https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 14 Sep 2026 21:24:51 +0000 https://vulnerability.circl.lu/sighting/c93812c4-fa5d-42f0-82ee-715f1ba2705b/export {"uuid": "c93812c4-fa5d-42f0-82ee-715f1ba2705b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-33697", "type": "seen", "source": "https://datatracker.ietf.org/doc/draft-intra-handshake-fail/", "content": "", "creation_timestamp": "2026-08-23T10:36:48.716798Z"} {"uuid": "c93812c4-fa5d-42f0-82ee-715f1ba2705b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-33697", "type": "seen", "source": "https://datatracker.ietf.org/doc/draft-intra-handshake-fail/", "content": "", "creation_timestamp": "2026-08-23T10:36:48.716798Z"} https://vulnerability.circl.lu/sighting/c93812c4-fa5d-42f0-82ee-715f1ba2705b/export Sun, 23 Aug 2026 10:36:48 +0000 https://vulnerability.circl.lu/sighting/97cad34b-db97-41f7-a8f6-07466c0ccdb2/export {"uuid": "97cad34b-db97-41f7-a8f6-07466c0ccdb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-33697", "type": "seen", "source": "https://www.researchgate.net/publication/408219182_Intra-handshakefail_CVE-2026-33697_High-severity_CVE_in_Attested_TLS", "content": "", "creation_timestamp": "2026-08-23T10:36:11.217125Z"} {"uuid": "97cad34b-db97-41f7-a8f6-07466c0ccdb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-33697", "type": "seen", "source": "https://www.researchgate.net/publication/408219182_Intra-handshakefail_CVE-2026-33697_High-severity_CVE_in_Attested_TLS", "content": "", "creation_timestamp": "2026-08-23T10:36:11.217125Z"} https://vulnerability.circl.lu/sighting/97cad34b-db97-41f7-a8f6-07466c0ccdb2/export Sun, 23 Aug 2026 10:36:11 +0000 https://vulnerability.circl.lu/sighting/646ed286-d7f1-4b5c-974a-d30b95383356/export {"uuid": "646ed286-d7f1-4b5c-974a-d30b95383356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33691", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2545", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability\n\nThe US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.\n\nTracked as CVE-2026-8037 (CVSS score of 9.6), the flaw is described as an OS command injection that could be exploited without authentication for remote code execution (RCE).\n\nAccording to Progress\u2019 advisory, a remote attacker could exploit the bug through unsanitized API inputs to execute arbitrary commands on the LoadMaster appliance.\n\nDisclosed on June 4 alongside CVE-2026-33691, the security defect also affects ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.", "creation_timestamp": "2026-08-23T00:00:46.990025Z"} {"uuid": "646ed286-d7f1-4b5c-974a-d30b95383356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33691", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2545", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability\n\nThe US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.\n\nTracked as CVE-2026-8037 (CVSS score of 9.6), the flaw is described as an OS command injection that could be exploited without authentication for remote code execution (RCE).\n\nAccording to Progress\u2019 advisory, a remote attacker could exploit the bug through unsanitized API inputs to execute arbitrary commands on the LoadMaster appliance.\n\nDisclosed on June 4 alongside CVE-2026-33691, the security defect also affects ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.", "creation_timestamp": "2026-08-23T00:00:46.990025Z"} https://vulnerability.circl.lu/sighting/646ed286-d7f1-4b5c-974a-d30b95383356/export Sun, 23 Aug 2026 00:00:46 +0000 https://vulnerability.circl.lu/sighting/a4ad279a-3bad-42a2-92ea-484d88b42b71/export {"uuid": "a4ad279a-3bad-42a2-92ea-484d88b42b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33691", "type": "seen", "source": "https://t.me/pphm_HackerNews/2545", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability\n\nThe US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.\n\nTracked as CVE-2026-8037 (CVSS score of 9.6), the flaw is described as an OS command injection that could be exploited without authentication for remote code execution (RCE).