https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:24:05 +0000 https://vulnerability.circl.lu/sighting/86a40013-f429-4475-aeba-27c0c506ee11/export {"uuid": "86a40013-f429-4475-aeba-27c0c506ee11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwcc4boogk2t", "content": "\u300cOAuth2 Proxy\u300d\u306b\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u306f\u672a\u516c\u958b\n\n\u8a8d\u8a3c\u30d7\u30ed\u30af\u30b7\u300cOAuth2 Proxy\u300d\u306b\u8a8d\u8a3c\u3092\u56de\u907f\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30bd\u30fc\u30b9\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u304a\u3044\u3066\u4fee\u6b63\u304c\u9032\u3081\u3089\u308c\u3066\u3044\u308b\u304c\u3001\u4fee\u6b63\u7248\u306f\u672a\u63d0\u4f9b\u3068\u306a\u3063\u3066\u3044\u308b\u3002\n\n\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30af\u30b7\u30e2\u30fc\u30c9\u3067\u300ctrusted_proxy_ip\u300d\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u3001\u7d30\u5de5\u3057\u305f\u300cX-Forwarded-Uri\u300d\u30d8\u30c3\u30c0\u306b\u3088\u3063\u3066\u8a8d\u8a3c\u3092\u56de\u907f\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-76835\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3082\u306e\u3002\u30c7\u30d5\u30a9\u30eb\u30c8\u69cb\u6210\u3067\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3044\u3046\u3002\n\n...\n\n\u300c\u540c7.15.2\u300d\u306b\u3066\u300cCVE-2026-40575\u300d\u3068\u3057\u3066\u5bfe\u7b56\u3092\u5b9f\u65bd\u3057\u305f\u3082\u306e\u306e\u3001...", "creation_timestamp": "2026-09-24T22:21:14.820807Z"} {"uuid": "86a40013-f429-4475-aeba-27c0c506ee11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwcc4boogk2t", "content": "\u300cOAuth2 Proxy\u300d\u306b\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u306f\u672a\u516c\u958b\n\n\u8a8d\u8a3c\u30d7\u30ed\u30af\u30b7\u300cOAuth2 Proxy\u300d\u306b\u8a8d\u8a3c\u3092\u56de\u907f\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30bd\u30fc\u30b9\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u304a\u3044\u3066\u4fee\u6b63\u304c\u9032\u3081\u3089\u308c\u3066\u3044\u308b\u304c\u3001\u4fee\u6b63\u7248\u306f\u672a\u63d0\u4f9b\u3068\u306a\u3063\u3066\u3044\u308b\u3002\n\n\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30af\u30b7\u30e2\u30fc\u30c9\u3067\u300ctrusted_proxy_ip\u300d\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u3001\u7d30\u5de5\u3057\u305f\u300cX-Forwarded-Uri\u300d\u30d8\u30c3\u30c0\u306b\u3088\u3063\u3066\u8a8d\u8a3c\u3092\u56de\u907f\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-76835\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3082\u306e\u3002\u30c7\u30d5\u30a9\u30eb\u30c8\u69cb\u6210\u3067\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3044\u3046\u3002\n\n...\n\n\u300c\u540c7.15.2\u300d\u306b\u3066\u300cCVE-2026-40575\u300d\u3068\u3057\u3066\u5bfe\u7b56\u3092\u5b9f\u65bd\u3057\u305f\u3082\u306e\u306e\u3001...", "creation_timestamp": "2026-09-24T22:21:14.820807Z"} https://vulnerability.circl.lu/sighting/86a40013-f429-4475-aeba-27c0c506ee11/export Thu, 24 Sep 2026 22:21:14 +0000 https://vulnerability.circl.lu/sighting/518e0363-4133-4a26-a324-660106178c06/export {"uuid": "518e0363-4133-4a26-a324-660106178c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76834", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqas4yzw52r", "content": "\ud83d\udea8 CVE-2026-76834 \u2014 CVSS 9.2 CRITICAL\n\nb2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serializ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76834\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T18:09:44.402538Z"} {"uuid": "518e0363-4133-4a26-a324-660106178c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76834", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqas4yzw52r", "content": "\ud83d\udea8 CVE-2026-76834 \u2014 CVSS 9.2 CRITICAL\n\nb2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serializ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76834\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T18:09:44.402538Z"} https://vulnerability.circl.lu/sighting/518e0363-4133-4a26-a324-660106178c06/export Thu, 17 Sep 2026 18:09:44 +0000 https://vulnerability.circl.lu/sighting/33d32e78-0ab2-46db-b16f-70b507d0d77c/export {"uuid": "33d32e78-0ab2-46db-b16f-70b507d0d77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76834", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq6lez25l2f", "content": "CVE-2026-76834 - b2evolution cms\nVersions 6.7.8 through 7.2.5 of b2evolution CMS can be tricked into loading malicious data when a specially crafted web request is sent. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#b2evolutioncms #b2evolution #CVE #infosec", "creation_timestamp": "2026-09-17T17:30:10.256640Z"} {"uuid": "33d32e78-0ab2-46db-b16f-70b507d0d77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76834", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq6lez25l2f", "content": "CVE-2026-76834 - b2evolution cms\nVersions 6.7.8 through 7.2.5 of b2evolution CMS can be tricked into loading malicious data when a specially crafted web request is sent. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#b2evolutioncms #b2evolution #CVE #infosec", "creation_timestamp": "2026-09-17T17:30:10.256640Z"} https://vulnerability.circl.lu/sighting/33d32e78-0ab2-46db-b16f-70b507d0d77c/export Thu, 17 Sep 2026 17:30:10 +0000 https://vulnerability.circl.lu/sighting/272f7ef5-8e04-4ac8-929f-94e0bbe8da27/export {"uuid": "272f7ef5-8e04-4ac8-929f-94e0bbe8da27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://www.acn.gov.it/portale/w/oauth2-poc-pubblico-per-lo-sfruttamento-di-una-vulnerabilita-con-gravita-critica-", "content": "Disponibile un Proof of Concept (PoC) per la CVE-2026-76835 presente in OAuth2 Proxy. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe permettere a un attaccante remoto non autenticato di eludere i meccanismi di autenticazione sui sistemi interessati.", "creation_timestamp": "2026-08-27T16:01:01.275590Z"} {"uuid": "272f7ef5-8e04-4ac8-929f-94e0bbe8da27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://www.acn.gov.it/portale/w/oauth2-poc-pubblico-per-lo-sfruttamento-di-una-vulnerabilita-con-gravita-critica-", "content": "Disponibile un Proof of Concept (PoC) per la CVE-2026-76835 presente in OAuth2 Proxy. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe permettere a un attaccante remoto non autenticato di eludere i meccanismi di autenticazione sui sistemi interessati.", "creation_timestamp": "2026-08-27T16:01:01.275590Z"} https://vulnerability.circl.lu/sighting/272f7ef5-8e04-4ac8-929f-94e0bbe8da27/export Thu, 27 Aug 2026 16:01:01 +0000 https://vulnerability.circl.lu/sighting/0f3d60bc-b32b-42d4-8f9c-1ead45746fd5/export {"uuid": "0f3d60bc-b32b-42d4-8f9c-1ead45746fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv46haca72p", "content": "CVE-2026-76836\nAnyone with only basic station profile permission can change the custom Liquidsoap configuration in AzuraCast. Those changes are written directly into the script and can run system commands when the station\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:40:04.453102Z"} {"uuid": "0f3d60bc-b32b-42d4-8f9c-1ead45746fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv46haca72p", "content": "CVE-2026-76836\nAnyone with only basic station profile permission can change the custom Liquidsoap configuration in AzuraCast. Those changes are written directly into the script and can run system commands when the station\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:40:04.453102Z"} https://vulnerability.circl.lu/sighting/0f3d60bc-b32b-42d4-8f9c-1ead45746fd5/export Tue, 25 Aug 2026 05:40:04 +0000 https://vulnerability.circl.lu/sighting/830ce985-d7ec-48ca-a855-263c6ffecf7e/export {"uuid": "830ce985-d7ec-48ca-a855-263c6ffecf7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtu4a2g2b225", "content": "\ud83d\udea8 CVE-2026-76835 \u2014 CVSS 9.3 CRITICAL\n\nOAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76835\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T20:08:18.115433Z"} {"uuid": "830ce985-d7ec-48ca-a855-263c6ffecf7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtu4a2g2b225", "content": "\ud83d\udea8 CVE-2026-76835 \u2014 CVSS 9.3 CRITICAL\n\nOAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76835\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T20:08:18.115433Z"} https://vulnerability.circl.lu/sighting/830ce985-d7ec-48ca-a855-263c6ffecf7e/export