https://vulnerability.circl.lu/sightings/feed 2026-09-15T19:53:52.961965+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b5a8e582-8c2e-4dd3-9be9-9503ee432464/export 2026-09-15T19:53:52.992535+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b5a8e582-8c2e-4dd3-9be9-9503ee432464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90605", "type": "seen", "source": "https://gist.github.com/ichintu/2ff9a94c1eba9b19d315367193583048", "content": "This threat intelligence update covers two main items:\n\n1. **Totolink A3002MU Critical Vulnerabilities:** Two remotely exploitable buffer overflow flaws (CVSS 9.9) affect the router's `boa` web server component (Firmware Hh-B20211125.1046). CVE-2026-90607 targets the `formNewSchedule` function via the `submit-url` argument, while CVE-2026-90605 targets `formFilter` via `ip6addr`. Both have publicly available exploits.\n\n2. **EchelonGraphBot Overview:** A transparent public web crawler that scans websites for security configurations (HTTPS, TLS versions, certificates, headers, cookies). All collected data is freely viewable, and site owners can opt out using standard `robots.txt` directives or a DNS TXT record. The developer maintains open documentation and supports user feedback.", "creation_timestamp": "2026-09-14T04:03:34.078964Z"} 2026-09-14T04:03:34.078964+00:00 https://vulnerability.circl.lu/sighting/df5eb19b-86c3-41ff-be93-523f66c77623/export 2026-09-15T19:53:52.994531+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "df5eb19b-86c3-41ff-be93-523f66c77623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90605", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgvw76tcm2m", "content": "\ud83d\udd34 CVE-2026-90605 - Critical (9.9)\n\nA weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90605/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-14T01:01:16.050687Z"} 2026-09-14T01:01:16.050687+00:00 https://vulnerability.circl.lu/sighting/ef28c279-465f-4972-a0d0-821da9aaad03/export 2026-09-15T19:53:52.994683+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ef28c279-465f-4972-a0d0-821da9aaad03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvgsj3hc6v2j", "content": "CVE-2026-90605 - a3002mu\nThe firmware on the Totolink A3002MU router has a flaw in its web interface that can be triggered by sending a specially crafted IPv6 address. An attacker from the network can cause\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#a3002mu #totolink #CVE #infosec", "creation_timestamp": "2026-09-14T00:00:11.582001Z"} 2026-09-14T00:00:11.582001+00:00