https://vulnerability.circl.lu/sightings/feed 2026-08-11T07:43:41.461639+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/526edb73-65b7-4918-9b65-6e6b05a5a3a4/export 2026-08-11T07:43:41.486352+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "526edb73-65b7-4918-9b65-6e6b05a5a3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63732", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdwwpvlti2c", "content": "\ud83d\udd34 CVE-2026-63732 - Critical (9.9)\n\n9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default passwor...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63732/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T23:00:37.952148Z"} 2026-07-23T23:00:37.952148+00:00 https://vulnerability.circl.lu/sighting/160efd03-c7e4-49f7-86fc-22e85a767dd1/export 2026-08-11T07:43:41.488585+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "160efd03-c7e4-49f7-86fc-22e85a767dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63732", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdurt2jik2k", "content": "CVE-2026-63732 - 9router\nThe 9router software has a default password that can be used by attackers to access the system. This allows them to run malicious code on the host operating system. Update to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#9router #decolua #CVE #infosec", "creation_timestamp": "2026-07-23T22:22:06.103191Z"} 2026-07-23T22:22:06.103191+00:00 https://vulnerability.circl.lu/sighting/e7730340-f1f2-44f7-8a33-024bd19c43de/export 2026-08-11T07:43:41.488674+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e7730340-f1f2-44f7-8a33-024bd19c43de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63739", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrcgomyp6o2s", "content": "\ud83d\udccc CVE-2026-63739 - SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OW... https://www.cyberhub.blog/cves/CVE-2026-63739", "creation_timestamp": "2026-07-23T08:37:06.715154Z"} 2026-07-23T08:37:06.715154+00:00 https://vulnerability.circl.lu/sighting/44aba214-6864-48b8-aee5-629d2c1e8bb8/export 2026-08-11T07:43:41.488743+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "44aba214-6864-48b8-aee5-629d2c1e8bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63735", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrceyz5wch2s", "content": "\ud83d\udccc CVE-2026-63735 - SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticated users to invoke endpoints i... https://www.cyberhub.blog/cves/CVE-2026-63735", "creation_timestamp": "2026-07-23T08:07:08.245498Z"} 2026-07-23T08:07:08.245498+00:00 https://vulnerability.circl.lu/sighting/55ef4062-9578-496b-80ab-580e41f6890c/export 2026-08-11T07:43:41.488812+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "55ef4062-9578-496b-80ab-580e41f6890c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116956203969941945", "content": "CVE-2026-63731 - SSRF in HyperDX before 2.31.0. Authenticated users can probe internal services and access cloud metadata. CVSS 7.7. No patch available yet. Monitor for updates and restrict network access. #CVE #infosec #HyperDX\nhttps://www.valtersit.com/cve/CVE-2026-63731/", "creation_timestamp": "2026-07-21T05:00:47.698803Z"} 2026-07-21T05:00:47.698803+00:00 https://vulnerability.circl.lu/sighting/cfefc08d-f587-42f3-931b-5adce63df6e9/export 2026-08-11T07:43:41.488880+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cfefc08d-f587-42f3-931b-5adce63df6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr4znx6h572j", "content": "CVE-2026-63731 - SSRF in HyperDX before 2.31.0. Authenticated users can probe internal services and access cloud metadata. CVSS 7.7. No patch available yet. Monitor for updates and restrict network access. #CVE #infosec #HyperDX\n\nhttps://www.valtersit.com/cve/CVE-2026-63731/", "creation_timestamp": "2026-07-21T05:00:46.389162Z"} 2026-07-21T05:00:46.389162+00:00 https://vulnerability.circl.lu/sighting/bc3900ee-b54a-4edd-a917-41c92e523d29/export 2026-08-11T07:43:41.488947+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bc3900ee-b54a-4edd-a917-41c92e523d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43iedw2s23", "content": "\ud83d\udfe0 CVE-2026-63731 - High (7.7)\n\nHyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authentica...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63731/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T20:00:46.645672Z"} 2026-07-20T20:00:46.645672+00:00 https://vulnerability.circl.lu/sighting/a133e9a0-d074-4bb0-a4c4-1a18febc6564/export 2026-08-11T07:43:41.489011+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a133e9a0-d074-4bb0-a4c4-1a18febc6564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3fpfnebr2e", "content": "CVE-2026-63739 - SurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZER\nCVE ID : CVE-2026-63739\n \n Published : July 20, 2026, 12:19 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER...", "creation_timestamp": "2026-07-20T13:31:00.238504Z"} 2026-07-20T13:31:00.238504+00:00 https://vulnerability.circl.lu/sighting/83333e83-1987-454d-9140-f879796d24ac/export 2026-08-11T07:43:41.489075+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "83333e83-1987-454d-9140-f879796d24ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63735", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3ffzotfz2x", "content": "CVE-2026-63735 - SurrealDB before 3.2.0 Authentication Bypass via Custom API\nCVE ID : CVE-2026-63735\n \n Published : July 20, 2026, 12:19 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API ro...", "creation_timestamp": "2026-07-20T13:25:46.054533Z"} 2026-07-20T13:25:46.054533+00:00