https://vulnerability.circl.lu/sightings/feed 2026-09-14T14:23:52.451780+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2f60d11a-8e4d-4549-8eab-8d8d03195962/export 2026-09-14T14:23:52.472532+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2f60d11a-8e4d-4549-8eab-8d8d03195962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85661", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphfj65322b", "content": "CVE-2026-85661 - excel-mcp-server\nThe excel-mcp-server version 0.1.8 does not limit where it can read or write files when a certain setting is missing. This means a malicious user could access or modify any file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#harismusa #CVE #infosec", "creation_timestamp": "2026-09-04T17:10:05.600072Z"} 2026-09-04T17:10:05.600072+00:00 https://vulnerability.circl.lu/sighting/acae755f-1b0c-44e0-adb1-984f80eb9775/export 2026-09-14T14:23:52.476961+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "acae755f-1b0c-44e0-adb1-984f80eb9775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85661", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdwcafja2g", "content": "\ud83d\udea8 CVE-2026-85661 \u2014 CVSS 9.3 CRITICAL\n\nexcel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85661\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:07:54.568911Z"} 2026-09-04T16:07:54.568911+00:00