https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 27 Jun 2026 20:38:25 +0000 https://vulnerability.circl.lu/sighting/2d4558c3-327b-4b91-8943-14abb24caa3f/export {"uuid": "2d4558c3-327b-4b91-8943-14abb24caa3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41702", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mm3me2zrqj2d", "content": "\u30eb\u30fc\u30c8\u30a2\u30af\u30bb\u30b9\u7af6\u4e89\uff1aTOCTOU\u306e\u8106\u5f31\u6027\uff08CVE-2026-41702\uff09\u304cVMware Fusion\u306b\u5f71\u97ff \n\nRoot Access Race: TOCTOU Vulnerability (CVE-2026-41702) Hits VMware Fusion #DailyCyberSecurity (May 15)\n\nsecurityonline.info/vmware-fusio...", "creation_timestamp": "2026-05-18T00:23:58.329795Z"} {"uuid": "2d4558c3-327b-4b91-8943-14abb24caa3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41702", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mm3me2zrqj2d", "content": "\u30eb\u30fc\u30c8\u30a2\u30af\u30bb\u30b9\u7af6\u4e89\uff1aTOCTOU\u306e\u8106\u5f31\u6027\uff08CVE-2026-41702\uff09\u304cVMware Fusion\u306b\u5f71\u97ff \n\nRoot Access Race: TOCTOU Vulnerability (CVE-2026-41702) Hits VMware Fusion #DailyCyberSecurity (May 15)\n\nsecurityonline.info/vmware-fusio...", "creation_timestamp": "2026-05-18T00:23:58.329795Z"} https://vulnerability.circl.lu/sighting/2d4558c3-327b-4b91-8943-14abb24caa3f/export Mon, 18 May 2026 00:23:58 +0000 https://vulnerability.circl.lu/sighting/a526fdfc-51f6-4f0b-882a-e545744a663b/export {"uuid": "a526fdfc-51f6-4f0b-882a-e545744a663b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtao64q3s2p", "content": "CVE-2026-41704 - Compromised VM can make arbitrary blobstore deletes\nCVE ID : CVE-2026-41704\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on...", "creation_timestamp": "2026-05-27T09:58:45.978994Z"} {"uuid": "a526fdfc-51f6-4f0b-882a-e545744a663b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtao64q3s2p", "content": "CVE-2026-41704 - Compromised VM can make arbitrary blobstore deletes\nCVE ID : CVE-2026-41704\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on...", "creation_timestamp": "2026-05-27T09:58:45.978994Z"} https://vulnerability.circl.lu/sighting/a526fdfc-51f6-4f0b-882a-e545744a663b/export Wed, 27 May 2026 09:58:45 +0000 https://vulnerability.circl.lu/sighting/636771d9-b1d1-4a80-af6c-e227fa72cd44/export {"uuid": "636771d9-b1d1-4a80-af6c-e227fa72cd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41702", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mmyf6kn2vi2p", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-41702 \u5bfe\u8c61\u30b7\u30b9\u30c6\u30e0\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\n\u3053\u306e\u8106\u5f31\u6027\u306f\u3001SETUID\u30d0\u30a4\u30ca\u30ea\u306b\u3088\u3063\u3066\u5b9f\u884c\u3055\u308c\u308b\u64cd\u4f5c\u4e2d\u306b\u767a\u751f\u3059\u308bTOCTOU\uff08Time-of-check Time-of-use\uff09\u8106\u5f31\u6027\u3067\u3059\u3002", "creation_timestamp": "2026-05-29T11:02:50.202426Z"} {"uuid": "636771d9-b1d1-4a80-af6c-e227fa72cd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41702", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mmyf6kn2vi2p", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-41702 \u5bfe\u8c61\u30b7\u30b9\u30c6\u30e0\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\n\u3053\u306e\u8106\u5f31\u6027\u306f\u3001SETUID\u30d0\u30a4\u30ca\u30ea\u306b\u3088\u3063\u3066\u5b9f\u884c\u3055\u308c\u308b\u64cd\u4f5c\u4e2d\u306b\u767a\u751f\u3059\u308bTOCTOU\uff08Time-of-check Time-of-use\uff09\u8106\u5f31\u6027\u3067\u3059\u3002", "creation_timestamp": "2026-05-29T11:02:50.202426Z"} https://vulnerability.circl.lu/sighting/636771d9-b1d1-4a80-af6c-e227fa72cd44/export Fri, 29 May 2026 11:02:50 +0000 https://vulnerability.circl.lu/sighting/57a4f6a8-41c7-455b-9ce3-f998adb42e70/export {"uuid": "57a4f6a8-41c7-455b-9ce3-f998adb42e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41702", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mndu3qdils2u", "content": "\u300cVMware