https://vulnerability.circl.lu/sightings/feed 2026-08-02T00:39:19.641842+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a8f53f46-c159-4f4b-a3d3-f2e35b389ae0/export 2026-08-02T00:39:19.666694+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a8f53f46-c159-4f4b-a3d3-f2e35b389ae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2764", "content": "Squidbleed (CVE-2026-47729): A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid\n\nOriginal text: \u201cSquidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)\u201d \u2014 Dark Web Informer (June 24, 2026). This is an independent technical write-up of the same vulnerability. The code samples below are original, illustrative reconstructions written for this article \u2014 they demonstrate the bug class and are not copied from the Squid\u2026\n\nhttps://core-jmp.org/2026/06/squidbleed-cve-2026-47729-squid-ftp-heap-over-read/", "creation_timestamp": "2026-07-29T00:00:12.257955Z"} 2026-07-29T00:00:12.257955+00:00 https://vulnerability.circl.lu/sighting/b7124b3e-8d0f-40d2-bbd2-41ca97797f46/export 2026-08-02T00:39:19.669062+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b7124b3e-8d0f-40d2-bbd2-41ca97797f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2764", "content": "Squidbleed (CVE-2026-47729): A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid\n\nOriginal text: \u201cSquidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)\u201d \u2014 Dark Web Informer (June 24, 2026). This is an independent technical write-up of the same vulnerability. The code samples below are original, illustrative reconstructions written for this article \u2014 they demonstrate the bug class and are not copied from the Squid\u2026\n\nhttps://core-jmp.org/2026/06/squidbleed-cve-2026-47729-squid-ftp-heap-over-read/", "creation_timestamp": "2026-07-28T22:00:05.807582Z"} 2026-07-28T22:00:05.807582+00:00 https://vulnerability.circl.lu/sighting/8222068a-a197-45f6-939b-5812b795e638/export 2026-08-02T00:39:19.669240+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8222068a-a197-45f6-939b-5812b795e638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/zhatez/2764", "content": "Squidbleed (CVE-2026-47729): A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid\n\nOriginal text: \u201cSquidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)\u201d \u2014 Dark Web Informer (June 24, 2026). This is an independent technical write-up of the same vulnerability. The code samples below are original, illustrative reconstructions written for this article \u2014 they demonstrate the bug class and are not copied from the Squid\u2026\n\nhttps://core-jmp.org/2026/06/squidbleed-cve-2026-47729-squid-ftp-heap-over-read/", "creation_timestamp": "2026-07-27T00:01:30.680878Z"} 2026-07-27T00:01:30.680878+00:00 https://vulnerability.circl.lu/sighting/4ec2025e-b2f2-4004-84c5-1a761832800a/export 2026-08-02T00:39:19.669386+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4ec2025e-b2f2-4004-84c5-1a761832800a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/zhatez/2764", "content": "Squidbleed (CVE-2026-47729): A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid\n\nOriginal text: \u201cSquidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)\u201d \u2014 Dark Web Informer (June 24, 2026). This is an independent technical write-up of the same vulnerability. The code samples below are original, illustrative reconstructions written for this article \u2014 they demonstrate the bug class and are not copied from the Squid\u2026\n\nhttps://core-jmp.org/2026/06/squidbleed-cve-2026-47729-squid-ftp-heap-over-read/", "creation_timestamp": "2026-07-26T07:01:46.183548Z"} 2026-07-26T07:01:46.183548+00:00 https://vulnerability.circl.lu/sighting/fb1fd7fd-bc2f-4497-b544-4e21f442f52e/export 2026-08-02T00:39:19.669524+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fb1fd7fd-bc2f-4497-b544-4e21f442f52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47724", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdtlla4y72g", "content": "\ud83d\udd34 CVE-2026-47724 - Critical (9.9)\n\nnebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47724/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T22:00:42.831343Z"} 2026-07-23T22:00:42.831343+00:00 https://vulnerability.circl.lu/sighting/59c22367-8786-4282-8f38-a9c8d1260459/export 2026-08-02T00:39:19.669671+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "59c22367-8786-4282-8f38-a9c8d1260459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47724", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdq3lhsox2k", "content": "CVE-2026-47724 - juev\nNon-admin operators can create admin API keys, giving them broad access to other tenants. This can happen when an API key is used to call the `/api/v1/operators//api-keys`\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#juev #Golang #CVE #infosec", "creation_timestamp": "2026-07-23T20:58:04.402068Z"} 2026-07-23T20:58:04.402068+00:00 https://vulnerability.circl.lu/sighting/21530e02-61fd-4d94-8dce-6c97a20e193f/export 2026-08-02T00:39:19.669808+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "21530e02-61fd-4d94-8dce-6c97a20e193f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/thehackernews/9301", "content": "\ud83e\udd2f A 1997 parser bug is still haunting Squid.\n\nSquidbleed (CVE-2026-47729) can leak another user\u2019s cleartext HTTP request through a shared Squid proxy, including credentials or session tokens.\n\nRead \ud83e\udc16 https://thehackernews.com/2026/06/29-year-old-squid-proxy-bug-squidbleed.html", "creation_timestamp": "2026-07-16T00:00:10.605494Z"} 2026-07-16T00:00:10.605494+00:00 https://vulnerability.circl.lu/sighting/70c37a2b-c62c-4c23-9862-40775ef95465/export 2026-08-02T00:39:19.669942+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "70c37a2b-c62c-4c23-9862-40775ef95465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/thehackernews/9301", "content": "\ud83e\udd2f A 1997 parser bug is still haunting Squid.\n\nSquidbleed (CVE-2026-47729) can leak another user\u2019s cleartext HTTP request through a shared Squid proxy, including credentials or session tokens.\n\nRead \ud83e\udc16 https://thehackernews.com/2026/06/29-year-old-squid-proxy-bug-squidbleed.html", "creation_timestamp": "2026-07-15T12:00:04.342798Z"} 2026-07-15T12:00:04.342798+00:00 https://vulnerability.circl.lu/sighting/07ba5eb0-8ff3-45ae-975d-d2eb12bee79e/export 2026-08-02T00:39:19.670071+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "07ba5eb0-8ff3-45ae-975d-d2eb12bee79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3263", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 strchr() \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-08611\nCVE-2026-47729\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid:\nhttps://github.com/squid-cache/squid/releases/tag/SQUID_7_6\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-47729\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/CVE-2026-47729", "creation_timestamp": "2026-07-15T00:00:34.723600Z"} 2026-07-15T00:00:34.723600+00:00 https://vulnerability.circl.lu/sighting/0addc682-d08f-4c0d-8abb-e0ae5470d7d3/export 2026-08-02T00:39:19.670215+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0addc682-d08f-4c0d-8abb-e0ae5470d7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/bdufstecru/3263", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 strchr() \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-08611\nCVE-2026-47729\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid:\nhttps://github.com/squid-cache/squid/releases/tag/SQUID_7_6\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-47729\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/CVE-2026-47729", "creation_timestamp": "2026-07-14T01:00:05.495035Z"} 2026-07-14T01:00:05.495035+00:00