https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 15:43:12 +0000 https://vulnerability.circl.lu/sighting/ddcd68f7-a2f1-49ad-b4ca-3108e5e0718e/export {"uuid": "ddcd68f7-a2f1-49ad-b4ca-3108e5e0718e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h2zf3rzuygpfi", "content": "CVE-2026-97335 - Incorrect authorization in LXD storage volume API allows reading volumes from other projects\nCVE ID : CVE-2026-97335\n \n Published : 28. September 2026 14:17 | 15\u00a0Minuten ago\n \n Description : Incorrect authorization in the custom storage volume creation endpoin...", "creation_timestamp": "2026-09-28T15:34:29.090626Z"} {"uuid": "ddcd68f7-a2f1-49ad-b4ca-3108e5e0718e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-97335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h2zf3rzuygpfi", "content": "CVE-2026-97335 - Incorrect authorization in LXD storage volume API allows reading volumes from other projects\nCVE ID : CVE-2026-97335\n \n Published : 28. September 2026 14:17 | 15\u00a0Minuten ago\n \n Description : Incorrect authorization in the custom storage volume creation endpoin...", "creation_timestamp": "2026-09-28T15:34:29.090626Z"} https://vulnerability.circl.lu/sighting/ddcd68f7-a2f1-49ad-b4ca-3108e5e0718e/export Mon, 28 Sep 2026 15:34:29 +0000 https://vulnerability.circl.lu/sighting/6424639c-cdc0-4f67-b5de-0edfb88a7781/export {"uuid": "6424639c-cdc0-4f67-b5de-0edfb88a7781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100833", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk4grsumi2c", "content": "\ud83d\udfe0 CVE-2026-100833 - High (8.2)\n\nContrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100833/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T01:01:03.053256Z"} {"uuid": "6424639c-cdc0-4f67-b5de-0edfb88a7781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100833", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk4grsumi2c", "content": "\ud83d\udfe0 CVE-2026-100833 - High (8.2)\n\nContrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100833/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T01:01:03.053256Z"} https://vulnerability.circl.lu/sighting/6424639c-cdc0-4f67-b5de-0edfb88a7781/export Mon, 28 Sep 2026 01:01:03 +0000 https://vulnerability.circl.lu/sighting/a753b351-a085-441a-b5b3-0898634a1a61/export {"uuid": "a753b351-a085-441a-b5b3-0898634a1a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54533", "type": "published-proof-of-concept", "source": "Telegram/V6WsEYC19zqLWLlPrT79w3lT0V9EeVfsqgldKLADaf1PSOM", "content": "", "creation_timestamp": "2026-09-27T21:04:13.000000Z"} {"uuid": "a753b351-a085-441a-b5b3-0898634a1a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54533", "type": "published-proof-of-concept", "source": "Telegram/V6WsEYC19zqLWLlPrT79w3lT0V9EeVfsqgldKLADaf1PSOM", "content": "", "creation_timestamp": "2026-09-27T21:04:13.000000Z"} https://vulnerability.circl.lu/sighting/a753b351-a085-441a-b5b3-0898634a1a61/export Sun, 27 Sep 2026 21:04:13 +0000 https://vulnerability.circl.lu/sighting/107840f2-81a6-483a-8322-f2b363d1d8df/export {"uuid": "107840f2-81a6-483a-8322-f2b363d1d8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54533", "type": "seen", "source": "Telegram/V6WsEYC19zqLWLlPrT79w3lT0V9EeVfsqgldKLADaf1PSOM", "content": "", "creation_timestamp": "2026-09-27T21:04:13.000000Z"} {"uuid": "107840f2-81a6-483a-8322-f2b363d1d8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54533", "type": "seen", "source": "Telegram/V6WsEYC19zqLWLlPrT79w3lT0V9EeVfsqgldKLADaf1PSOM", "content": "", "creation_timestamp": "2026-09-27T21:04:13.000000Z"} https://vulnerability.circl.lu/sighting/107840f2-81a6-483a-8322-f2b363d1d8df/export Sun, 27 Sep 2026 21:04:13 +0000 