Fusion\u300d\u306b\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\n\u4eee\u60f3\u5316\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u300cVMware Fusion\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\nBroadcom\u304c\u73fe\u5730\u6642\u95932026\u5e745\u670814\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\u300cCVE-2026-41702\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cSETUID\u30d0\u30a4\u30ca\u30ea\u300d\u304c\u5b9f\u884c\u3059\u308b\u51e6\u7406\u306b\u304a\u3044\u3066\u3001\u691c\u67fb\u6642\u70b9\u3068\u4f7f\u7528\u6642\u70b9\u306e\u5dee\u7570\u304c\u751f\u3058\u308b\u300cTime-of-check to Time-of-use\uff08TOCTOU\uff09\u300d\u306e\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\u30ed\u30fc\u30ab\u30eb\u74b0\u5883\u3067root\u6a29\u9650\u306e\u53d6\u5f97\u304c\u53ef\u80fd\u3068\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-06-03T00:29:00.226826Z"} {"uuid": "57a4f6a8-41c7-455b-9ce3-f998adb42e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41702", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mndu3qdils2u", "content": "\u300cVMware Fusion\u300d\u306b\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\n\u4eee\u60f3\u5316\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u300cVMware Fusion\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\nBroadcom\u304c\u73fe\u5730\u6642\u95932026\u5e745\u670814\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\u300cCVE-2026-41702\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cSETUID\u30d0\u30a4\u30ca\u30ea\u300d\u304c\u5b9f\u884c\u3059\u308b\u51e6\u7406\u306b\u304a\u3044\u3066\u3001\u691c\u67fb\u6642\u70b9\u3068\u4f7f\u7528\u6642\u70b9\u306e\u5dee\u7570\u304c\u751f\u3058\u308b\u300cTime-of-check to Time-of-use\uff08TOCTOU\uff09\u300d\u306e\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\u30ed\u30fc\u30ab\u30eb\u74b0\u5883\u3067root\u6a29\u9650\u306e\u53d6\u5f97\u304c\u53ef\u80fd\u3068\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-06-03T00:29:00.226826Z"} https://vulnerability.circl.lu/sighting/57a4f6a8-41c7-455b-9ce3-f998adb42e70/export Wed, 03 Jun 2026 00:29:00 +0000 https://vulnerability.circl.lu/sighting/b2684777-e860-45ba-ac80-bb8114ead85d/export {"uuid": "b2684777-e860-45ba-ac80-bb8114ead85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41700", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyr33x2kg26", "content": "\ud83d\udfe0 CVE-2026-41700 - High (8.1)\n\nSpring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41700/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T08:00:54.861517Z"} {"uuid": "b2684777-e860-45ba-ac80-bb8114ead85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41700", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyr33x2kg26", "content": "\ud83d\udfe0 CVE-2026-41700 - High (8.1)\n\nSpring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41700/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T08:00:54.861517Z"} https://vulnerability.circl.lu/sighting/b2684777-e860-45ba-ac80-bb8114ead85d/export Thu, 11 Jun 2026 08:00:54 +0000 https://vulnerability.circl.lu/sighting/7c72bb64-099c-48e4-addc-c5bc2dd54bf8/export {"uuid": "7c72bb64-099c-48e4-addc-c5bc2dd54bf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnyxbciz3y2d", "content": "CVE-2026-41700 - Cross-Site WebSocket Hijacking in Spring for GraphQL\nCVE ID : CVE-2026-41700\n \n Published : June 11, 2026, 7:16 a.m. | 1\u00a0hour, 47\u00a0minutes ago\n \n Description : Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Sit...", "creation_timestamp": "2026-06-11T09:51:40.867014Z"} {"uuid": "7c72bb64-099c-48e4-addc-c5bc2dd54bf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnyxbciz3y2d", "content": "CVE-2026-41700 - Cross-Site WebSocket Hijacking in Spring for GraphQL\nCVE ID : CVE-2026-41700\n \n Published : June 11, 2026, 7:16 a.m. | 1\u00a0hour, 47\u00a0minutes ago\n \n Description : Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Sit...", "creation_timestamp": "2026-06-11T09:51:40.867014Z"} https://vulnerability.circl.lu/sighting/7c72bb64-099c-48e4-addc-c5bc2dd54bf8/export Thu, 11 Jun 2026 09:51:40 +0000 https://vulnerability.circl.lu/sighting/241a17fd-94ce-4160-96d4-6164cd6e96f3/export {"uuid": "241a17fd-94ce-4160-96d4-6164cd6e96f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41708", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mo3rytodm42d", "content": "\ud83d\udd17 CVE : CVE-2026-41708, CVE-2026-47825", "creation_timestamp": "2026-06-12T12:55:27.626297Z"} {"uuid": "241a17fd-94ce-4160-96d4-6164cd6e96f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41708", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mo3rytodm42d", "content": "\ud83d\udd17 CVE : CVE-2026-41708, CVE-2026-47825", "creation_timestamp": "2026-06-12T12:55:27.626297Z"} https://vulnerability.circl.lu/sighting/241a17fd-94ce-4160-96d4-6164cd6e96f3/export Fri, 12 Jun 2026 12:55:27 +0000 https://vulnerability.circl.lu/sighting/a347aeae-0eac-41aa-afff-8ef9cba0442f/export {"uuid": "a347aeae-0eac-41aa-afff-8ef9cba0442f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41700", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo3zec6fxz22", "content": "\ud83d\udccc CVE-2026-41700 - Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an a... https://www.cyberhub.blog/cves/CVE-2026-41700", "creation_timestamp": "2026-06-12T15:07:07.669805Z"} {"uuid": "a347aeae-0eac-41aa-afff-8ef9cba0442f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41700", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo3zec6fxz22", "content": "\ud83d\udccc CVE-2026-41700 - Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an a... https://www.cyberhub.blog/cves/CVE-2026-41700", "creation_timestamp": "2026-06-12T15:07:07.669805Z"} https://vulnerability.circl.lu/sighting/a347aeae-0eac-41aa-afff-8ef9cba0442f/export Fri, 12 Jun 2026 15:07:07 +0000 https://vulnerability.circl.lu/sighting/6ee631a3-c8f7-423f-8df8-19bd6274f111/export {"uuid": "6ee631a3-c8f7-423f-8df8-19bd6274f111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41708", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe3ve7spj2y", "content": "CVE-2026-41708 - Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability\nCVE ID : CVE-2026-41708\n \n Published : June 15, 2026, 6:54 p.m. | 47\u00a0minutes ago\n \n Description : In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may c...", "creation_timestamp": "2026-06-15T20:13:45.515279Z"} {"uuid": "6ee631a3-c8f7-423f-8df8-19bd6274f111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41708", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe3ve7spj2y", "content": "CVE-2026-41708 - Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability\nCVE ID : CVE-2026-41708\n \n Published : June 15, 2026, 6:54 p.m. | 47\u00a0minutes ago\n \n Description : In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may c...", "creation_timestamp": "2026-06-15T20:13:45.515279Z"} https://vulnerability.circl.lu/sighting/6ee631a3-c8f7-423f-8df8-19bd6274f111/export Mon, 15 Jun 2026 20:13:45 +0000 https://vulnerability.circl.lu/sighting/e4b42aa7-f6a9-46ff-a68b-43e1f31772c6/export {"uuid": "e4b42aa7-f6a9-46ff-a68b-43e1f31772c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41700", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mofrmmqg672x", "content": "\ud83d\udd17 CVE : CVE-2026-41001, CVE-2026-41699, CVE-2026-41700, CVE-2026-41856", "creation_timestamp": "2026-06-16T12:15:14.862230Z"} {"uuid": "e4b42aa7-f6a9-46ff-a68b-43e1f31772c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41700", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mofrmmqg672x", "content": "\ud83d\udd17 CVE : CVE-2026-41001, CVE-2026-41699, CVE-2026-41700, CVE-2026-41856", "creation_timestamp": "2026-06-16T12:15:14.862230Z"} https://vulnerability.circl.lu/sighting/e4b42aa7-f6a9-46ff-a68b-43e1f31772c6/export Tue, 16 Jun 2026 12:15:14 +0000