https://vulnerability.circl.lu/sightings/feed 2026-09-16T16:47:15.898303+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/17557078-9281-4d91-98b6-e66c79d3dc4c/export 2026-09-16T16:47:15.929899+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "17557078-9281-4d91-98b6-e66c79d3dc4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16335", "type": "seen", "source": "https://gist.github.com/ichintu/bb350504840f7717d8931db615795f78", "content": "Today\u2019s threat intelligence highlights three key vulnerabilities:\n\n\u2022 **CVE-2026-12944 (Critical, 9.6):** IBM Langflow OSS 1.0.0\u20131.10.0 contains a scanner defect that falsely validates components with `socket`/`urllib` imports, enabling root code execution, AWS credential theft via IMDSv1 SSRF, and lateral movement. \n\u2022 **3BB Compromise:** Thai broadband provider 3BB was breached via a MeshCentral backdoor (CVE-2024-21762), granting attackers persistent root access to target and exfiltrate subscriber credentials. \n\u2022 **CVE-2026-16335 (High, 8.1):** IBM DataStage on Cloud Pak for Data 5.4.0.0 suffers from a path traversal flaw allowing authenticated attackers to read, write, or delete arbitrary files.", "creation_timestamp": "2026-09-15T00:04:06.297001Z"} 2026-09-15T00:04:06.297001+00:00