https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 19 Aug 2026 03:53:34 +0000 https://vulnerability.circl.lu/sighting/7527cf66-3ca4-4e1b-9229-848fe926558e/export {"uuid": "7527cf66-3ca4-4e1b-9229-848fe926558e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-64849.yaml", "content": "", "creation_timestamp": "2026-08-19T00:00:03.269533Z"} {"uuid": "7527cf66-3ca4-4e1b-9229-848fe926558e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-64849.yaml", "content": "", "creation_timestamp": "2026-08-19T00:00:03.269533Z"} https://vulnerability.circl.lu/sighting/7527cf66-3ca4-4e1b-9229-848fe926558e/export Wed, 19 Aug 2026 00:00:03 +0000 https://vulnerability.circl.lu/sighting/263917b5-ef45-4d09-bbe3-3204e204e813/export {"uuid": "263917b5-ef45-4d09-bbe3-3204e204e813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mtfeorh3bu2r", "content": "\ud83d\udea8 CRITICAL & ACTIVELY EXPLOITED: A severe SSRF flaw (CVE-2026-64849) in the MLflow AI platform allows attackers to steal cloud credentials. Upgrade to version 3.15.0 immediately and ensure your servers are not public-facing. #MLflow #SSRF #CyberSecu...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-18T23:29:46.405667Z"} {"uuid": "263917b5-ef45-4d09-bbe3-3204e204e813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mtfeorh3bu2r", "content": "\ud83d\udea8 CRITICAL & ACTIVELY EXPLOITED: A severe SSRF flaw (CVE-2026-64849) in the MLflow AI platform allows attackers to steal cloud credentials. Upgrade to version 3.15.0 immediately and ensure your servers are not public-facing. #MLflow #SSRF #CyberSecu...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-18T23:29:46.405667Z"} https://vulnerability.circl.lu/sighting/263917b5-ef45-4d09-bbe3-3204e204e813/export Tue, 18 Aug 2026 23:29:46 +0000 https://vulnerability.circl.lu/sighting/7f944814-a947-43f4-afc6-0033a327b3a8/export {"uuid": "7f944814-a947-43f4-afc6-0033a327b3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mtf7vxl4xx2k", "content": "Two critical vulnerabilities in MLflow (CVE-2026-64849, CVSS 9.3) and FUXA (CVE-2026-25895, CVSS 9.5) are under active exploitation. Attackers are exploiting [\u2026]", "creation_timestamp": "2026-08-18T22:04:24.202016Z"} {"uuid": "7f944814-a947-43f4-afc6-0033a327b3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mtf7vxl4xx2k", "content": "Two critical vulnerabilities in MLflow (CVE-2026-64849, CVSS 9.3) and FUXA (CVE-2026-25895, CVSS 9.5) are under active exploitation. Attackers are exploiting [\u2026]", "creation_timestamp": "2026-08-18T22:04:24.202016Z"} https://vulnerability.circl.lu/sighting/7f944814-a947-43f4-afc6-0033a327b3a8/export Tue, 18 Aug 2026 22:04:24 +0000 https://vulnerability.circl.lu/sighting/b2ab106b-4ca7-4a6d-8eb5-2df087fca179/export {"uuid": "b2ab106b-4ca7-4a6d-8eb5-2df087fca179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/serena666.bsky.social/post/3mtf4kbvv5w2m", "content": "MLflow SSRF (CVE-2026-64849) exploit for cloud creds in hours, bypassing prior fixes. You gotta hand it to 'em, the attackers don't waste time. Relentless", "creation_timestamp": "2026-08-18T21:04:07.220630Z"} {"uuid": "b2ab106b-4ca7-4a6d-8eb5-2df087fca179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/serena666.bsky.social/post/3mtf4kbvv5w2m", "content": "MLflow SSRF (CVE-2026-64849) exploit for cloud creds in hours, bypassing prior fixes. You gotta hand it to 'em, the attackers don't waste time. Relentless", "creation_timestamp": "2026-08-18T21:04:07.220630Z"} https://vulnerability.circl.lu/sighting/b2ab106b-4ca7-4a6d-8eb5-2df087fca179/export Tue, 18 Aug 2026 21:04:07 +0000 https://vulnerability.circl.lu/sighting/806e7724-54e4-465f-9fd7-b2c31783b86a/export {"uuid": "806e7724-54e4-465f-9fd7-b2c31783b86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtf2kobzid25", "content": "\ud83e\udd16 CVE-2026-64849 (CVSS 9.3): unauthenticated SSRF in MLflow (<3.15.0) exploited in the wild to exfiltrate cloud credentials. CVE-2026-25895 (CVSS 9.5): path traversal to RCE in FUXA SCADA/HMI, mass scanning.\nhttps://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.html", "creation_timestamp": "2026-08-18T20:28:31.184194Z"} {"uuid": "806e7724-54e4-465f-9fd7-b2c31783b86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtf2kobzid25", "content": "\ud83e\udd16 CVE-2026-64849 (CVSS 9.3): unauthenticated SSRF in MLflow (<3.15.0) exploited in the wild to exfiltrate cloud credentials. CVE-2026-25895 (CVSS 9.5): path traversal to RCE in FUXA SCADA/HMI, mass scanning.