Mon, 24 Aug 2026 20:08:18 +0000 https://vulnerability.circl.lu/sighting/26da17b7-2ecc-4869-aea9-d1214cc0cd05/export {"uuid": "26da17b7-2ecc-4869-aea9-d1214cc0cd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtu23pht6c2y", "content": "CVE-2026-76835 - oauth2-proxy\nThe OAuth2 Proxy software treats any client as a trusted proxy by default, so it trusts the X-Forwarded-Uri header sent by the requester. An attacker can send a fake header that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oauth2proxy #CVE #infosec", "creation_timestamp": "2026-08-24T19:30:04.928191Z"} {"uuid": "26da17b7-2ecc-4869-aea9-d1214cc0cd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtu23pht6c2y", "content": "CVE-2026-76835 - oauth2-proxy\nThe OAuth2 Proxy software treats any client as a trusted proxy by default, so it trusts the X-Forwarded-Uri header sent by the requester. An attacker can send a fake header that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oauth2proxy #CVE #infosec", "creation_timestamp": "2026-08-24T19:30:04.928191Z"} https://vulnerability.circl.lu/sighting/26da17b7-2ecc-4869-aea9-d1214cc0cd05/export Mon, 24 Aug 2026 19:30:04 +0000 https://vulnerability.circl.lu/sighting/f4aa6682-4c27-4ac5-9508-558dd9b7db15/export {"uuid": "f4aa6682-4c27-4ac5-9508-558dd9b7db15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyixqmp52r", "content": "\ud83d\udd34 CVE-2026-76835 - Critical (9.1)\n\nOAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76835/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T19:01:44.179103Z"} {"uuid": "f4aa6682-4c27-4ac5-9508-558dd9b7db15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyixqmp52r", "content": "\ud83d\udd34 CVE-2026-76835 - Critical (9.1)\n\nOAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76835/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T19:01:44.179103Z"} https://vulnerability.circl.lu/sighting/f4aa6682-4c27-4ac5-9508-558dd9b7db15/export Mon, 24 Aug 2026 19:01:44 +0000 https://vulnerability.circl.lu/sighting/7f3cc094-6516-49d2-b0f2-9d4ffa56abaf/export {"uuid": "7f3cc094-6516-49d2-b0f2-9d4ffa56abaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76838", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyijzlir27", "content": "\ud83d\udfe0 CVE-2026-76838 - High (8.5)\n\nHi.Events validates a webhook destination only when it is registered, never when it is used. NoIn...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76838/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T19:01:29.076320Z"} {"uuid": "7f3cc094-6516-49d2-b0f2-9d4ffa56abaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76838", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyijzlir27", "content": "\ud83d\udfe0 CVE-2026-76838 - High (8.5)\n\nHi.Events validates a webhook destination only when it is registered, never when it is used. NoIn...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76838/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T19:01:29.076320Z"} https://vulnerability.circl.lu/sighting/7f3cc094-6516-49d2-b0f2-9d4ffa56abaf/export Mon, 24 Aug 2026 19:01:29 +0000 https://vulnerability.circl.lu/sighting/ee771f58-af09-4fbb-823d-67fda9cce5c3/export {"uuid": "ee771f58-af09-4fbb-823d-67fda9cce5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4r33lpgqkvzkk", "content": "CVE-2026-76837 - Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name\nCVE ID : CVE-2026-76837\n \n Published : Aug. 24, 2026, 5:36 p.m. | 27\u00a0minutes ago\n \n Description : Baserow interpolates a user's display name into the rich-text mention markup w...", "creation_timestamp": "2026-08-24T18:49:24.357052Z"} {"uuid": "ee771f58-af09-4fbb-823d-67fda9cce5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4r33lpgqkvzkk", "content": "CVE-2026-76837 - Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name\nCVE ID : CVE-2026-76837\n \n Published : Aug. 24, 2026, 5:36 p.m. | 27\u00a0minutes ago\n \n Description : Baserow interpolates a user's display name into the rich-text mention markup w...", "creation_timestamp": "2026-08-24T18:49:24.357052Z"} https://vulnerability.circl.lu/sighting/ee771f58-af09-4fbb-823d-67fda9cce5c3/export Mon, 24 Aug 2026 18:49:24 +0000