https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 28 Aug 2026 02:30:05 +0000 https://vulnerability.circl.lu/sighting/0aa9f15c-2d98-433a-9830-c5481d862793/export {"uuid": "0aa9f15c-2d98-433a-9830-c5481d862793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcweh45yo2e", "content": "\ud83d\udea8 CVE-2026-71424 \u2014 CVSS 9.6 CRITICAL\n\nOnyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71424\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T00:08:07.777070Z"} {"uuid": "0aa9f15c-2d98-433a-9830-c5481d862793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcweh45yo2e", "content": "\ud83d\udea8 CVE-2026-71424 \u2014 CVSS 9.6 CRITICAL\n\nOnyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71424\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T00:08:07.777070Z"} https://vulnerability.circl.lu/sighting/0aa9f15c-2d98-433a-9830-c5481d862793/export Tue, 18 Aug 2026 00:08:07 +0000 https://vulnerability.circl.lu/sighting/4f10f3d9-a768-4290-82cb-7f3bf385be5b/export {"uuid": "4f10f3d9-a768-4290-82cb-7f3bf385be5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcvw3oz5b2p", "content": "CVE-2026-71424 - onyx\nOnyx's API endpoints, used for managing servers, exposed another user's login credentials to anyone with certain access permissions. This issue has been fixed in versions 3.1.10, 3.2.14, and 4.0.0\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#onyx #CVE #infosec", "creation_timestamp": "2026-08-18T00:00:07.899120Z"} {"uuid": "4f10f3d9-a768-4290-82cb-7f3bf385be5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcvw3oz5b2p", "content": "CVE-2026-71424 - onyx\nOnyx's API endpoints, used for managing servers, exposed another user's login credentials to anyone with certain access permissions. This issue has been fixed in versions 3.1.10, 3.2.14, and 4.0.0\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#onyx #CVE #infosec", "creation_timestamp": "2026-08-18T00:00:07.899120Z"} https://vulnerability.circl.lu/sighting/4f10f3d9-a768-4290-82cb-7f3bf385be5b/export Tue, 18 Aug 2026 00:00:07 +0000 https://vulnerability.circl.lu/sighting/3c747ee0-61e5-4518-b132-efb5db4e7292/export {"uuid": "3c747ee0-61e5-4518-b132-efb5db4e7292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gfy45mtzysrmc", "content": "CVE-2026-71424 - Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers\nCVE ID : CVE-2026-71424\n \n Published : Aug. 17, 2026, 10:17 p.m. | 18\u00a0minutes ago\n \n Description : Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's G...", "creation_timestamp": "2026-08-17T23:41:50.397902Z"} {"uuid": "3c747ee0-61e5-4518-b132-efb5db4e7292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gfy45mtzysrmc", "content": "CVE-2026-71424 - Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers\nCVE ID : CVE-2026-71424\n \n Published : Aug. 17, 2026, 10:17 p.m. | 18\u00a0minutes ago\n \n Description : Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's G...", "creation_timestamp": "2026-08-17T23:41:50.397902Z"} https://vulnerability.circl.lu/sighting/3c747ee0-61e5-4518-b132-efb5db4e7292/export Mon, 17 Aug 2026 23:41:50 +0000 https://vulnerability.circl.lu/sighting/fe01c103-b1d2-44e6-aca8-8996f25e70f3/export {"uuid": "fe01c103-b1d2-44e6-aca8-8996f25e70f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcsm7ra6a22", "content": "\ud83d\udd34 CVE-2026-71424 - Critical (9.6)\n\nOnyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/serve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71424/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-17T23:00:54.272093Z"} {"uuid": "fe01c103-b1d2-44e6-aca8-8996f25e70f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcsm7ra6a22", "content": "\ud83d\udd34 CVE-2026-71424 - Critical (9.6)\n\nOnyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/serve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71424/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-17T23:00:54.272093Z"} https://vulnerability.circl.lu/sighting/fe01c103-b1d2-44e6-aca8-8996f25e70f3/export Mon, 17 Aug 2026 23:00:54 +0000