https://vulnerability.circl.lu/sightings/feed 2026-09-17T02:29:27.624441+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fbe1fb6c-3c1d-4224-899d-b46c1d07e1cb/export 2026-09-17T02:29:27.648605+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fbe1fb6c-3c1d-4224-899d-b46c1d07e1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88861", "type": "published-proof-of-concept", "source": "Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3_XacHD49buP-a4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.416941Z"} 2026-09-15T00:00:21.416941+00:00 https://vulnerability.circl.lu/sighting/99a2fd60-0564-4f36-ab32-ab784bc79728/export 2026-09-17T02:29:27.650279+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "99a2fd60-0564-4f36-ab32-ab784bc79728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88861", "type": "seen", "source": "Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3_XacHD49buP-a4", "content": "", "creation_timestamp": "2026-09-14T03:00:15.091953Z"} 2026-09-14T03:00:15.091953+00:00 https://vulnerability.circl.lu/sighting/156e0571-ab71-4c29-b386-2e703dd9bb15/export 2026-09-17T02:29:27.650371+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "156e0571-ab71-4c29-b386-2e703dd9bb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88862", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvcbroayk42y", "content": "CVE-2026-88862 - capgo.app\nCapgo's backend does not properly check a special header, so a user who has a limited API key can tell the system to use the ID of a more powerful key that belongs to the same\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#capgoapp #capgo #CVE #infosec", "creation_timestamp": "2026-09-12T04:50:06.422875Z"} 2026-09-12T04:50:06.422875+00:00 https://vulnerability.circl.lu/sighting/8404c661-2ab0-456c-a9dc-7a7671718e0a/export 2026-09-17T02:29:27.650447+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8404c661-2ab0-456c-a9dc-7a7671718e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88869", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gqat32v2y", "content": "\ud83d\udea8 CVE-2026-88869 \u2014 CVSS 9.3 CRITICAL\n\nAVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulne...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88869\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:08:08.551610Z"} 2026-09-10T16:08:08.551610+00:00 https://vulnerability.circl.lu/sighting/bdb6da03-53fe-4bd6-8a2e-68a4880c741b/export 2026-09-17T02:29:27.650516+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bdb6da03-53fe-4bd6-8a2e-68a4880c741b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88868", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gpws3p425", "content": "\ud83d\udea8 CVE-2026-88868 \u2014 CVSS 9.3 CRITICAL\n\nAVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulne...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88868\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:58.106757Z"} 2026-09-10T16:07:58.106757+00:00 https://vulnerability.circl.lu/sighting/e4c8dd21-553f-44e9-a678-e6bfbe499d7c/export 2026-09-17T02:29:27.650594+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e4c8dd21-553f-44e9-a678-e6bfbe499d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88867", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gpnjiyh22", "content": "\ud83d\udea8 CVE-2026-88867 \u2014 CVSS 9.3 CRITICAL\n\nWWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07ee78eaf330c1, contains a st...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88867\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:47.950899Z"} 2026-09-10T16:07:47.950899+00:00 https://vulnerability.circl.lu/sighting/ddfed3ae-7e1e-40cc-9d03-898a1690ff87/export 2026-09-17T02:29:27.650659+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ddfed3ae-7e1e-40cc-9d03-898a1690ff87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88866", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gpesrgf2y", "content": "\ud83d\udea8 CVE-2026-88866 \u2014 CVSS 9.3 CRITICAL\n\nWWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88866\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:38.781623Z"} 2026-09-10T16:07:38.781623+00:00 https://vulnerability.circl.lu/sighting/882b4f45-cc8e-420c-960a-3ec9d99dd301/export 2026-09-17T02:29:27.650728+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "882b4f45-cc8e-420c-960a-3ec9d99dd301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88864", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gp44tk22t", "content": "\ud83d\udea8 CVE-2026-88864 \u2014 CVSS 9.3 CRITICAL\n\nCapgo (capgo.app) fails to restrict direct write access to the public.sso_providers table exposed through S...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88864\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:29.679946Z"} 2026-09-10T16:07:29.679946+00:00 https://vulnerability.circl.lu/sighting/71776686-dfbf-42a3-9969-45bd5b306179/export 2026-09-17T02:29:27.650791+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "71776686-dfbf-42a3-9969-45bd5b306179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gotlnd722", "content": "\ud83d\udea8 CVE-2026-88860 \u2014 CVSS 9.3 CRITICAL\n\nCapgo fails to clean up channel permission overrides when a user's last organization role binding is delete...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:21.766760Z"} 2026-09-10T16:07:21.766760+00:00 https://vulnerability.circl.lu/sighting/2c4c1c93-d47c-4d90-a19a-6bfcb95cc6b7/export 2026-09-17T02:29:27.650853+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2c4c1c93-d47c-4d90-a19a-6bfcb95cc6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88868", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6bstzdrx2b", "content": "CVE-2026-88868 - avideo\nThe LiveLinks feature in AVideo does not clean up the text entered for titles and descriptions. This means someone with streaming rights could add hidden code that runs on every page\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-10T14:40:07.017052Z"} 2026-09-10T14:40:07.017052+00:00