https://vulnerability.circl.lu/sightings/feed 2026-08-06T12:18:34.591519+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5cd136a1-5438-44ac-ba64-4fa8a70de520/export 2026-08-06T12:18:34.611561+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5cd136a1-5438-44ac-ba64-4fa8a70de520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "published-proof-of-concept", "source": "Telegram/Ux0Srfv4G3zHF3MG_EHSnP5GOba0EJzABgxiD6ZSq_lILU0", "content": "", "creation_timestamp": "2026-08-06T07:00:04.112482Z"} 2026-08-06T07:00:04.112482+00:00 https://vulnerability.circl.lu/sighting/cade3cec-46fc-4374-a7b7-8d7e02301f83/export 2026-08-06T12:18:34.613830+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cade3cec-46fc-4374-a7b7-8d7e02301f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54909", "type": "seen", "source": "https://gist.github.com/alon710/402cd5e451c20f1dfc47c5b8f0cf1ddb", "content": "# CVE-2026-54909: CVE-2026-54909: Remote Denial of Service in Pion STUN via Malformed XOR-MAPPED-ADDRESS Attribute\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54909\n\n## Summary\nA remote denial of service vulnerability exists in the pion/stun package before version 3.1.3. A malformed STUN packet containing a short or empty XOR-MAPPED-ADDRESS attribute triggers a runtime slice-bounds panic during parsing, terminating the entire Go process.\n\n## TL;DR\nUnauthenticated malformed STUN packets can trigger a runtime panic in Pion STUN before 3.1.3, causing a denial of service.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-20\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.3\n- **Impact**: Denial of Service\n- **Exploit Status**: poc\n- **CISA KEV Status**: No\n\n## Affected Systems\n\n- Pion STUN (Go module github.com/pion/stun)\n- Pion TURN (transitive dependency)\n- Pion WebRTC (transitive dependency)\n- Applications acting as WebRTC signaling or media servers using the affected libraries\n- **stun**: < 3.1.3 (Fixed in: `3.1.3`)\n\n## Mitigation\n\n- Upgrade github.com/pion/stun to version 3.1.3 or later\n- Filter out malformed STUN packets at the network layer using an IDS/IPS or firewall rule\n- Audit downstream imports (such as pion/turn or pion/webrtc) to ensure they resolve to the fixed version of pion/stun\n\n**Remediation Steps:**\n1. Open the go.mod file of the affected project\n2. Run 'go get github.com/pion/stun/v3@v3.1.3'\n3. Run 'go mod tidy' to update downstream dependencies\n4. Recompile and redeploy the application\n\n## References\n\n- [GitHub Security Advisory GHSA-34rh-wp3j-6cxc](https://github.com/pion/stun/security/advisories/GHSA-34rh-wp3j-6cxc)\n- [Pion STUN Pull Request 278](https://github.com/pion/stun/pull/278)\n- [Fix Commit fa9f074a](https://github.com/pion/stun/commit/fa9f074a33a8059c76c960b1fbee39f308002423)\n- [Pion STUN v3.1.3 Release](https://github.com/pion/stun/releases/tag/v3.1.3)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54909) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T04:31:50.470829Z"} 2026-08-01T04:31:50.470829+00:00 https://vulnerability.circl.lu/sighting/9436600a-0594-4d54-91b7-c6531fa9d38a/export 2026-08-06T12:18:34.613987+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9436600a-0594-4d54-91b7-c6531fa9d38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54908", "type": "seen", "source": "https://gist.github.com/alon710/1bc8c607afec88c321177b4e1f89ad03", "content": "# CVE-2026-54908: CVE-2026-54908: Remote Denial of Service via Out-of-Bounds Read in Pion DTLS Handshake Parsing\n\n> **CVSS Score:** 6.3\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54908\n\n## Summary\nCVE-2026-54908 is a Denial of Service (DoS) vulnerability in the Pion DTLS library, where a malformed ServerKeyExchange message triggers an uncaught out-of-bounds slice read panic during handshake unmarshaling, terminating the hosting application process.\n\n## TL;DR\nAn unauthenticated remote attacker can crash any Go application utilizing Pion DTLS prior to v3.1.4 by sending a crafted 2-byte ServerKeyExchange packet during the DTLS handshake using ECDHE_PSK.