https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 14 Jul 2026 20:37:07 +0000 https://vulnerability.circl.lu/sighting/2fe31851-d00b-4b6b-a9f2-0a90546fcdd3/export {"uuid": "2fe31851-d00b-4b6b-a9f2-0a90546fcdd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://t.me/GithubRedTeam/92636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40473\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:16:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:10.029821Z"} {"uuid": "2fe31851-d00b-4b6b-a9f2-0a90546fcdd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://t.me/GithubRedTeam/92636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40473\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:16:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:10.029821Z"} https://vulnerability.circl.lu/sighting/2fe31851-d00b-4b6b-a9f2-0a90546fcdd3/export Tue, 14 Jul 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/0f031d20-6802-4bb3-80b5-9240aa8867ef/export {"uuid": "0f031d20-6802-4bb3-80b5-9240aa8867ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://t.me/GithubRedTeam/92636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40473\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:16:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.675865Z"} {"uuid": "0f031d20-6802-4bb3-80b5-9240aa8867ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://t.me/GithubRedTeam/92636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40473\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:16:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.675865Z"} https://vulnerability.circl.lu/sighting/0f031d20-6802-4bb3-80b5-9240aa8867ef/export Mon, 13 Jul 2026 22:00:06 +0000 https://vulnerability.circl.lu/sighting/a1c1da05-1389-4cb8-beb1-b377e9d26dae/export {"uuid": "a1c1da05-1389-4cb8-beb1-b377e9d26dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/foojay.io/post/3mm4iszh7u224", "content": "New post from @brianvermeer.nl on Foojay: A practical look at the Thymeleaf template injection vulnerability (CVE-2026-40478) and why understanding the context matters more than the panic.\n\nfoojay.io/today/dont-p...\n\n#Java #Security #Thymeleaf", "creation_timestamp": "2026-05-18T08:53:27.990287Z"} {"uuid": "a1c1da05-1389-4cb8-beb1-b377e9d26dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/foojay.io/post/3mm4iszh7u224", "content": "New post from @brianvermeer.nl on Foojay: A practical look at the Thymeleaf template injection vulnerability (CVE-2026-40478) and why understanding the context matters more than the panic.\n\nfoojay.io/today/dont-p...\n\n#Java #Security #Thymeleaf", "creation_timestamp": "2026-05-18T08:53:27.990287Z"} https://vulnerability.circl.lu/sighting/a1c1da05-1389-4cb8-beb1-b377e9d26dae/export Mon, 18 May 2026 08:53:27 +0000 https://vulnerability.circl.lu/sighting/114fa46a-92cf-42b6-ae21-6868d8e50b75/export {"uuid": "114fa46a-92cf-42b6-ae21-6868d8e50b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4047", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mkompalp7h2d", "content": "Hackers exploited two auth bypass flaws (CVE-2026-3965 & CVE-2026-4047) in Qinglong task scheduler to deploy cryptominers via RCE starting Feb 7. Fix applied after initial mitigation proved insufficient. #Qinglong #RemoteExecution #China", "creation_timestamp": "2026-04-30T03:00:25.778607Z"} {"uuid": "114fa46a-92cf-42b6-ae21-6868d8e50b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4047", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mkompalp7h2d", "content": "Hackers exploited two auth bypass flaws (CVE-2026-3965 & CVE-2026-4047) in Qinglong task scheduler to deploy cryptominers via RCE starting Feb 7. Fix applied after initial mitigation proved insufficient. #Qinglong #RemoteExecution #China", "creation_timestamp": "2026-04-30T03:00:25.778607Z"} https://vulnerability.circl.lu/sighting/114fa46a-92cf-42b6-ae21-6868d8e50b75/export Thu, 30 Apr 2026 03:00:25 +0000 https://vulnerability.circl.lu/sighting/bd55fe42-a878-44d4-a505-863439b0967c/export {"uuid": "bd55fe42-a878-44d4-a505-863439b0967c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mkoildefdb2g", "content": "The latest update for #Snyk includes \"'A Mini Shai-Hulud Has Appeared': Bun-Based Stealer Hits #SAP @cap-js and mbt npm Packages\" and \"Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)\".