiken om willekeurige code of OS-commando's uit te voeren. De overige kwetsbaarheden in Langflow hebben een CVSS-score van 8,8 en vereisen geauthenticeerde toegang.", "creation_timestamp": "2026-09-23T12:33:27.000000Z"} 2026-09-23T12:33:27+00:00 https://vulnerability.circl.lu/sighting/7c0900a5-82a7-477c-94ff-4cb75b40ffb0/export 2026-09-25T18:50:29.054329+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7c0900a5-82a7-477c-94ff-4cb75b40ffb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81207", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvqwgt36j62c", "content": "\ud83d\udccc CVE-2026-81207 - IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant \u2014 with no project membership or role \u2014 fully controls scheme/host/port/pat... https://www.cyberhub.blog/cves/CVE-2026-81207", "creation_timestamp": "2026-09-18T00:37:07.050089Z"} 2026-09-18T00:37:07.050089+00:00 https://vulnerability.circl.lu/sighting/9b1a3d51-0e2f-4740-bd53-334618898372/export 2026-09-25T18:50:29.054417+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9b1a3d51-0e2f-4740-bd53-334618898372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81204", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvopzqwjdi2y", "content": "\ud83d\udccc CVE-2026-81204 - IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction. https://www.cyberhub.blog/cves/CVE-2026-81204", "creation_timestamp": "2026-09-17T03:37:07.071946Z"} 2026-09-17T03:37:07.071946+00:00 https://vulnerability.circl.lu/sighting/e93cb5bb-17b8-4f96-86a9-c920a1b3fc93/export 2026-09-25T18:50:29.054500+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e93cb5bb-17b8-4f96-86a9-c920a1b3fc93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81204", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7bkzdhct2y", "content": "\ud83d\udea8 CVE-2026-81204 \u2014 CVSS 9.8 CRITICAL\n\nIBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81204\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T00:08:23.776632Z"} 2026-09-11T00:08:23.776632+00:00 https://vulnerability.circl.lu/sighting/963bb4c0-67d2-4c0b-810b-3980bfbcc0ca/export 2026-09-25T18:50:29.054591+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "963bb4c0-67d2-4c0b-810b-3980bfbcc0ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81204", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv7572v5wh2p", "content": "CVE-2026-81204 - langflow oss\nVersions of IBM Langflow from 1.0.0 up to 1.11.5 can be tricked into executing any code an attacker sends while building a workflow. This could let a remote attacker take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-09-10T22:50:07.603298Z"} 2026-09-10T22:50:07.603298+00:00 https://vulnerability.circl.lu/sighting/5e2d7ad2-e82b-4380-b817-c875dbf02bed/export 2026-09-25T18:50:29.054677+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5e2d7ad2-e82b-4380-b817-c875dbf02bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6opzunxqwehhu", "content": "CVE-2026-81203 - SourceCodester Simple Online Food Ordering System ajax.php login2 sql injection\nCVE ID : CVE-2026-81203\n \n Published : Aug. 26, 2026, 11:17 p.m. | 51\u00a0minutes ago\n \n Description : A vulnerability has been found in SourceCodester Simple Online Food Ordering Syst...", "creation_timestamp": "2026-08-27T00:38:11.383425Z"} 2026-08-27T00:38:11.383425+00:00