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-125 (Out-of-bounds Read)\n- **Attack Vector**: Network\n- **CVSS Score**: 6.3 (Medium)\n- **Exploit Status**: PoC Available\n- **CISA KEV Status**: Not Listed\n- **Ransomware Use**: No\n\n## Affected Systems\n\n- Pion DTLS library\n- **Pion DTLS**: < 3.1.4 (Fixed in: `3.1.4`)\n\n## Mitigation\n\n- Disable ECDHE_PSK cipher suites in the DTLS configuration if upgrading is delayed\n- Deploy container restarts and process monitors to quickly recover from runtime crashes\n- Apply network filtering to allow DTLS handshakes only from trusted source IP ranges where possible\n\n**Remediation Steps:**\n1. Open the Go module file (go.mod) in the affected repository\n2. Update the github.com/pion/dtls dependency definition to version v3.1.4\n3. Execute 'go mod tidy' to synchronize the dependency tree and verify the build succeeds\n4. Redeploy the updated application to staging and production environments\n\n## References\n\n- [NVD CVE-2026-54908](https://nvd.nist.gov/vuln/detail/CVE-2026-54908)\n- [GitHub Security Advisory GHSA-wg4g-wm44-ch5j](https://github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54908) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T03:32:01.381821Z"} 2026-08-01T03:32:01.381821+00:00 https://vulnerability.circl.lu/sighting/b78f011e-22ab-460a-a13d-5486f2d6b292/export 2026-08-06T12:18:34.614113+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b78f011e-22ab-460a-a13d-5486f2d6b292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54909", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7tqoc6v5cvlvv", "content": "CVE-2026-54909 - Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute\nCVE ID : CVE-2026-54909\n \n Published : July 31, 2026, 11:17 p.m. | 31\u00a0minutes ago\n \n Description : pion/stun is a Go implementation of STUN. Prior...", "creation_timestamp": "2026-08-01T00:12:24.162938Z"} 2026-08-01T00:12:24.162938+00:00 https://vulnerability.circl.lu/sighting/c9b182dd-9ff9-464c-9424-6cbb64a8cd20/export 2026-08-06T12:18:34.614219+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c9b182dd-9ff9-464c-9424-6cbb64a8cd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5490", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnurrc5h2a", "content": "\ud83d\udfe0 CVE-2026-5490 - High (8.8)\n\nDriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote atta...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5490/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T05:01:04.952219Z"} 2026-07-30T05:01:04.952219+00:00 https://vulnerability.circl.lu/sighting/e3937d38-bcb3-4b11-a9e8-15a5cda98a9d/export 2026-08-06T12:18:34.614315+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e3937d38-bcb3-4b11-a9e8-15a5cda98a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrstf3bwog24", "content": "CVE-2026-5490 - DriveLock SQL Injection Privilege Escalation Vulnerability\nCVE ID : CVE-2026-5490\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to...", "creation_timestamp": "2026-07-29T21:07:00.282279Z"} 2026-07-29T21:07:00.282279+00:00 https://vulnerability.circl.lu/sighting/1d85e7b2-74bf-4dae-8979-30ac57da5645/export 2026-08-06T12:18:34.614411+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1d85e7b2-74bf-4dae-8979-30ac57da5645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "seen", "source": "Telegram/Ux0Srfv4G3zHF3MG_EHSnP5GOba0EJzABgxiD6ZSq_lILU0", "content": "", "creation_timestamp": "2026-07-26T00:00:44.966566Z"} 2026-07-26T00:00:44.966566+00:00 https://vulnerability.circl.lu/sighting/d2e50f1c-2783-47c0-ae40-3329da2a5693/export 2026-08-06T12:18:34.614502+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d2e50f1c-2783-47c0-ae40-3329da2a5693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "published-proof-of-concept", "source": "Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4", "content": "", "creation_timestamp": "2026-07-26T00:00:35.937628Z"} 2026-07-26T00:00:35.937628+00:00 https://vulnerability.circl.lu/sighting/b7a26165-469d-40cf-bdf8-c6a2fbcbd926/export 2026-08-06T12:18:34.614596+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b7a26165-469d-40cf-bdf8-c6a2fbcbd926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "seen", "source": "Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4", "content": "", "creation_timestamp": "2026-07-25T18:00:04.183932Z"} 2026-07-25T18:00:04.183932+00:00 https://vulnerability.circl.lu/sighting/5f63f1ed-4511-4edb-853d-686220d8bf90/export 2026-08-06T12:18:34.614685+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5f63f1ed-4511-4edb-853d-686220d8bf90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54900", "type": "seen", "source": "Telegram/Ux0Srfv4G3zHF3MG_EHSnP5GOba0EJzABgxiD6ZSq_lILU0", "content": "", "creation_timestamp": "2026-07-25T15:00:20.751088Z"} 2026-07-25T15:00:20.751088+00:00