https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 24 Sep 2026 20:26:20 +0000 https://vulnerability.circl.lu/sighting/63d32d5a-a369-42f9-bb5c-598613da9a70/export {"uuid": "63d32d5a-a369-42f9-bb5c-598613da9a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfbhzftyz2y", "content": "\ud83d\udccc CVE-2026-59243 - The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so an attacker able to present a forged or ... https://www.cyberhub.blog/cves/CVE-2026-59243", "creation_timestamp": "2026-08-06T05:07:07.098491Z"} {"uuid": "63d32d5a-a369-42f9-bb5c-598613da9a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfbhzftyz2y", "content": "\ud83d\udccc CVE-2026-59243 - The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so an attacker able to present a forged or ... https://www.cyberhub.blog/cves/CVE-2026-59243", "creation_timestamp": "2026-08-06T05:07:07.098491Z"} https://vulnerability.circl.lu/sighting/63d32d5a-a369-42f9-bb5c-598613da9a70/export Thu, 06 Aug 2026 05:07:07 +0000 https://vulnerability.circl.lu/sighting/07ad9251-eef3-436c-8bc4-83038e9d0289/export {"uuid": "07ad9251-eef3-436c-8bc4-83038e9d0289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "published-proof-of-concept", "source": "Telegram/rJSqz12D-kpQyCOJVo_dGQ5YtXruuuT1_BANzgPusZ6YAnQ", "content": "", "creation_timestamp": "2026-08-06T00:01:00.838113Z"} {"uuid": "07ad9251-eef3-436c-8bc4-83038e9d0289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "published-proof-of-concept", "source": "Telegram/rJSqz12D-kpQyCOJVo_dGQ5YtXruuuT1_BANzgPusZ6YAnQ", "content": "", "creation_timestamp": "2026-08-06T00:01:00.838113Z"} https://vulnerability.circl.lu/sighting/07ad9251-eef3-436c-8bc4-83038e9d0289/export Thu, 06 Aug 2026 00:01:00 +0000 https://vulnerability.circl.lu/sighting/f5c49965-6e7b-4d27-b951-16891dcb957d/export {"uuid": "f5c49965-6e7b-4d27-b951-16891dcb957d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "Telegram/rJSqz12D-kpQyCOJVo_dGQ5YtXruuuT1_BANzgPusZ6YAnQ", "content": "", "creation_timestamp": "2026-08-05T01:00:03.455289Z"} {"uuid": "f5c49965-6e7b-4d27-b951-16891dcb957d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "Telegram/rJSqz12D-kpQyCOJVo_dGQ5YtXruuuT1_BANzgPusZ6YAnQ", "content": "", "creation_timestamp": "2026-08-05T01:00:03.455289Z"} https://vulnerability.circl.lu/sighting/f5c49965-6e7b-4d27-b951-16891dcb957d/export Wed, 05 Aug 2026 01:00:03 +0000 https://vulnerability.circl.lu/sighting/2bb4c27d-a639-4d3d-9a8c-86d6d9e62555/export {"uuid": "2bb4c27d-a639-4d3d-9a8c-86d6d9e62555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96656", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-59243_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 20:21:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T22:00:04.550609Z"} {"uuid": "2bb4c27d-a639-4d3d-9a8c-86d6d9e62555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96656", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-59243_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 20:21:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T22:00:04.550609Z"} https://vulnerability.circl.lu/sighting/2bb4c27d-a639-4d3d-9a8c-86d6d9e62555/export Tue, 04 Aug 2026 22:00:04 +0000 https://vulnerability.circl.lu/sighting/6e4711f6-aada-4e4f-91ac-d70984754755/export {"uuid": "6e4711f6-aada-4e4f-91ac-d70984754755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59247", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrzjafqkzk2f", "content": "CVE-2026-59247\nA Gleam user may download a tampered package if their connection is intercepted. This can happen if a malicious actor is between your Gleam process and the internet, and can modify the data being sent. To stay\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-01T12:54:04.555996Z"} {"uuid": "6e4711f6-aada-4e4f-91ac-d70984754755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59247", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrzjafqkzk2f", "content": "CVE-2026-59247\nA Gleam user may download a tampered package if their connection is intercepted. This can happen if a malicious actor is between your Gleam process and the internet, and can modify the data being sent. To stay\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-01T12:54:04.555996Z"} https://vulnerability.circl.lu/sighting/6e4711f6-aada-4e4f-91ac-d70984754755/export Sat, 01 Aug 2026 12:54:04 +0000 https://vulnerability.circl.lu/sighting/159e1a60-423e-43d2-af27-885b1ac99aca/export {"uuid": "159e1a60-423e-43d2-af27-885b1ac99aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrseoxjskc2i", "content": "CVE-2026-59243 - apache airflow fab provider\nThe Apache Airflow FAB provider allows attackers to log in as any user, including administrators, by presenting a fake login token. This affects deployments using\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-29T16:44:06.148457Z"} {"uuid": "159e1a60-423e-43d2-af27-885b1ac99aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrseoxjskc2i", "content": "CVE-2026-59243 - apache airflow fab provider\nThe Apache Airflow FAB provider allows attackers to log in as any user, including administrators, by presenting a fake login token. This affects deployments using\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-29T16:44:06.148457Z"} https://vulnerability.circl.lu/sighting/159e1a60-423e-43d2-af27-885b1ac99aca/export Wed, 29 Jul 2026 16:44:06 +0000 https://vulnerability.circl.lu/sighting/ec04388b-ecc8-43a5-89d3-c161f060b238/export {"uuid": "ec04388b-ecc8-43a5-89d3-c161f060b238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfl753522x", "content": "CVE-2026-59248 - Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS\nCVE ID : CVE-2026-59248\n \n Published : July 28, 2026, 10:16 a.m. | 23\u00a0minutes ago\n \n Description : Allocation of resources without limits vulnerability in ninenines cowlib a...", "creation_timestamp": "2026-07-28T12:21:54.578606Z"} {"uuid": "ec04388b-ecc8-43a5-89d3-c161f060b238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfl753522x", "content": "CVE-2026-59248 - Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS\nCVE ID : CVE-2026-59248\n \n Published : July 28, 2026, 10:16 a.m. | 23\u00a0minutes ago\n \n Description : Allocation of resources without limits vulnerability in ninenines cowlib a...", "creation_timestamp": "2026-07-28T12:21:54.578606Z"} https://vulnerability.circl.lu/sighting/ec04388b-ecc8-43a5-89d3-c161f060b238/export Tue, 28 Jul 2026 12:21:54 +0000 https://vulnerability.circl.lu/sighting/c72f8793-9633-4ab5-8ba2-6f0fd114bbef/export {"uuid": "c72f8793-9633-4ab5-8ba2-6f0fd114bbef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpb5kx43v2d", "content": "CVE-2026-59243: Apache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (`verify_signature` defaults to `False`)", "creation_timestamp": "2026-07-28T11:02:41.750894Z"} {"uuid": "c72f8793-9633-4ab5-8ba2-6f0fd114bbef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpb5kx43v2d", "content": "CVE-2026-59243: Apache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (`verify_signature` defaults to `False`)", "creation_timestamp": "2026-07-28T11:02:41.750894Z"} https://vulnerability.circl.lu/sighting/c72f8793-9633-4ab5-8ba2-6f0fd114bbef/export Tue, 28 Jul 2026 11:02:41 +0000 https://vulnerability.circl.lu/sighting/0ac7293f-4850-4138-bd20-fe43f5a09b32/export {"uuid": "0ac7293f-4850-4138-bd20-fe43f5a09b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mro4hrp7s727", "content": "CVE-2026-59240 - IDOR in Prospero Flow CRM allows deletion of other users' notifications\nCVE ID : CVE-2026-59240\n \n Published : July 27, 2026, 10:17 p.m. | 1\u00a0hour, 38\u00a0minutes ago\n \n Description : The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `Del...", "creation_timestamp": "2026-07-28T00:06:16.294379Z"} {"uuid": "0ac7293f-4850-4138-bd20-fe43f5a09b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mro4hrp7s727", "content": "CVE-2026-59240 - IDOR in Prospero Flow CRM allows deletion of other users' notifications\nCVE ID : CVE-2026-59240\n \n Published : July 27, 2026, 10:17 p.m. | 1\u00a0hour, 38\u00a0minutes ago\n \n Description : The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `Del...", "creation_timestamp": "2026-07-28T00:06:16.294379Z"} https://vulnerability.circl.lu/sighting/0ac7293f-4850-4138-bd20-fe43f5a09b32/export Tue, 28 Jul 2026 00:06:16 +0000 https://vulnerability.circl.lu/sighting/7c259711-e88c-48df-a7aa-09fbe97c3e93/export {"uuid": "7c259711-e88c-48df-a7aa-09fbe97c3e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59246", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2lrcv5pa2y", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2026-59246: \u05db\u05d9\u05e6\u05d3 \u05d6\u05e8\u05d9\u05de\u05ea HTTP/2 CONTINUATION \u05dc\u05dc\u05d0 \u05d2\u05d5\u05d3\u05dc \u05d9\u05db\u05d5\u05dc\u05d4 \u05dc\u05d2\u05e8\u05d5\u05dd \u05dc\u05d3\u05d9\u05d5\u05e1 \u05e9\u05dc \u05d6\u05d9\u05db\u05e8\u05d5\u05df\n\n\n\nhttps://khesef.xyz/posts/F04AACDD-4159-4081-90BB-9979B28433B0", "creation_timestamp": "2026-07-20T05:46:47.137420Z"} {"uuid": "7c259711-e88c-48df-a7aa-09fbe97c3e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59246", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2lrcv5pa2y", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2026-59246: \u05db\u05d9\u05e6\u05d3 \u05d6\u05e8\u05d9\u05de\u05ea HTTP/2 CONTINUATION \u05dc\u05dc\u05d0 \u05d2\u05d5\u05d3\u05dc \u05d9\u05db\u05d5\u05dc\u05d4 \u05dc\u05d2\u05e8\u05d5\u05dd \u05dc\u05d3\u05d9\u05d5\u05e1 \u05e9\u05dc \u05d6\u05d9\u05db\u05e8\u05d5\u05df\n\n\n\nhttps://khesef.xyz/posts/F04AACDD-4159-4081-90BB-9979B28433B0", "creation_timestamp": "2026-07-20T05:46:47.137420Z"} https://vulnerability.circl.lu/sighting/7c259711-e88c-48df-a7aa-09fbe97c3e93/export Mon, 20 Jul 2026 05:46:47 +0000