https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 29 Aug 2026 12:05:17 +0000 https://vulnerability.circl.lu/sighting/9c14c74c-7cbe-4973-9dea-1fcccba934d8/export {"uuid": "9c14c74c-7cbe-4973-9dea-1fcccba934d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96347", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a theopaid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-02 22:17:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity Advisory: Stored Cross-Site Scripting Via Agent Messages Leading To Session Token Theft (openclaw-dashboard)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T01:19:36.835924Z"} {"uuid": "9c14c74c-7cbe-4973-9dea-1fcccba934d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96347", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a theopaid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-02 22:17:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity Advisory: Stored Cross-Site Scripting Via Agent Messages Leading To Session Token Theft (openclaw-dashboard)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T01:19:36.835924Z"} https://vulnerability.circl.lu/sighting/9c14c74c-7cbe-4973-9dea-1fcccba934d8/export Mon, 03 Aug 2026 01:19:36 +0000 https://vulnerability.circl.lu/sighting/18445a17-4973-418b-9293-5008ced835cf/export {"uuid": "18445a17-4973-418b-9293-5008ced835cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwy7mbq5t2y", "content": "CVE-2026-66421\nThe OpenClaw Dashboard is vulnerable to a type of cyber attack that allows hackers to inject malicious code into the admin's browser session. This can lead to unauthorized access to sensitive areas of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:44:04.731613Z"} {"uuid": "18445a17-4973-418b-9293-5008ced835cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwy7mbq5t2y", "content": "CVE-2026-66421\nThe OpenClaw Dashboard is vulnerable to a type of cyber attack that allows hackers to inject malicious code into the admin's browser session. This can lead to unauthorized access to sensitive areas of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:44:04.731613Z"} https://vulnerability.circl.lu/sighting/18445a17-4973-418b-9293-5008ced835cf/export Fri, 31 Jul 2026 12:44:04 +0000 https://vulnerability.circl.lu/sighting/ef64fae1-f8de-4a46-bf0d-15f387d05368/export {"uuid": "ef64fae1-f8de-4a46-bf0d-15f387d05368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqw2elck2a", "content": "\ud83d\udd34 CVE-2026-66421 - Critical (9.3)\n\nOpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66421/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-31T01:00:48.262051Z"} {"uuid": "ef64fae1-f8de-4a46-bf0d-15f387d05368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqw2elck2a", "content": "\ud83d\udd34 CVE-2026-66421 - Critical (9.3)\n\nOpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66421/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-31T01:00:48.262051Z"} https://vulnerability.circl.lu/sighting/ef64fae1-f8de-4a46-bf0d-15f387d05368/export Fri, 31 Jul 2026 01:00:48 +0000 https://vulnerability.circl.lu/sighting/974710aa-d6ad-41e4-9234-0ad8757a9ecc/export {"uuid": "974710aa-d6ad-41e4-9234-0ad8757a9ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrvk677xxf2y", "content": "CVE-2026-66421 - openclaw-dashboard\nThe OpenClaw Dashboard software has a security flaw that lets hackers inject malicious code into a website, potentially stealing sensitive information\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openclawdashboard #tugcantopaloglu #CVE #infosec", "creation_timestamp": "2026-07-30T23:00:05.126040Z"} {"uuid": "974710aa-d6ad-41e4-9234-0ad8757a9ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrvk677xxf2y", "content": "CVE-2026-66421 - openclaw-dashboard\nThe OpenClaw Dashboard software has a security flaw that lets hackers inject malicious code into a website, potentially stealing sensitive information\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openclawdashboard #tugcantopaloglu #CVE #infosec", "creation_timestamp": "2026-07-30T23:00:05.126040Z"} https://vulnerability.circl.lu/sighting/974710aa-d6ad-41e4-9234-0ad8757a9ecc/export Thu, 30 Jul 2026 23:00:05 +0000