https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 14 Sep 2026 17:31:09 +0000 https://vulnerability.circl.lu/sighting/3b0d8f34-ec71-4930-9d03-3e535f34f6c5/export {"uuid": "3b0d8f34-ec71-4930-9d03-3e535f34f6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72831", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117116206832392341", "content": "CVE-2026-72831 - Auth bypass in Grav Flex Objects plugin \u22641.4.6. Improper authorization lets low-priv users exploit generic /api/v1 endpoint. CVSS 8.8. Exploit risk high. Update immediately. #CVE #GravCMS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72831/", "creation_timestamp": "2026-08-18T11:11:37.716663Z"} {"uuid": "3b0d8f34-ec71-4930-9d03-3e535f34f6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72831", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117116206832392341", "content": "CVE-2026-72831 - Auth bypass in Grav Flex Objects plugin \u22641.4.6. Improper authorization lets low-priv users exploit generic /api/v1 endpoint. CVSS 8.8. Exploit risk high. Update immediately. #CVE #GravCMS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72831/", "creation_timestamp": "2026-08-18T11:11:37.716663Z"} https://vulnerability.circl.lu/sighting/3b0d8f34-ec71-4930-9d03-3e535f34f6c5/export Tue, 18 Aug 2026 11:11:37 +0000 https://vulnerability.circl.lu/sighting/bf903ddf-190a-4f8f-a518-11aa46cd855e/export {"uuid": "bf903ddf-190a-4f8f-a518-11aa46cd855e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72831", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mte3gt5gp52k", "content": "CVE-2026-72831 - Auth bypass in Grav Flex Objects plugin \u22641.4.6. Improper authorization lets low-priv users exploit generic /api/v1 endpoint. CVSS 8.8. Exploit risk high. Update immediately. #CVE #GravCMS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-72831/", "creation_timestamp": "2026-08-18T11:11:36.038445Z"} {"uuid": "bf903ddf-190a-4f8f-a518-11aa46cd855e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72831", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mte3gt5gp52k", "content": "CVE-2026-72831 - Auth bypass in Grav Flex Objects plugin \u22641.4.6. Improper authorization lets low-priv users exploit generic /api/v1 endpoint. CVSS 8.8. Exploit risk high. Update immediately. #CVE #GravCMS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-72831/", "creation_timestamp": "2026-08-18T11:11:36.038445Z"} https://vulnerability.circl.lu/sighting/bf903ddf-190a-4f8f-a518-11aa46cd855e/export Tue, 18 Aug 2026 11:11:36 +0000 https://vulnerability.circl.lu/sighting/ab91a3d3-7c77-48a3-ac9a-3cb218cf2ec4/export {"uuid": "ab91a3d3-7c77-48a3-ac9a-3cb218cf2ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "published-proof-of-concept", "source": "Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw", "content": "", "creation_timestamp": "2026-08-16T00:00:46.500190Z"} {"uuid": "ab91a3d3-7c77-48a3-ac9a-3cb218cf2ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "published-proof-of-concept", "source": "Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw", "content": "", "creation_timestamp": "2026-08-16T00:00:46.500190Z"} https://vulnerability.circl.lu/sighting/ab91a3d3-7c77-48a3-ac9a-3cb218cf2ec4/export Sun, 16 Aug 2026 00:00:46 +0000 https://vulnerability.circl.lu/sighting/c80df349-2ca4-42c1-a633-9c68d6102283/export {"uuid": "c80df349-2ca4-42c1-a633-9c68d6102283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4sdjqoq223", "content": "CVE-2026-72839\nWhen self-signup is enabled on Filebrowser, attackers can create accounts with full access to all files on the server. This is a serious issue because it allows unauthorized access to sensitive data. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T13:40:04.267913Z"} {"uuid": "c80df349-2ca4-42c1-a633-9c68d6102283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4sdjqoq223", "content": "CVE-2026-72839\nWhen self-signup is enabled on Filebrowser, attackers can create accounts with full access to all files on the server. This is a serious issue because it allows unauthorized access to sensitive data. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T13:40:04.267913Z"} https://vulnerability.circl.lu/sighting/c80df349-2ca4-42c1-a633-9c68d6102283/export Sat, 15 Aug 2026 13:40:04 +0000 https://vulnerability.circl.lu/sighting/20ccec1a-1707-4352-ac5d-0bb62a0e959b/export {"uuid": "20ccec1a-1707-4352-ac5d-0bb62a0e959b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "seen", "source": "Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw", "content": "", "creation_timestamp": "2026-08-15T08:00:05.041663Z"} {"uuid": "20ccec1a-1707-4352-ac5d-0bb62a0e959b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72839", "type": "seen", "source": "Telegram/7bSAS5c5TE5I5bBpK30fEeCZ4VMtoAAsa45677qm1k6CaLw", "content": "", "creation_timestamp": "2026-08-15T08:00:05.041663Z"} https://vulnerability.circl.lu/sighting/20ccec1a-1707-4352-ac5d-0bb62a0e959b/export Sat, 15 Aug 2026 08:00:05 +0000 https://vulnerability.circl.lu/sighting/01a9fae9-5902-4354-b803-ccff248efe7f/export {"uuid": "01a9fae9-5902-4354-b803-ccff248efe7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2aqvnzef2f", "content": "CVE-2026-72836 - filebrowser\nFileBrowser versions before 2.63.19 allow unauthorized access to other users' files on case-insensitive filesystems, like Windows. This means a new user can access and delete files\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#filebrowser #CVE #infosec", "creation_timestamp": "2026-08-14T13:20:05.365093Z"} {"uuid": "01a9fae9-5902-4354-b803-ccff248efe7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2aqvnzef2f", "content": "CVE-2026-72836 - filebrowser\nFileBrowser versions before 2.63.19 allow unauthorized access to other users' files on case-insensitive filesystems, like Windows. This means a new user can access and delete files\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#filebrowser #CVE #infosec", "creation_timestamp": "2026-08-14T13:20:05.365093Z"} https://vulnerability.circl.lu/sighting/01a9fae9-5902-4354-b803-ccff248efe7f/export Fri, 14 Aug 2026 13:20:05 +0000 https://vulnerability.circl.lu/sighting/6ba89d74-1317-4dd4-872b-37a810d9c4f3/export {"uuid": "6ba89d74-1317-4dd4-872b-37a810d9c4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fmzbywzbksnxu", "content": "CVE-2026-72837 - File Browser before 2.63.20 Privilege Escalation via Proxy Authentication\nCVE ID : CVE-2026-72837\n \n Published : Aug. 14, 2026, 11:35 a.m. | 37\u00a0minutes ago\n \n Description : File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy...", "creation_timestamp": "2026-08-14T13:12:42.308414Z"} {"uuid": "6ba89d74-1317-4dd4-872b-37a810d9c4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fmzbywzbksnxu", "content": "CVE-2026-72837 - File Browser before 2.63.20 Privilege Escalation via Proxy Authentication\nCVE ID : CVE-2026-72837\n \n Published : Aug. 14, 2026, 11:35 a.m. | 37\u00a0minutes ago\n \n Description : File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy...", "creation_timestamp": "2026-08-14T13:12:42.308414Z"} https://vulnerability.circl.lu/sighting/6ba89d74-1317-4dd4-872b-37a810d9c4f3/export Fri, 14 Aug 2026 13:12:42 +0000 https://vulnerability.circl.lu/sighting/531c8e7d-0128-4c87-bf8f-0bfa29bda02e/export {"uuid": "531c8e7d-0128-4c87-bf8f-0bfa29bda02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hiobi5qimz7ko", "content": "CVE-2026-72836 - FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass\nCVE ID : CVE-2026-72836\n \n Published : Aug. 14, 2026, 11:35 a.m. | 37\u00a0minutes ago\n \n Description : FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home...", "creation_timestamp": "2026-08-14T13:06:51.249157Z"} {"uuid": "531c8e7d-0128-4c87-bf8f-0bfa29bda02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hiobi5qimz7ko", "content": "CVE-2026-72836 - FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass\nCVE ID : CVE-2026-72836\n \n Published : Aug. 14, 2026, 11:35 a.m. | 37\u00a0minutes ago\n \n Description : FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home...", "creation_timestamp": "2026-08-14T13:06:51.249157Z"} https://vulnerability.circl.lu/sighting/531c8e7d-0128-4c87-bf8f-0bfa29bda02e/export Fri, 14 Aug 2026 13:06:51 +0000 https://vulnerability.circl.lu/sighting/a650c9af-3f67-4a00-8dfd-c50479146612/export {"uuid": "a650c9af-3f67-4a00-8dfd-c50479146612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72837", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt27ogqpiw2b", "content": "\ud83d\udfe0 CVE-2026-72837 - High (8.8)\n\nFile Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72837/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T13:00:49.695618Z"} {"uuid": "a650c9af-3f67-4a00-8dfd-c50479146612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72837", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt27ogqpiw2b", "content": "\ud83d\udfe0 CVE-2026-72837 - High (8.8)\n\nFile Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72837/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T13:00:49.695618Z"} https://vulnerability.circl.lu/sighting/a650c9af-3f67-4a00-8dfd-c50479146612/export Fri, 14 Aug 2026 13:00:49 +0000 https://vulnerability.circl.lu/sighting/6e649e22-07ab-454d-9d8b-19144cce50ce/export {"uuid": "6e649e22-07ab-454d-9d8b-19144cce50ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt27o7uejz26", "content": "\ud83d\udfe0 CVE-2026-72836 - High (8.1)\n\nFileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home d...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72836/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T13:00:43.736351Z"} {"uuid": "6e649e22-07ab-454d-9d8b-19144cce50ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72836", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt27o7uejz26", "content": "\ud83d\udfe0 CVE-2026-72836 - High (8.1)\n\nFileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home d...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-72836/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T13:00:43.736351Z"} https://vulnerability.circl.lu/sighting/6e649e22-07ab-454d-9d8b-19144cce50ce/export Fri, 14 Aug 2026 13:00:43 +0000