\nhttps://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.html", "creation_timestamp": "2026-08-18T20:28:31.184194Z"} https://vulnerability.circl.lu/sighting/806e7724-54e4-465f-9fd7-b2c31783b86a/export Tue, 18 Aug 2026 20:28:31 +0000 https://vulnerability.circl.lu/sighting/164232a2-5645-4bbc-b241-d5f074d31089/export {"uuid": "164232a2-5645-4bbc-b241-d5f074d31089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64849", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtezagljq22f", "content": "MLflow SSRF (CVE-2026-64849): exploited for cloud metadata credential theft hours after disclosure. Patch ML infra like production. #ThreatIntel #AIsecurity #CriticalInfrastructure https://threat-intelligence.redeyesecurity.com/blog/mlflow-ssrf-cve-2026-64849-cloud-credential-theft-2026", "creation_timestamp": "2026-08-18T20:04:54.484618Z"} {"uuid": "164232a2-5645-4bbc-b241-d5f074d31089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64849", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtezagljq22f", "content": "MLflow SSRF (CVE-2026-64849): exploited for cloud metadata credential theft hours after disclosure. Patch ML infra like production. #ThreatIntel #AIsecurity #CriticalInfrastructure https://threat-intelligence.redeyesecurity.com/blog/mlflow-ssrf-cve-2026-64849-cloud-credential-theft-2026", "creation_timestamp": "2026-08-18T20:04:54.484618Z"} https://vulnerability.circl.lu/sighting/164232a2-5645-4bbc-b241-d5f074d31089/export Tue, 18 Aug 2026 20:04:54 +0000 https://vulnerability.circl.lu/sighting/f67dcccd-eca9-496c-8444-d14d7c4e2f05/export {"uuid": "f67dcccd-eca9-496c-8444-d14d7c4e2f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtepb45z4h2z", "content": "Critical SSRF vulnerability in MLflow (CVE-2026-64849) actively exploited; upgrade to 3.15.0 immediately to prevent unauthorized access. #MLflow #SSRF #CyberSecurity #MachineLearning #DataSecurity thedailytechfeed.com/critical-mlf...", "creation_timestamp": "2026-08-18T17:06:19.867587Z"} {"uuid": "f67dcccd-eca9-496c-8444-d14d7c4e2f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtepb45z4h2z", "content": "Critical SSRF vulnerability in MLflow (CVE-2026-64849) actively exploited; upgrade to 3.15.0 immediately to prevent unauthorized access. #MLflow #SSRF #CyberSecurity #MachineLearning #DataSecurity thedailytechfeed.com/critical-mlf...", "creation_timestamp": "2026-08-18T17:06:19.867587Z"} https://vulnerability.circl.lu/sighting/f67dcccd-eca9-496c-8444-d14d7c4e2f05/export Tue, 18 Aug 2026 17:06:19 +0000 https://vulnerability.circl.lu/sighting/a96db69a-5b5e-43f5-bec4-14de5799de16/export {"uuid": "a96db69a-5b5e-43f5-bec4-14de5799de16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-64849.yaml", "content": "", "creation_timestamp": "2026-08-18T15:00:02.953728Z"} {"uuid": "a96db69a-5b5e-43f5-bec4-14de5799de16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-64849.yaml", "content": "", "creation_timestamp": "2026-08-18T15:00:02.953728Z"} https://vulnerability.circl.lu/sighting/a96db69a-5b5e-43f5-bec4-14de5799de16/export Tue, 18 Aug 2026 15:00:02 +0000 https://vulnerability.circl.lu/sighting/8815ce99-2acf-41c8-85e9-f1db2c130007/export {"uuid": "8815ce99-2acf-41c8-85e9-f1db2c130007", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f87cac0a-5a98-4700-aa40-a3228e809c87", "content": "", "creation_timestamp": "2026-08-18T14:00:28.751972Z"} {"uuid": "8815ce99-2acf-41c8-85e9-f1db2c130007", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f87cac0a-5a98-4700-aa40-a3228e809c87", "content": "", "creation_timestamp": "2026-08-18T14:00:28.751972Z"} https://vulnerability.circl.lu/sighting/8815ce99-2acf-41c8-85e9-f1db2c130007/export Tue, 18 Aug 2026 14:00:28 +0000 https://vulnerability.circl.lu/sighting/518fa0dc-791e-42b4-b19c-a151138bdd62/export {"uuid": "518fa0dc-791e-42b4-b19c-a151138bdd62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mtecwjbhrg2w", "content": "An unauthenticated SSRF vulnerability in MLflow, CVE-2026-64849, is already being exploited in the wild. \n\nWithin hours of CVE assignment, watchTowr Intel via Attacker Eye, our global honeypot network, observed attac\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2089685887420440637)", "creation_timestamp": "2026-08-18T13:25:38.929750Z"} {"uuid": "518fa0dc-791e-42b4-b19c-a151138bdd62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mtecwjbhrg2w", "content": "An unauthenticated SSRF vulnerability in MLflow, CVE-2026-64849, is already being exploited in the wild. \n\nWithin hours of CVE assignment, watchTowr Intel via Attacker Eye, our global honeypot network, observed attac\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2089685887420440637)", "creation_timestamp": "2026-08-18T13:25:38.929750Z"} https://vulnerability.circl.lu/sighting/518fa0dc-791e-42b4-b19c-a151138bdd62/export Tue, 18 Aug 2026 13:25:38 +0000