https://vulnerability.circl.lu/sighting/6e20cc9e-1296-4f27-9453-9d1e1f846117/export {"uuid": "6e20cc9e-1296-4f27-9453-9d1e1f846117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jwfnyyuo6vm25", "content": "CVE-2026-101033 - KitchenOwl through 0.7.10 IDOR via unchecked category ID\nCVE ID : CVE-2026-101033\n \n Published : Sept. 27, 2026, 1:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household i...", "creation_timestamp": "2026-09-27T15:07:09.666534Z"} {"uuid": "6e20cc9e-1296-4f27-9453-9d1e1f846117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jwfnyyuo6vm25", "content": "CVE-2026-101033 - KitchenOwl through 0.7.10 IDOR via unchecked category ID\nCVE ID : CVE-2026-101033\n \n Published : Sept. 27, 2026, 1:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household i...", "creation_timestamp": "2026-09-27T15:07:09.666534Z"} https://vulnerability.circl.lu/sighting/6e20cc9e-1296-4f27-9453-9d1e1f846117/export Sun, 27 Sep 2026 15:07:09 +0000 https://vulnerability.circl.lu/sighting/ef1fb4a2-9925-44ad-8516-d08e0d594b38/export {"uuid": "ef1fb4a2-9925-44ad-8516-d08e0d594b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93302", "type": "seen", "source": "https://gist.github.com/ichintu/295c47a4fdd1542fe1dda3872969c6bd", "content": "This daily threat intelligence update covers emerging AI security practices and critical software vulnerabilities:\n\n\u2022 **AI Guardrails:** Teams are developing adaptable, general-purpose proxy-layer frameworks to detect LLM threats like prompt injection and jailbreaks. Implementation faces a trade-off between evaluation metrics and documented capabilities, particularly regarding jailbreak detection and language support.\n\n\u2022 **wolfSSL (3 HIGH/8.3 CVEs):** Multiple flaws undermine TLS/DTLS certificate verification and authentication. Issues include ignoring public keys in trusted peer validation (CVE-2026-93302), accepting unsolicited RawPublicKey certificates (CVE-2026-89136), and incorrectly validating OCSP stapling issuers (CVE-2026-89102), all enabling authentication bypasses and certificate forgery.\n\n\u2022 **hMailServer (CRITICAL/9.8):** An Eval Injection vulnerability (CVE-2026-100741) allows unauthenticated remote code execution via JScript event scripting when exploited through specific SMTP/POP3/IMAP login sequences.\n\n\u2022 **Citrix NetScaler:** Two unpatched zero-day RCE flaws are actively exploited in the wild, prompting some administrators to preemptively take affected appliances offline.", "creation_timestamp": "2026-09-27T12:00:40.000000Z"} {"uuid": "ef1fb4a2-9925-44ad-8516-d08e0d594b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93302", "type": "seen", "source": "https://gist.github.com/ichintu/295c47a4fdd1542fe1dda3872969c6bd", "content": "This daily threat intelligence update covers emerging AI security practices and critical software vulnerabilities:\n\n\u2022 **AI Guardrails:** Teams are developing adaptable, general-purpose proxy-layer frameworks to detect LLM threats like prompt injection and jailbreaks. Implementation faces a trade-off between evaluation metrics and documented capabilities, particularly regarding jailbreak detection and language support.\n\n\u2022 **wolfSSL (3 HIGH/8.3 CVEs):** Multiple flaws undermine TLS/DTLS certificate verification and authentication. Issues include ignoring public keys in trusted peer validation (CVE-2026-93302), accepting unsolicited RawPublicKey certificates (CVE-2026-89136), and incorrectly validating OCSP stapling issuers (CVE-2026-89102), all enabling authentication bypasses and certificate forgery.\n\n\u2022 **hMailServer (CRITICAL/9.8):** An Eval Injection vulnerability (CVE-2026-100741) allows unauthenticated remote code execution via JScript event scripting when exploited through specific SMTP/POP3/IMAP login sequences.