\n \n#CyberSecurity #DevOps #OpenSource https://opsmtrs.com/3yzKsZo", "creation_timestamp": "2026-04-30T01:46:38.614063Z"} {"uuid": "bd55fe42-a878-44d4-a505-863439b0967c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mkoildefdb2g", "content": "The latest update for #Snyk includes \"'A Mini Shai-Hulud Has Appeared': Bun-Based Stealer Hits #SAP @cap-js and mbt npm Packages\" and \"Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)\".\n \n#CyberSecurity #DevOps #OpenSource https://opsmtrs.com/3yzKsZo", "creation_timestamp": "2026-04-30T01:46:38.614063Z"} https://vulnerability.circl.lu/sighting/bd55fe42-a878-44d4-a505-863439b0967c/export Thu, 30 Apr 2026 01:46:38 +0000 https://vulnerability.circl.lu/sighting/4b9e9881-5eb9-4c76-9fb3-47d697340d77/export {"uuid": "4b9e9881-5eb9-4c76-9fb3-47d697340d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/brianvermeer.nl/post/3mknezhgwys25", "content": "A high CVSS score does not always mean \"all hands on deck.\" It is wiser to assess the situation first before rushing into stress mode. For example, examine CVE-2026-40478 in Thymeleaf.\n\nsnyk.io/blog/thymele...", "creation_timestamp": "2026-04-29T15:10:23.346735Z"} {"uuid": "4b9e9881-5eb9-4c76-9fb3-47d697340d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/brianvermeer.nl/post/3mknezhgwys25", "content": "A high CVSS score does not always mean \"all hands on deck.\" It is wiser to assess the situation first before rushing into stress mode. For example, examine CVE-2026-40478 in Thymeleaf.\n\nsnyk.io/blog/thymele...", "creation_timestamp": "2026-04-29T15:10:23.346735Z"} https://vulnerability.circl.lu/sighting/4b9e9881-5eb9-4c76-9fb3-47d697340d77/export Wed, 29 Apr 2026 15:10:23 +0000 https://vulnerability.circl.lu/sighting/6d5a0565-4d1a-428d-b667-51a9532bcc64/export {"uuid": "6d5a0565-4d1a-428d-b667-51a9532bcc64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4047", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mklibcksvu2g", "content": "", "creation_timestamp": "2026-04-28T21:03:03.043745Z"} {"uuid": "6d5a0565-4d1a-428d-b667-51a9532bcc64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4047", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mklibcksvu2g", "content": "", "creation_timestamp": "2026-04-28T21:03:03.043745Z"} https://vulnerability.circl.lu/sighting/6d5a0565-4d1a-428d-b667-51a9532bcc64/export Tue, 28 Apr 2026 21:03:03 +0000 https://vulnerability.circl.lu/sighting/1a68a21a-fd8e-4d10-a030-0dd438878c8e/export {"uuid": "1a68a21a-fd8e-4d10-a030-0dd438878c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbprwahy2v", "content": "", "creation_timestamp": "2026-04-26T19:22:34.213578Z"} {"uuid": "1a68a21a-fd8e-4d10-a030-0dd438878c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbprwahy2v", "content": "", "creation_timestamp": "2026-04-26T19:22:34.213578Z"} https://vulnerability.circl.lu/sighting/1a68a21a-fd8e-4d10-a030-0dd438878c8e/export Sun, 26 Apr 2026 19:22:34 +0000 https://vulnerability.circl.lu/sighting/3cce2cdc-6387-4d36-9ab2-0e434ecd63c7/export {"uuid": "3cce2cdc-6387-4d36-9ab2-0e434ecd63c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkeoktpjsf2p", "content": "", "creation_timestamp": "2026-04-26T04:07:08.249705Z"} {"uuid": "3cce2cdc-6387-4d36-9ab2-0e434ecd63c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkeoktpjsf2p", "content": "", "creation_timestamp": "2026-04-26T04:07:08.249705Z"} https://vulnerability.circl.lu/sighting/3cce2cdc-6387-4d36-9ab2-0e434ecd63c7/export Sun, 26 Apr 2026 04:07:08 +0000 https://vulnerability.circl.lu/sighting/420152f8-a1ed-4f03-a668-a5486b483de1/export {"uuid": "420152f8-a1ed-4f03-a668-a5486b483de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40472", "type": "seen", "source": "Telegram/9MQPqn6NQB4yNQwBhEjQmfZAQamilmjjvNDDQhjtzrN-0VE", "content": "", "creation_timestamp": "2026-04-24T15:22:14.000000Z"} {"uuid": "420152f8-a1ed-4f03-a668-a5486b483de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40472", "type": "seen", "source": "Telegram/9MQPqn6NQB4yNQwBhEjQmfZAQamilmjjvNDDQhjtzrN-0VE", "content": "", "creation_timestamp": "2026-04-24T15:22:14.000000Z"} https://vulnerability.circl.lu/sighting/420152f8-a1ed-4f03-a668-a5486b483de1/export Fri, 24 Apr 2026 15:22:14 +0000