https://vulnerability.circl.lu/sightings/feed 2026-06-28T05:18:03.296466+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/eeb79982-5e15-46d1-a9fd-a14ab62c7b72/export 2026-06-28T05:18:03.325667+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "eeb79982-5e15-46d1-a9fd-a14ab62c7b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49261", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzvwulfix24", "content": "\ud83d\udd34 CVE-2026-49261 - Critical (10)\n\nMariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49261/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T19:00:37.381597Z"} 2026-06-11T19:00:37.381597+00:00 https://vulnerability.circl.lu/sighting/c481ba80-a904-4551-93ce-637d82942d76/export 2026-06-28T05:18:03.325568+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c481ba80-a904-4551-93ce-637d82942d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49268", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3moimkre7522k", "content": "CVE-2026-49268: Apache Shiro: LDAP DN Injection in DefaultLdapRealm", "creation_timestamp": "2026-06-17T15:22:42.772488Z"} 2026-06-17T15:22:42.772488+00:00 https://vulnerability.circl.lu/sighting/646b3242-6c88-49eb-b382-8d5c62a1f478/export 2026-06-28T05:18:03.325465+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "646b3242-6c88-49eb-b382-8d5c62a1f478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49261", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moip27mboh2e", "content": "\ud83d\udccc CVE-2026-49261 - MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.... https://www.cyberhub.blog/cves/CVE-2026-49261", "creation_timestamp": "2026-06-17T16:07:09.234241Z"} 2026-06-17T16:07:09.234241+00:00 https://vulnerability.circl.lu/sighting/554a69ec-6a0e-489d-9f25-c3f8d8d69bcf/export 2026-06-28T05:18:03.325354+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "554a69ec-6a0e-489d-9f25-c3f8d8d69bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49261", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moj7khktkw2v", "content": "\ud83d\udea8 HIGH: CVE-2026-49261\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nMariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedde", "creation_timestamp": "2026-06-17T21:02:33.671660Z"} 2026-06-17T21:02:33.671660+00:00 https://vulnerability.circl.lu/sighting/86ce5027-bff0-414b-8fdb-98b3e6938875/export 2026-06-28T05:18:03.325251+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "86ce5027-bff0-414b-8fdb-98b3e6938875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49268", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3molcr4tjop2y", "content": "Apache Shiro patched CVE-2026-49268: DefaultLdapRealm did not escape RFC 2253 special characters in usernames, allowing LDAP DN injection. Fixed in 2.2.1 and 3.0.0-alpha-2. Input that flows into a directory query needs escaping every time. When did you last audit your Shiro realm config?\n\n#security", "creation_timestamp": "2026-06-18T17:05:17.919201Z"} 2026-06-18T17:05:17.919201+00:00 https://vulnerability.circl.lu/sighting/ae81ec21-e385-4ef6-a407-65cb6e3660bc/export 2026-06-28T05:18:03.325135+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ae81ec21-e385-4ef6-a407-65cb6e3660bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49260", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3monvvf7aa22k", "content": "CVE-2026-49260 - PhpWeasyPrint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc)\nCVE ID : CVE-2026-49260\n \n Published : June 19, 2026, 4:59 p.m. | 44\u00a0minutes ago\n \n Description ...", "creation_timestamp": "2026-06-19T17:53:01.488925Z"} 2026-06-19T17:53:01.488925+00:00 https://vulnerability.circl.lu/sighting/bddcb6c3-9927-4dc9-8076-5d794a1f93d3/export 2026-06-28T05:18:03.325009+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bddcb6c3-9927-4dc9-8076-5d794a1f93d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49268", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motn3qrabg2r", "content": "\ud83d\udea8 ALERT: CVE-2026-49268\n\nCVSS 9.1/10\n\n\ud83d\udccb WHAT IT IS:\nA remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated into the LDAP DN template without any escaping of RFC 2253 special ", "creation_timestamp": "2026-06-22T00:31:29.516680Z"} 2026-06-22T00:31:29.516680+00:00 https://vulnerability.circl.lu/sighting/3fb7c4e4-7d93-485e-9a64-909058aedcac/export 2026-06-28T05:18:03.323871+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3fb7c4e4-7d93-485e-9a64-909058aedcac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49261", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnd7x2442e", "content": "\ud83d\udea8 ALERT: CVE-2026-49261\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nMariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embed", "creation_timestamp": "2026-06-22T00:35:40.356951Z"} 2026-06-22T00:35:40.356951+00:00 https://vulnerability.circl.lu/sighting/451f77d3-1a44-4d60-85d0-47dd15cc2c3e/export 2026-06-28T05:18:03.323735+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "451f77d3-1a44-4d60-85d0-47dd15cc2c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49262", "type": "published-proof-of-concept", "source": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789", "content": "", "creation_timestamp": "2026-06-26T22:35:22.550967Z"} 2026-06-26T22:35:22.550967+00:00 https://vulnerability.circl.lu/sighting/942b294b-5978-43b6-9dc7-72352f203885/export 2026-06-28T05:18:03.321722+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "942b294b-5978-43b6-9dc7-72352f203885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49260", "type": "published-proof-of-concept", "source": "https://github.com/pontedilana/php-weasyprint/security/advisories/GHSA-f5gc-qxf8-mh9g", "content": "", "creation_timestamp": "2026-06-26T22:35:24.955418Z"} 2026-06-26T22:35:24.955418+00:00