https://vulnerability.circl.lu/sightings/feed 2026-09-02T21:54:44.704912+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/87f884ed-61cd-4c2a-aa7f-d599c0543da7/export 2026-09-02T21:54:44.730171+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "87f884ed-61cd-4c2a-aa7f-d599c0543da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mukqlj5nou2r", "content": "~Cybergcca~\nSonicWall CVE-2026-83548/83549 and JFrog CVE-2026-82329 are being exploited and added to CISA KEV.\n-\nIOCs: CVE-2026-83548, CVE-2026-83549, CVE-2026-82329\n-\n#CVE #KEV #ThreatIntel", "creation_timestamp": "2026-09-02T20:11:12.022947Z"} 2026-09-02T20:11:12.022947+00:00 https://vulnerability.circl.lu/sighting/03a0a6eb-511a-48f1-8d35-8c2cfd6f8d04/export 2026-09-02T21:54:44.731316+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "03a0a6eb-511a-48f1-8d35-8c2cfd6f8d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202988713449046", "content": "Looks like CISA's on a roll. Seven vulnerabilities have been added to the catalogue.\n- CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83549\n- CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83548\n- CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-9586\n- CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-82329\n- CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-49869\n- CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48710\n- CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-59822 #CISA #infosec #vulnerability", "creation_timestamp": "2026-09-02T19:01:24.559299Z"} 2026-09-02T19:01:24.559299+00:00 https://vulnerability.circl.lu/sighting/b6222f55-bb44-4c72-a195-892f5b21d610/export 2026-09-02T21:54:44.731414+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b6222f55-bb44-4c72-a195-892f5b21d610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "exploited", "source": "https://t.me/BleepingComputer/25466", "content": "\u200aHackers exploit critical JFrog Artifactory flaw to forge admin tokens\n\nA critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-jfrog-artifactory-flaw-to-forge-admin-tokens/", "creation_timestamp": "2026-09-02T19:00:05.414627Z"} 2026-09-02T19:00:05.414627+00:00 https://vulnerability.circl.lu/sighting/df1eac68-136c-4c88-bf1c-46d3d01cfe66/export 2026-09-02T21:54:44.731488+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "df1eac68-136c-4c88-bf1c-46d3d01cfe66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mukmcuh2bi2o", "content": "JFrog Artifactory has an unauthenticated bypass (CVE-2026-82329, CVSS 9.8) that lets a stranger forge admin tokens, exploited now.\n\nSelf-managed instances in default config are in scope.\n\nPatch, then rotate tokens: the upgrade won't revoke a forged one.", "creation_timestamp": "2026-09-02T18:54:47.291865Z"} 2026-09-02T18:54:47.291865+00:00 https://vulnerability.circl.lu/sighting/9b6e92d6-0ee4-4f24-bce7-593222183e52/export 2026-09-02T21:54:44.731562+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9b6e92d6-0ee4-4f24-bce7-593222183e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mukls44d6z25", "content": "Active exploitation of CVE-2026-82329 in JFrog Artifactory lets attackers forge admin tokens on self-managed instances, risking package poisoning and downstream code execution. #JFrogArtifactory #watchTowr #CVE202682329", "creation_timestamp": "2026-09-02T18:45:24.491660Z"} 2026-09-02T18:45:24.491660+00:00 https://vulnerability.circl.lu/sighting/2549e22a-150a-4fb5-939b-6220e67ba688/export 2026-09-02T21:54:44.731639+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2549e22a-150a-4fb5-939b-6220e67ba688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukjsyh2kf22", "content": "\ud83d\uded1 CVE-2026-82329\nJFrog Artifactory\nCVSS 9.8 / EPSS 1% / KEV \u2705\nTL;DR: JFrog Artifactory contains an authentication weakness that, under default configuration, ma\u2026\nhttps://cvesentinel.com/report/CVE-2026-82329?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T18:10:08.020562Z"} 2026-09-02T18:10:08.020562+00:00 https://vulnerability.circl.lu/sighting/ebe4f835-d46f-4946-92fc-d7f8922eea8f/export 2026-09-02T21:54:44.731708+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ebe4f835-d46f-4946-92fc-d7f8922eea8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mukjipv5hy2r", "content": "Another Artifactory CVE under attack: Security researchers have detected active exploitation of CVE-2026-82329, a critical authentication-bypass vulnerability in JFrog Artifactory, shortly after the vendor issued a patch. The flaw, with a CVSS score of 9.8, enables u\u2026 https://ranked.news/1317809?u=b", "creation_timestamp": "2026-09-02T18:04:22.729680Z"} 2026-09-02T18:04:22.729680+00:00 https://vulnerability.circl.lu/sighting/cd2b0144-aa7c-4d6a-b248-71b808c7cc49/export 2026-09-02T21:54:44.731779+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cd2b0144-aa7c-4d6a-b248-71b808c7cc49", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd4012f9-6a61-4a70-ae94-10a548c0536f", "content": "", "creation_timestamp": "2026-09-02T18:00:03.788916Z"} 2026-09-02T18:00:03.788916+00:00 https://vulnerability.circl.lu/sighting/5d75ea4d-c9e1-4c2c-a841-bfd7ffd37999/export 2026-09-02T21:54:44.731845+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5d75ea4d-c9e1-4c2c-a841-bfd7ffd37999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mukj5hznsu2g", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-82329", "creation_timestamp": "2026-09-02T17:58:05.019599Z"} 2026-09-02T17:58:05.019599+00:00 https://vulnerability.circl.lu/sighting/8fa260cb-df39-4279-8918-e9229aae3603/export 2026-09-02T21:54:44.731912+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8fa260cb-df39-4279-8918-e9229aae3603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukhlai26k2i", "content": "\ud83d\uded1 CVE-2026-82329\nJFrog Artifactory\nCVSS 9.8 / EPSS 1% / KEV: No\nTL;DR: JFrog Artifactory contains an authentication weakness that, under default configuration, \u2026\nhttps://cvesentinel.com/report/CVE-2026-82329?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T17:29:59.260126Z"} 2026-09-02T17:29:59.260126+00:00