https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 05 Aug 2026 08:53:32 +0000 https://vulnerability.circl.lu/sighting/d3c6d07c-6d98-4f5a-a373-7097b9b67d32/export {"uuid": "d3c6d07c-6d98-4f5a-a373-7097b9b67d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "published-proof-of-concept", "source": "Telegram/LkH85X-JUMEtHWq9ccTX7RdLtAYJyJlmaTWlNzBdkhBs1mA", "content": "", "creation_timestamp": "2026-08-03T02:13:57.092525Z"} {"uuid": "d3c6d07c-6d98-4f5a-a373-7097b9b67d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "published-proof-of-concept", "source": "Telegram/LkH85X-JUMEtHWq9ccTX7RdLtAYJyJlmaTWlNzBdkhBs1mA", "content": "", "creation_timestamp": "2026-08-03T02:13:57.092525Z"} https://vulnerability.circl.lu/sighting/d3c6d07c-6d98-4f5a-a373-7097b9b67d32/export Mon, 03 Aug 2026 02:13:57 +0000 https://vulnerability.circl.lu/sighting/d994f91c-d52e-42d1-8d58-36ecb7fdba59/export {"uuid": "d994f91c-d52e-42d1-8d58-36ecb7fdba59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "published-proof-of-concept", "source": "Telegram/LkH85X-JUMEtHWq9ccTX7RdLtAYJyJlmaTWlNzBdkhBs1mA", "content": "", "creation_timestamp": "2026-08-02T06:08:45.838987Z"} {"uuid": "d994f91c-d52e-42d1-8d58-36ecb7fdba59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "published-proof-of-concept", "source": "Telegram/LkH85X-JUMEtHWq9ccTX7RdLtAYJyJlmaTWlNzBdkhBs1mA", "content": "", "creation_timestamp": "2026-08-02T06:08:45.838987Z"} https://vulnerability.circl.lu/sighting/d994f91c-d52e-42d1-8d58-36ecb7fdba59/export Sun, 02 Aug 2026 06:08:45 +0000 https://vulnerability.circl.lu/sighting/063c281c-5aa8-4583-8d95-d222893bf493/export {"uuid": "063c281c-5aa8-4583-8d95-d222893bf493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mryn35w7dr2h", "content": "CVE-2026-67595\nVaahCMS versions 2.0.0 through 2.3.4 contain a security risk in their OTP email feature. If a user with JavaScript enabled receives a malicious email, it can secretly install a keylogger and capture sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-01T04:30:03.717269Z"} {"uuid": "063c281c-5aa8-4583-8d95-d222893bf493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mryn35w7dr2h", "content": "CVE-2026-67595\nVaahCMS versions 2.0.0 through 2.3.4 contain a security risk in their OTP email feature. If a user with JavaScript enabled receives a malicious email, it can secretly install a keylogger and capture sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-01T04:30:03.717269Z"} https://vulnerability.circl.lu/sighting/063c281c-5aa8-4583-8d95-d222893bf493/export Sat, 01 Aug 2026 04:30:03 +0000 https://vulnerability.circl.lu/sighting/eb8ed76d-1ab8-4b12-b453-9318f1d5c763/export {"uuid": "eb8ed76d-1ab8-4b12-b453-9318f1d5c763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67595", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrt53khbxv2t", "content": "VaahCMS 2.0.0 \u2013 2.3.4 hit by CRITICAL vuln: OTP email templates contain malicious JS enabling code execution, keylogging, & C2. Avoid JS-enabled email rendering. Await vendor patch. https://radar.offseq.com/threat/cve-2026-67595-embedded-malicious-code-in-webreinvent-vaahcms-94fc0638a0fe22eb #Off...", "creation_timestamp": "2026-07-30T00:00:38.645654Z"} {"uuid": "eb8ed76d-1ab8-4b12-b453-9318f1d5c763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67595", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrt53khbxv2t", "content": "VaahCMS 2.0.0 \u2013 2.3.4 hit by CRITICAL vuln: OTP email templates contain malicious JS enabling code execution, keylogging, & C2. Avoid JS-enabled email rendering. Await vendor patch. https://radar.offseq.com/threat/cve-2026-67595-embedded-malicious-code-in-webreinvent-vaahcms-94fc0638a0fe22eb #Off...", "creation_timestamp": "2026-07-30T00:00:38.645654Z"} https://vulnerability.circl.lu/sighting/eb8ed76d-1ab8-4b12-b453-9318f1d5c763/export Thu, 30 Jul 2026 00:00:38 +0000 https://vulnerability.circl.lu/sighting/94e1651c-d4cc-4637-a821-3cba24f0f840/export {"uuid": "94e1651c-d4cc-4637-a821-3cba24f0f840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrt52dd6wg2c", "content": "\ud83d\udfe0 CVE-2026-67595 - High (8.1)\n\nVaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67595/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T23:59:57.894861Z"} {"uuid": "94e1651c-d4cc-4637-a821-3cba24f0f840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrt52dd6wg2c", "content": "\ud83d\udfe0 CVE-2026-67595 - High (8.1)\n\nVaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67595/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T23:59:57.894861Z"} https://vulnerability.circl.lu/sighting/94e1651c-d4cc-4637-a821-3cba24f0f840/export Wed, 29 Jul 2026 23:59:57 +0000 https://vulnerability.circl.lu/sighting/d5d1df99-0fcd-4b00-a404-3b4f6b4643c5/export {"uuid": "d5d1df99-0fcd-4b00-a404-3b4f6b4643c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrsz5fry6g2u", "content": "CVE-2026-67595\nVaahCMS versions 2.0.0 to 2.3.4 have a security flaw in their email system that could allow hackers to steal passwords from users who open a malicious email in their browser. This means that anyone using these\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T22:50:15.033621Z"} {"uuid": "d5d1df99-0fcd-4b00-a404-3b4f6b4643c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrsz5fry6g2u", "content": "CVE-2026-67595\nVaahCMS versions 2.0.0 to 2.3.4 have a security flaw in their email system that could allow hackers to steal passwords from users who open a malicious email in their browser. This means that anyone using these\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T22:50:15.033621Z"} https://vulnerability.circl.lu/sighting/d5d1df99-0fcd-4b00-a404-3b4f6b4643c5/export Wed, 29 Jul 2026 22:50:15 +0000