https://vulnerability.circl.lu/sightings/feed 2026-07-12T16:43:26.540322+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/cabd10b9-3841-486b-9793-4ded9223b5b2/export 2026-07-12T16:43:26.564343+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cabd10b9-3841-486b-9793-4ded9223b5b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdh2l4fg72s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3166473E-18C7-424F-9E3D-A07720D8754D", "creation_timestamp": "2026-07-11T00:51:15.218995Z"} 2026-07-11T00:51:15.218995+00:00 https://vulnerability.circl.lu/sighting/9a6e6af6-40e6-4939-a3cc-2c255b74a9eb/export 2026-07-12T16:43:26.567732+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9a6e6af6-40e6-4939-a3cc-2c255b74a9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqdbjffybf2u", "content": "CVE-2026-54149 - Critical OS Command Injection in MaxKB. Authenticated users can execute arbitrary commands via malicious .tool import and MCP transport. CVSS 8.8. No patch available yet. Mitigate immediately. #CVE #MaxKB #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54149/", "creation_timestamp": "2026-07-10T23:12:10.492434Z"} 2026-07-10T23:12:10.492434+00:00 https://vulnerability.circl.lu/sighting/cb356833-a442-4445-ba88-184a23e9e10a/export 2026-07-12T16:43:26.567880+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cb356833-a442-4445-ba88-184a23e9e10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7nuupzf2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/58B24DF0-4314-4D8C-AFCA-04CA11962397", "creation_timestamp": "2026-07-10T22:38:53.343061Z"} 2026-07-10T22:38:53.343061+00:00 https://vulnerability.circl.lu/sighting/870146e3-0b93-4aa3-8cc6-3cea6af87e14/export 2026-07-12T16:43:26.567989+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "870146e3-0b93-4aa3-8cc6-3cea6af87e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd64oaost2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/91FF5E02-D4E6-4EBC-9014-0BCA01237FD5", "creation_timestamp": "2026-07-10T22:11:21.992858Z"} 2026-07-10T22:11:21.992858+00:00 https://vulnerability.circl.lu/sighting/9654592c-0707-4989-9761-40cbdf77f82f/export 2026-07-12T16:43:26.568093+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9654592c-0707-4989-9761-40cbdf77f82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcmrccqct25", "content": "\ud83d\udfe0 CVE-2026-54149 - High (8.8)\n\nMaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import funct...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54149/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T17:00:47.133240Z"} 2026-07-10T17:00:47.133240+00:00 https://vulnerability.circl.lu/sighting/1a9858db-da1f-4913-b894-8008dda8ae9c/export 2026-07-12T16:43:26.568200+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1a9858db-da1f-4913-b894-8008dda8ae9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmnbbo2l2x", "content": "CVE-2026-54149 - MaxKB MCP tool import validation bypass allows post-authentication remote code execution\nCVE ID : CVE-2026-54149\n \n Published : July 10, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts,...", "creation_timestamp": "2026-07-10T16:58:31.266145Z"} 2026-07-10T16:58:31.266145+00:00