\n\nAccording to Progress\u2019 advisory, a remote attacker could exploit the bug through unsanitized API inputs to execute arbitrary commands on the LoadMaster appliance.\n\nDisclosed on June 4 alongside CVE-2026-33691, the security defect also affects ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.", "creation_timestamp": "2026-08-22T00:00:10.296815Z"} {"uuid": "a4ad279a-3bad-42a2-92ea-484d88b42b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33691", "type": "seen", "source": "https://t.me/pphm_HackerNews/2545", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability\n\nThe US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.\n\nTracked as CVE-2026-8037 (CVSS score of 9.6), the flaw is described as an OS command injection that could be exploited without authentication for remote code execution (RCE).\n\nAccording to Progress\u2019 advisory, a remote attacker could exploit the bug through unsanitized API inputs to execute arbitrary commands on the LoadMaster appliance.\n\nDisclosed on June 4 alongside CVE-2026-33691, the security defect also affects ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.", "creation_timestamp": "2026-08-22T00:00:10.296815Z"} https://vulnerability.circl.lu/sighting/a4ad279a-3bad-42a2-92ea-484d88b42b71/export Sat, 22 Aug 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/040e4cea-066d-4b0e-a5cf-1ca3e3473250/export {"uuid": "040e4cea-066d-4b0e-a5cf-1ca3e3473250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33691", "type": "seen", "source": "https://t.me/pphm_HackerNews/2545", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability\n\nThe US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.\n\nTracked as CVE-2026-8037 (CVSS score of 9.6), the flaw is described as an OS command injection that could be exploited without authentication for remote code execution (RCE).\n\nAccording to Progress\u2019 advisory, a remote attacker could exploit the bug through unsanitized API inputs to execute arbitrary commands on the LoadMaster appliance.\n\nDisclosed on June 4 alongside CVE-2026-33691, the security defect also affects ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.", "creation_timestamp": "2026-08-21T23:00:06.588616Z"} {"uuid": "040e4cea-066d-4b0e-a5cf-1ca3e3473250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33691", "type": "seen", "source": "https://t.me/pphm_HackerNews/2545", "content": "\ud83d\udd34 CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability\n\nThe US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.\n\nTracked as CVE-2026-8037 (CVSS score of 9.6), the flaw is described as an OS command injection that could be exploited without authentication for remote code execution (RCE).\n\nAccording to Progress\u2019 advisory, a remote attacker could exploit the bug through unsanitized API inputs to execute arbitrary commands on the LoadMaster appliance.\n\nDisclosed on June 4 alongside CVE-2026-33691, the security defect also affects ECS Connection Manager, Connection Manager for ObjectScale, and MOVEit WAF.", "creation_timestamp": "2026-08-21T23:00:06.588616Z"} https://vulnerability.circl.lu/sighting/040e4cea-066d-4b0e-a5cf-1ca3e3473250/export Fri, 21 Aug 2026 23:00:06 +0000 https://vulnerability.circl.lu/sighting/450e394c-2957-49af-8567-5d057291694b/export {"uuid": "450e394c-2957-49af-8567-5d057291694b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-33696", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mth7rggx2j2u", "content": "\ud83d\udccc CVE-2026-33696: Prototype Pollution in n8n Leads to Remote Code Execution https://www.cyberhub.blog/article/30736-cve-2026-33696-prototype-pollution-in-n8n-leads-to-remote-code-execution", "creation_timestamp": "2026-08-19T17:07:06.118432Z"} {"uuid": "450e394c-2957-49af-8567-5d057291694b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-33696", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mth7rggx2j2u", "content": "\ud83d\udccc CVE-2026-33696: Prototype Pollution in n8n Leads to Remote Code Execution https://www.cyberhub.blog/article/30736-cve-2026-33696-prototype-pollution-in-n8n-leads-to-remote-code-execution", "creation_timestamp": "2026-08-19T17:07:06.118432Z"} https://vulnerability.circl.lu/sighting/450e394c-2957-49af-8567-5d057291694b/export Wed, 19 Aug 2026 17:07:06 +0000 https://vulnerability.circl.lu/sighting/855e3bcc-3cc5-4e87-a88a-6abdbb0c8e86/export {"uuid": "855e3bcc-3cc5-4e87-a88a-6abdbb0c8e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33696", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtbmsodzwr2o", "content": "CVE-2026-33696 is trending. Hype score 5, currently #8 on cvemon.