https://vulnerability.circl.lu/sightings/feed 2026-10-11T06:48:07.920753+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bf72566e-3fe1-4c75-9d04-cc61b8854b41/export 2026-10-11T06:48:07.932616+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bf72566e-3fe1-4c75-9d04-cc61b8854b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91107", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx6lulzl2n2x", "content": "CVE-2026-91107: CRITICAL in openSIS-Classic 9.3. Teacher-role users can reset any staff password via auth bypass. Audit password changes, restrict permissions until patch. https://radar.offseq.com/threat/cve-2026-91107-cwe-639-authorization-bypass-through-user-controlled-key-in-os4ed-opensis-clas...", "creation_timestamp": "2026-10-06T04:30:27.987590Z"} 2026-10-06T04:30:27.987590+00:00 https://vulnerability.circl.lu/sighting/4d39f153-ecb8-4f28-8fe7-e0a1550dcc36/export 2026-10-11T06:48:07.934002+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4d39f153-ecb8-4f28-8fe7-e0a1550dcc36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91107", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117392082453538163", "content": "CVE-2026-91107: CRITICAL auth bypass in openSIS-Classic 9.3 \ud83d\uded1. Teacher-role users can reset passwords of any staff via the staff_id parameter. No patch yet \u2014 restrict permissions & monitor password changes. https://radar.offseq.com/threat/cve-2026-91107-cwe-639-authorization-bypass-through-user-controlled-key-in-os4ed-opensis-classic-f7eb55a7a5a0f52d #OffSeq #Vulnerability #openSIS #CVE202691107", "creation_timestamp": "2026-10-06T04:30:24.483722Z"} 2026-10-06T04:30:24.483722+00:00 https://vulnerability.circl.lu/sighting/86a2ff9c-7c40-40b6-a374-4fa3dad525cf/export 2026-10-11T06:48:07.934105+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "86a2ff9c-7c40-40b6-a374-4fa3dad525cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91107", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx657eapwp2h", "content": "\ud83d\udea8 CVE-2026-91107 \u2014 CVSS 9.3 CRITICAL\n\nopenSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary sta...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-91107\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T00:08:00.972609Z"} 2026-10-06T00:08:00.972609+00:00