https://vulnerability.circl.lu/sightings/feed 2026-06-17T21:01:52.268242+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/786f0e8b-4ff2-4a7f-b433-178c77642f98/export 2026-06-17T21:01:52.282479+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "786f0e8b-4ff2-4a7f-b433-178c77642f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnkzklr64m2g", "content": "CVE-2026-45778 - Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Reset\nCVE ID : CVE-2026-45778\n \n Published : June 5, 2026, 8:17 p.m. | 15\u00a0minutes ago\n \n Description : OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to v...", "creation_timestamp": "2026-06-05T20:55:23.268741Z"} 2026-06-05T20:55:23.268741+00:00 https://vulnerability.circl.lu/sighting/b0ffb085-66b3-499a-9ca8-51bb833971c2/export 2026-06-17T21:01:52.282414+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b0ffb085-66b3-499a-9ca8-51bb833971c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45777", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnkzp3hx2y2k", "content": "CVE-2026-45777 - Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection\nCVE ID : CVE-2026-45777\n \n Published : June 5, 2026, 8:17 p.m. | 15\u00a0minutes ago\n \n Description : OpenXDMoD is an open framework for collecting and analyzing HPC metri...", "creation_timestamp": "2026-06-05T20:57:54.385410Z"} 2026-06-05T20:57:54.385410+00:00 https://vulnerability.circl.lu/sighting/730da530-e20f-41ca-8c4d-126fd155bfb4/export 2026-06-17T21:01:52.282349+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "730da530-e20f-41ca-8c4d-126fd155bfb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnl27dfxyj2r", "content": "CVE-2026-45776 - Open XDMoD has Broken Access Control via Client-Controlled Session Variable\nCVE ID : CVE-2026-45776\n \n Published : June 5, 2026, 8:17 p.m. | 15\u00a0minutes ago\n \n Description : OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to versi...", "creation_timestamp": "2026-06-05T21:06:59.290012Z"} 2026-06-05T21:06:59.290012+00:00 https://vulnerability.circl.lu/sighting/b6df865f-96ca-49e1-97df-a2a956d50e27/export 2026-06-17T21:01:52.282281+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b6df865f-96ca-49e1-97df-a2a956d50e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45779", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnl37s4oma2i", "content": "CVE-2026-45779 - Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromise\nCVE ID : CVE-2026-45779\n \n Published : June 5, 2026, 8:17 p.m. | 15\u00a0minutes ago\n \n Description : OpenXDMoD is an open framework for collecting and analyzing HPC metrics....", "creation_timestamp": "2026-06-05T21:25:09.454922Z"} 2026-06-05T21:25:09.454922+00:00 https://vulnerability.circl.lu/sighting/92dc1d62-9cc7-450d-91f6-dc58c3b88642/export 2026-06-17T21:01:52.282171+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "92dc1d62-9cc7-450d-91f6-dc58c3b88642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45779", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116701988411720814", "content": "\ud83d\udee1\ufe0f CRITICAL: CVE-2026-45779 in Open XDMoD < 10.0.3 enables unauthenticated SQL injection \u2014 total DB compromise possible! Patch to 10.0.3+ or apply manual fix. No known exploitation yet. Details: https://radar.offseq.com/threat/cve-2026-45779-cwe-89-improper-neutralization-of-s-cff49bf0 #OffSeq #Vuln #SQLi #HPC", "creation_timestamp": "2026-06-06T07:30:25.733281Z"} 2026-06-06T07:30:25.733281+00:00 https://vulnerability.circl.lu/sighting/0b26743c-1a1a-4af9-8b63-14609681094e/export 2026-06-17T21:01:52.282055+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0b26743c-1a1a-4af9-8b63-14609681094e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45779", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnm525wsqi2a", "content": "CRITICAL SQL injection in Open XDMoD < 10.0.3 \ud83d\udea8 No auth needed \u2014 attackers can fully compromise your DB. Upgrade to 10.0.3+ or patch now! More info: https://radar.offseq.com/threat/cve-2026-45779-cwe-89-improper-neutralization-of-s-cff49bf0 #OffSeq #Vulnerability #SQLInjection", "creation_timestamp": "2026-06-06T07:30:27.454534Z"} 2026-06-06T07:30:27.454534+00:00 https://vulnerability.circl.lu/sighting/75b6d59b-1c16-430b-bd7f-184bd41af3f4/export 2026-06-17T21:01:52.281932+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "75b6d59b-1c16-430b-bd7f-184bd41af3f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45777", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnmc35xzgd2f", "content": "CRITICAL OS command injection in Open XDMoD v9.5.0 \u2013 11.0.2 \ud83d\udda5\ufe0f. Remote attackers can execute system commands. Patch to 11.0.3 or apply the fix ASAP! https://radar.offseq.com/threat/cve-2026-45777-cwe-78-improper-neutralization-of-s-3ce0a100 #OffSeq #CVE202645777 #security", "creation_timestamp": "2026-06-06T09:00:30.082474Z"} 2026-06-06T09:00:30.082474+00:00 https://vulnerability.circl.lu/sighting/ede35411-f80c-483a-90b5-9b19b7dbecb0/export 2026-06-17T21:01:52.281810+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ede35411-f80c-483a-90b5-9b19b7dbecb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45777", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116702342468198356", "content": "\ud83d\udea8 CVE-2026-45777: CRITICAL OS command injection in Open XDMoD v9.5.0 \u2013 11.0.2. Remote attackers can run system commands with web server privileges. Patch to 11.0.3 or apply fix now. No known exploitation. https://radar.offseq.com/threat/cve-2026-45777-cwe-78-improper-neutralization-of-s-3ce0a100 #OffSeq #CVE202645777 #infosec", "creation_timestamp": "2026-06-06T09:00:35.474997Z"} 2026-06-06T09:00:35.474997+00:00 https://vulnerability.circl.lu/sighting/0fdafb14-238c-45b1-a0e1-522d962c3e7e/export 2026-06-17T21:01:52.281649+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0fdafb14-238c-45b1-a0e1-522d962c3e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45779", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobwuirvaw23", "content": "\ud83d\udea8 ALERT: CVE-2026-45779\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nOpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3 that allows an unauthenticated remote attacker to execute arbitrary SQL statements. Exploitation ", "creation_timestamp": "2026-06-14T23:38:28.319180Z"} 2026-06-14T23:38:28.319180+00:00 https://vulnerability.circl.lu/sighting/4363e024-ccc2-4e2c-b365-ae21a0204606/export 2026-06-17T21:01:52.280242+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4363e024-ccc2-4e2c-b365-ae21a0204606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45777", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobwuofi732p", "content": "\ud83d\udea8 ALERT: CVE-2026-45777\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nOpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbitrary system commands on the web server hosting Open XDMoD with the privileges of ", "creation_timestamp": "2026-06-14T23:38:34.210641Z"} 2026-06-14T23:38:34.210641+00:00