\n\n\u2022 **Citrix NetScaler:** Two unpatched zero-day RCE flaws are actively exploited in the wild, prompting some administrators to preemptively take affected appliances offline.", "creation_timestamp": "2026-09-27T12:00:40.000000Z"} https://vulnerability.circl.lu/sighting/ef1fb4a2-9925-44ad-8516-d08e0d594b38/export Sun, 27 Sep 2026 12:00:40 +0000 https://vulnerability.circl.lu/sighting/ca25f013-74e7-4b3c-8400-7d4f42448cd0/export {"uuid": "ca25f013-74e7-4b3c-8400-7d4f42448cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93302", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4q4746ucfgq7e", "content": "CVE-2026-93302 - Trusted peer certificate match ignores public key, allowing forged CA clones\nCVE ID : CVE-2026-93302\n \n Published : Sept. 27, 2026, 9:07 a.m. | 39\u00a0minutes ago\n \n Description : MatchTrustedPeer ignores the public key used, leading to forged CA clones passing ve...", "creation_timestamp": "2026-09-27T10:22:08.373323Z"} {"uuid": "ca25f013-74e7-4b3c-8400-7d4f42448cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93302", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4q4746ucfgq7e", "content": "CVE-2026-93302 - Trusted peer certificate match ignores public key, allowing forged CA clones\nCVE ID : CVE-2026-93302\n \n Published : Sept. 27, 2026, 9:07 a.m. | 39\u00a0minutes ago\n \n Description : MatchTrustedPeer ignores the public key used, leading to forged CA clones passing ve...", "creation_timestamp": "2026-09-27T10:22:08.373323Z"} https://vulnerability.circl.lu/sighting/ca25f013-74e7-4b3c-8400-7d4f42448cd0/export Sun, 27 Sep 2026 10:22:08 +0000 https://vulnerability.circl.lu/sighting/6ebb49f4-66a1-474e-b85d-6b975b4c94ca/export {"uuid": "6ebb49f4-66a1-474e-b85d-6b975b4c94ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9733", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-27)", "content": "", "creation_timestamp": "2026-09-27T00:00:00.000000Z"} {"uuid": "6ebb49f4-66a1-474e-b85d-6b975b4c94ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-9733", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-27)", "content": "", "creation_timestamp": "2026-09-27T00:00:00.000000Z"} https://vulnerability.circl.lu/sighting/6ebb49f4-66a1-474e-b85d-6b975b4c94ca/export Sun, 27 Sep 2026 00:00:00 +0000 https://vulnerability.circl.lu/sighting/24fec866-4fae-4ef7-822f-58841224e841/export {"uuid": "24fec866-4fae-4ef7-822f-58841224e841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-3396", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-27)", "content": "", "creation_timestamp": "2026-09-27T00:00:00.000000Z"} {"uuid": "24fec866-4fae-4ef7-822f-58841224e841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-3396", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-27)", "content": "", "creation_timestamp": "2026-09-27T00:00:00.000000Z"} https://vulnerability.circl.lu/sighting/24fec866-4fae-4ef7-822f-58841224e841/export Sun, 27 Sep 2026 00:00:00 +0000 https://vulnerability.circl.lu/sighting/1a2b0a5c-c6ae-4bc4-9877-5bf3b1d41bc3/export {"uuid": "1a2b0a5c-c6ae-4bc4-9877-5bf3b1d41bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23347", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-27)", "content": "", "creation_timestamp": "2026-09-27T00:00:00.000000Z"} {"uuid": "1a2b0a5c-c6ae-4bc4-9877-5bf3b1d41bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23347", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-27)", "content": "", "creation_timestamp": "2026-09-27T00:00:00.000000Z"} https://vulnerability.circl.lu/sighting/1a2b0a5c-c6ae-4bc4-9877-5bf3b1d41bc3/export Sun, 27 Sep 2026 00:00:00 +0000