https://vulnerability.circl.lu/sightings/feed 2026-09-13T23:43:01.594677+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/de989526-1cd6-4bd4-bf51-75b7284559f8/export 2026-09-13T23:43:01.614966+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "de989526-1cd6-4bd4-bf51-75b7284559f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muztcgp4a32p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85672: zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derive\u2026\nCVSS 9.8 \u00b7 EPSS 1.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-85672\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T20:09:44.631399Z"} 2026-09-08T20:09:44.631399+00:00 https://vulnerability.circl.lu/sighting/bdc47782-7552-48aa-8aed-5cff8fbee463/export 2026-09-13T23:43:01.619834+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bdc47782-7552-48aa-8aed-5cff8fbee463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvuj5bc2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85672: zerox 1.1.20 OS Command Injection via Document URL File Extension\nCVSS 9.8 \u00b7 EPSS 1.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-85672\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:09:02.041514Z"} 2026-09-08T19:09:02.041514+00:00 https://vulnerability.circl.lu/sighting/811c7195-3ae4-4ce7-ac3f-44eeaa807b5f/export 2026-09-13T23:43:01.619995+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "811c7195-3ae4-4ce7-ac3f-44eeaa807b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphxgfjop2l", "content": "CVE-2026-85672 - zerox\nThe zerox version 1.1.20 program can be tricked into executing any command on the server when it processes a specially crafted document link. This could let an attacker take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zerox #getomniai #CVE #infosec", "creation_timestamp": "2026-09-04T17:20:06.567914Z"} 2026-09-04T17:20:06.567914+00:00 https://vulnerability.circl.lu/sighting/3690b6ad-f012-418b-bc27-7716b6ed2ca2/export 2026-09-13T23:43:01.620106+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3690b6ad-f012-418b-bc27-7716b6ed2ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdx3v56522", "content": "\ud83d\udea8 CVE-2026-85672 \u2014 CVSS 9.3 CRITICAL\n\nzerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the tempor...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85672\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:20.649055Z"} 2026-09-04T16:08:20.649055+00:00