https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 13 Sep 2026 12:19:41 +0000 https://vulnerability.circl.lu/sighting/de989526-1cd6-4bd4-bf51-75b7284559f8/export {"uuid": "de989526-1cd6-4bd4-bf51-75b7284559f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muztcgp4a32p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85672: zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derive\u2026\nCVSS 9.8 \u00b7 EPSS 1.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-85672\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T20:09:44.631399Z"} {"uuid": "de989526-1cd6-4bd4-bf51-75b7284559f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muztcgp4a32p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85672: zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derive\u2026\nCVSS 9.8 \u00b7 EPSS 1.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-85672\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T20:09:44.631399Z"} https://vulnerability.circl.lu/sighting/de989526-1cd6-4bd4-bf51-75b7284559f8/export Tue, 08 Sep 2026 20:09:44 +0000 https://vulnerability.circl.lu/sighting/bdc47782-7552-48aa-8aed-5cff8fbee463/export {"uuid": "bdc47782-7552-48aa-8aed-5cff8fbee463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvuj5bc2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85672: zerox 1.1.20 OS Command Injection via Document URL File Extension\nCVSS 9.8 \u00b7 EPSS 1.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-85672\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:09:02.041514Z"} {"uuid": "bdc47782-7552-48aa-8aed-5cff8fbee463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvuj5bc2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85672: zerox 1.1.20 OS Command Injection via Document URL File Extension\nCVSS 9.8 \u00b7 EPSS 1.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-85672\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:09:02.041514Z"} https://vulnerability.circl.lu/sighting/bdc47782-7552-48aa-8aed-5cff8fbee463/export Tue, 08 Sep 2026 19:09:02 +0000 https://vulnerability.circl.lu/sighting/811c7195-3ae4-4ce7-ac3f-44eeaa807b5f/export {"uuid": "811c7195-3ae4-4ce7-ac3f-44eeaa807b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphxgfjop2l", "content": "CVE-2026-85672 - zerox\nThe zerox version 1.1.20 program can be tricked into executing any command on the server when it processes a specially crafted document link. This could let an attacker take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zerox #getomniai #CVE #infosec", "creation_timestamp": "2026-09-04T17:20:06.567914Z"} {"uuid": "811c7195-3ae4-4ce7-ac3f-44eeaa807b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphxgfjop2l", "content": "CVE-2026-85672 - zerox\nThe zerox version 1.1.20 program can be tricked into executing any command on the server when it processes a specially crafted document link. This could let an attacker take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zerox #getomniai #CVE #infosec", "creation_timestamp": "2026-09-04T17:20:06.567914Z"} https://vulnerability.circl.lu/sighting/811c7195-3ae4-4ce7-ac3f-44eeaa807b5f/export Fri, 04 Sep 2026 17:20:06 +0000 https://vulnerability.circl.lu/sighting/3690b6ad-f012-418b-bc27-7716b6ed2ca2/export {"uuid": "3690b6ad-f012-418b-bc27-7716b6ed2ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdx3v56522", "content": "\ud83d\udea8 CVE-2026-85672 \u2014 CVSS 9.3 CRITICAL\n\nzerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the tempor...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85672\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:20.649055Z"} {"uuid": "3690b6ad-f012-418b-bc27-7716b6ed2ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85672", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdx3v56522", "content": "\ud83d\udea8 CVE-2026-85672 \u2014 CVSS 9.3 CRITICAL\n\nzerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the tempor...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85672\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:20.649055Z"} https://vulnerability.circl.lu/sighting/3690b6ad-f012-418b-bc27-7716b6ed2ca2/export Fri, 04 Sep 2026 16:08:20 +0000