https://vulnerability.circl.lu/sightings/feed 2026-10-10T18:46:20.001986+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a29bf0c2-e856-4ac2-b734-17ba32ebb36c/export 2026-10-10T18:46:20.019485+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a29bf0c2-e856-4ac2-b734-17ba32ebb36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3436", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 AbstractAggregateConnection::write() PHP-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 Redis \u0438 Valkey Predis \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439 CRLF. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-14128\nCVE-2026-84372\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/predis/predis/security/advisories/GHSA-w6f5-v2h6-g786\nhttps://github.com/predis/predis/commit/053cb4b6ac7fb1f469ead96a78d059bc0458e408", "creation_timestamp": "2026-09-16T00:00:29.529957Z"} 2026-09-16T00:00:29.529957+00:00 https://vulnerability.circl.lu/sighting/9c2d2b4f-5292-4f65-9fcc-925ca4aebd84/export 2026-10-10T18:46:20.021421+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9c2d2b4f-5292-4f65-9fcc-925ca4aebd84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://t.me/bdufstecru/3436", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 AbstractAggregateConnection::write() PHP-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 Redis \u0438 Valkey Predis \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439 CRLF. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-14128\nCVE-2026-84372\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/predis/predis/security/advisories/GHSA-w6f5-v2h6-g786\nhttps://github.com/predis/predis/commit/053cb4b6ac7fb1f469ead96a78d059bc0458e408", "creation_timestamp": "2026-09-15T15:00:05.980226Z"} 2026-09-15T15:00:05.980226+00:00 https://vulnerability.circl.lu/sighting/bf856a25-8958-4294-9ebf-ab4537e0085d/export 2026-10-10T18:46:20.021683+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bf856a25-8958-4294-9ebf-ab4537e0085d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2irus2hv2l", "content": "Details and PoC for CVE-2026-84372 are publicly disclosed. This Predis command injection flaw via CRLF smuggling allows complete cluster compromise.\n\n#Predis #CommandInjection #CVE202684372 #Cybersecurity #Vulnerability", "creation_timestamp": "2026-09-09T02:34:12.839757Z"} 2026-09-09T02:34:12.839757+00:00 https://vulnerability.circl.lu/sighting/86392008-14a6-45b6-93a7-81622012775b/export 2026-10-10T18:46:20.021879+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "86392008-14a6-45b6-93a7-81622012775b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84372", "type": "published-proof-of-concept", "source": "https://github.com/predis/predis/security/advisories/GHSA-w6f5-v2h6-g786", "content": "", "creation_timestamp": "2026-09-08T22:35:39.908701Z"} 2026-09-08T22:35:39.908701+00:00 https://vulnerability.circl.lu/sighting/508cb2f2-596f-44da-89b7-6ab32c2b059d/export 2026-10-10T18:46:20.024278+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "508cb2f2-596f-44da-89b7-6ab32c2b059d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muk2q5qiyj2g", "content": "CVE-2026-84372 - predis\nThe PHP library Predis, used to talk to Redis databases, mishandles batched commands in certain versions. An attacker who can supply specially crafted data could make the client execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#predis #CVE #infosec", "creation_timestamp": "2026-09-02T13:40:05.268788Z"} 2026-09-02T13:40:05.268788+00:00 https://vulnerability.circl.lu/sighting/ad044c51-f7d1-4a00-be8b-815fb8396c7e/export 2026-10-10T18:46:20.024452+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ad044c51-f7d1-4a00-be8b-815fb8396c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muinddr47n2o", "content": "\ud83d\udea8 CVE-2026-84372 \u2014 CVSS 9.8 CRITICAL\n\nPredis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84372\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T00:07:37.616575Z"} 2026-09-02T00:07:37.616575+00:00 https://vulnerability.circl.lu/sighting/56442386-1f57-43d8-a543-13c838995e61/export 2026-10-10T18:46:20.024570+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "56442386-1f57-43d8-a543-13c838995e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muijmrq6t52e", "content": "\ud83d\udd34 CVE-2026-84372 - Critical (9.8)\n\nPredis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84372/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T23:01:19.706013Z"} 2026-09-01T23:01:19.706013+00:00 https://vulnerability.circl.lu/sighting/2887f836-f29c-4a8e-a0c5-ea446fd4bd07/export 2026-10-10T18:46:20.024677+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2887f836-f29c-4a8e-a0c5-ea446fd4bd07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3muifb2ywsm2v", "content": "\u26a0\ufe0f PATCH NOW\n\nPredis, a widely used PHP client for Redis, has a critical flaw (CVSS 9.8, CVE-2026-84372): attacker-controlled cache keys can smuggle extra Redis commands.\n\nHits versions 3.0 to 3.2 on cluster and replication setups.\n\nFix: upgrade to Predis 3.3.0.", "creation_timestamp": "2026-09-01T21:43:11.602921Z"} 2026-09-01T21:43:11.602921+00:00