\n\nn8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.27, an authenticated user with permission to create or modify workflows could exploit a\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-33696", "creation_timestamp": "2026-08-17T11:44:28.038771Z"} {"uuid": "855e3bcc-3cc5-4e87-a88a-6abdbb0c8e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33696", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtbmsodzwr2o", "content": "CVE-2026-33696 is trending. Hype score 5, currently #8 on cvemon.\n\nn8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.27, an authenticated user with permission to create or modify workflows could exploit a\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-33696", "creation_timestamp": "2026-08-17T11:44:28.038771Z"} https://vulnerability.circl.lu/sighting/855e3bcc-3cc5-4e87-a88a-6abdbb0c8e86/export Mon, 17 Aug 2026 11:44:28 +0000 https://vulnerability.circl.lu/sighting/b3cf93c8-76d7-43d5-a23f-3da6172ca1fb/export {"uuid": "b3cf93c8-76d7-43d5-a23f-3da6172ca1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33696", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtaoo6jumm2z", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 40 interactions\nCVE-2026-59310: 37 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-33696: 5 interactions\nCVE-2026-17581: 3 interactions\nCVE-2026-14498: 2 interactions\n", "creation_timestamp": "2026-08-17T02:45:05.974255Z"} {"uuid": "b3cf93c8-76d7-43d5-a23f-3da6172ca1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33696", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtaoo6jumm2z", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 40 interactions\nCVE-2026-59310: 37 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-33696: 5 interactions\nCVE-2026-17581: 3 interactions\nCVE-2026-14498: 2 interactions\n", "creation_timestamp": "2026-08-17T02:45:05.974255Z"} https://vulnerability.circl.lu/sighting/b3cf93c8-76d7-43d5-a23f-3da6172ca1fb/export Mon, 17 Aug 2026 02:45:05 +0000 https://vulnerability.circl.lu/sighting/fdb8fc0c-8063-4bd9-bf9a-fda6eba1deb6/export {"uuid": "fdb8fc0c-8063-4bd9-bf9a-fda6eba1deb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33696", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mt7cxz4yck2e", "content": "CVE-2026-33696: From a Schema Name to RCE in n8n", "creation_timestamp": "2026-08-16T13:43:10.871251Z"} {"uuid": "fdb8fc0c-8063-4bd9-bf9a-fda6eba1deb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33696", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mt7cxz4yck2e", "content": "CVE-2026-33696: From a Schema Name to RCE in n8n", "creation_timestamp": "2026-08-16T13:43:10.871251Z"} https://vulnerability.circl.lu/sighting/fdb8fc0c-8063-4bd9-bf9a-fda6eba1deb6/export Sun, 16 Aug 2026 13:43:10 +0000 https://vulnerability.circl.lu/sighting/4fd05d74-ed55-4604-a89d-42980c0dffe5/export {"uuid": "4fd05d74-ed55-4604-a89d-42980c0dffe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33697", "type": "published-proof-of-concept", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "content": "", "creation_timestamp": "2026-07-23T00:00:09.550445Z"} {"uuid": "4fd05d74-ed55-4604-a89d-42980c0dffe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33697", "type": "published-proof-of-concept", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "content": "", "creation_timestamp": "2026-07-23T00:00:09.550445Z"} https://vulnerability.circl.lu/sighting/4fd05d74-ed55-4604-a89d-42980c0dffe5/export Thu, 23 Jul 2026 00:00:09 +0000