https://vulnerability.circl.lu/sightings/feed 2026-07-26T02:42:53.713112+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4c329b99-5602-4524-8557-b053d4e783c1/export 2026-07-26T02:42:53.735990+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4c329b99-5602-4524-8557-b053d4e783c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116980484212804462", "content": "Some increased actor activities are shown targeting med-united epa4all (CVE-2026-48021) https://vuldb.com/vuln/383004/cti", "creation_timestamp": "2026-07-25T11:55:33.525014Z"} 2026-07-25T11:55:33.525014+00:00 https://vulnerability.circl.lu/sighting/8215c21b-7d74-44f6-b3a2-7e020609e850/export 2026-07-26T02:42:53.737634+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8215c21b-7d74-44f6-b3a2-7e020609e850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48021", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrgusiwoyk2o", "content": "med-united epa4all (<2026-05-20) has a CRITICAL TLS cert validation flaw \u2014 attackers can hijack sessions, exposing patient data. Upgrade to 2026-05-20+ now. https://radar.offseq.com/threat/cve-2026-48021-cwe-295-improper-certificate-validation-in-med-united-epa4all-26e8e441c1a877ee #OffSeq #Healt...", "creation_timestamp": "2026-07-25T03:00:28.227022Z"} 2026-07-25T03:00:28.227022+00:00 https://vulnerability.circl.lu/sighting/8bca82f6-8c08-4a08-8711-5c00e55b5209/export 2026-07-26T02:42:53.737743+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8bca82f6-8c08-4a08-8711-5c00e55b5209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48021", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116978380017178575", "content": "CVE-2026-48021 in med-united epa4all (<2026-05-20): CRITICAL TLS cert validation flaw lets attackers decrypt/modify patient records & tokens. Upgrade to 2026-05-20+ ASAP. Details: https://radar.offseq.com/threat/cve-2026-48021-cwe-295-improper-certificate-validation-in-med-united-epa4all-26e8e441c1a877ee #OffSeq #HealthcareSecurity #Vuln #CVE202648021", "creation_timestamp": "2026-07-25T03:00:27.432595Z"} 2026-07-25T03:00:27.432595+00:00 https://vulnerability.circl.lu/sighting/057ad97c-261b-4b93-918d-d773c37472f3/export 2026-07-26T02:42:53.737813+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "057ad97c-261b-4b93-918d-d773c37472f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5dtc5uh2a", "content": "\ud83d\udd34 CVE-2026-48021 - Critical (9.1)\n\nIn epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48021/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T20:00:39.481865Z"} 2026-07-24T20:00:39.481865+00:00 https://vulnerability.circl.lu/sighting/f9704441-3bfd-4bc6-843b-2d973924bd95/export 2026-07-26T02:42:53.737881+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f9704441-3bfd-4bc6-843b-2d973924bd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg3jmp2rf2y", "content": "CVE-2026-48021 - epa4all\nA previous version of epa4all allowed an attacker to intercept sensitive data and modify it. This happened because the software didn't properly check the identity of the server it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#epa4all #medunited #CVE #infosec", "creation_timestamp": "2026-07-24T19:28:05.943964Z"} 2026-07-24T19:28:05.943964+00:00