https://vulnerability.circl.lu/sightings/feed 2026-09-03T18:51:26.292989+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/893840d6-bc3c-4ca2-ae79-fce44026b95f/export 2026-09-03T18:51:26.322181+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "893840d6-bc3c-4ca2-ae79-fce44026b95f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4357", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mukkwocuck2p", "content": "CVE-2026-4357 - embed html5 game\nThe Embed HTML5 Game plugin for WordPress, versions up through 1.3, does not check who is uploading files or what type of file is allowed. Because of that, a stranger could place a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-09-02T18:30:03.931164Z"} 2026-09-02T18:30:03.931164+00:00 https://vulnerability.circl.lu/sighting/00a71ccb-22aa-4ef9-831d-2cc53deb20f8/export 2026-09-03T18:51:26.324154+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "00a71ccb-22aa-4ef9-831d-2cc53deb20f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4357", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mukcxzublb2m", "content": "\ud83d\udea8 CVE-2026-4357 \u2014 CVSS 10 CRITICAL\n\nThe Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the p...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-4357\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T16:07:39.484101Z"} 2026-09-02T16:07:39.484101+00:00 https://vulnerability.circl.lu/sighting/c5b23f98-0e3a-4856-a343-b644acf33705/export 2026-09-03T18:51:26.324298+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c5b23f98-0e3a-4856-a343-b644acf33705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43578", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmmplkxkhz2r", "content": "\ud83d\udccc CVE-2026-43578 - OpenClaw versions 2026.3.31 before 2026.4.10 contain a privilege escalation vulnerability where heartbeat owner downgrade detection misses local backg... https://www.cyberhub.blog/cves/CVE-2026-43578", "creation_timestamp": "2026-05-24T19:37:06.733591Z"} 2026-05-24T19:37:06.733591+00:00 https://vulnerability.circl.lu/sighting/96da309a-c1de-431c-8a5c-aedf31b88bc6/export 2026-09-03T18:51:26.324408+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "96da309a-c1de-431c-8a5c-aedf31b88bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43575", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlbsmzpwmw2q", "content": "\ud83d\udccc CVE-2026-43575 - OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that exposes interactive... https://www.cyberhub.blog/cves/CVE-2026-43575", "creation_timestamp": "2026-05-07T18:07:08.125639Z"} 2026-05-07T18:07:08.125639+00:00 https://vulnerability.circl.lu/sighting/eb63e2ad-826d-4f2b-b41f-f2b265290b92/export 2026-09-03T18:51:26.324526+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "eb63e2ad-826d-4f2b-b41f-f2b265290b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43571", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlbpbpwgeo2v", "content": "\ud83d\udccc CVE-2026-43571 - OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to resolve workspace plugin shadows b... https://www.cyberhub.blog/cves/CVE-2026-43571", "creation_timestamp": "2026-05-07T17:07:09.092128Z"} 2026-05-07T17:07:09.092128+00:00 https://vulnerability.circl.lu/sighting/b4e7a0c2-0495-4070-b1a5-bff54b77b2f9/export 2026-09-03T18:51:26.324644+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b4e7a0c2-0495-4070-b1a5-bff54b77b2f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43575", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mla4rxxyf72p", "content": "CVE-2026-43575 - OpenClaw 2026.2.21\nCVE ID : CVE-2026-43575\n \n Published : May 6, 2026, 8:16 p.m. | 4\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that expose...", "creation_timestamp": "2026-05-07T02:03:32.890181Z"} 2026-05-07T02:03:32.890181+00:00 https://vulnerability.circl.lu/sighting/5aae59c2-bc9c-4f8e-ae55-18c2aefa2643/export 2026-09-03T18:51:26.324759+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5aae59c2-bc9c-4f8e-ae55-18c2aefa2643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43579", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml7ohf6vsu2q", "content": "CVE-2026-43579 - OpenClaw Nostr Inadequate Access Control Vulnerability\nCVE ID : CVE-2026-43579\n \n Published : May 6, 2026, 8:16 p.m. | 23\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile ...", "creation_timestamp": "2026-05-06T21:47:06.568018Z"} 2026-05-06T21:47:06.568018+00:00 https://vulnerability.circl.lu/sighting/bf52fa15-52b7-499d-a712-1677ea00f3b0/export 2026-09-03T18:51:26.324857+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bf52fa15-52b7-499d-a712-1677ea00f3b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43578", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml7nnj45ja2e", "content": "CVE-2026-43578 - OpenClaw Privilege Escalation\nCVE ID : CVE-2026-43578\n \n Published : May 6, 2026, 8:16 p.m. | 23\u00a0minutes ago\n \n Description : OpenClaw versions 2026.3.31 before 2026.4.10 contain a privilege escalation vulnerability where heartbeat owner downgrade detection mi...", "creation_timestamp": "2026-05-06T21:32:36.085180Z"} 2026-05-06T21:32:36.085180+00:00 https://vulnerability.circl.lu/sighting/abbf6286-59e5-470f-b6ef-19e5c0ab4c1a/export 2026-09-03T18:51:26.324961+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "abbf6286-59e5-470f-b6ef-19e5c0ab4c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43578", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kywdjit2r", "content": "\ud83d\udd34 CVE-2026-43578 - Critical (9.1)\n\nOpenClaw versions 2026.3.31 before 2026.4.10 contain a privilege escalation vulnerability where h...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43578/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:45:18.117024Z"} 2026-05-06T20:45:18.117024+00:00 https://vulnerability.circl.lu/sighting/d9378c28-7ec1-4192-9985-b36e344b2b6f/export 2026-09-03T18:51:26.325060+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d9378c28-7ec1-4192-9985-b36e344b2b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43576", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kyox52426", "content": "\ud83d\udfe0 CVE-2026-43576 - High (7.7)\n\nOpenClaw before 2026.4.5 contains a server-side request forgery vulnerability in the CDP /json/ve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43576/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:45:10.358890Z"} 2026-05-06T20:45:10.358890+00:00