https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 07 Aug 2026 04:12:11 +0000 https://vulnerability.circl.lu/sighting/29c6cfc7-80bd-46d9-848d-47d2f4f61ff1/export {"uuid": "29c6cfc7-80bd-46d9-848d-47d2f4f61ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msg2doqp4y2u", "content": "CVE-2026-67531\nA security issue in FrontMCP allows unauthenticated users to execute code on the server, potentially exposing sensitive information like passwords and authentication keys. This issue has been fixed in version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T12:32:04.675060Z"} {"uuid": "29c6cfc7-80bd-46d9-848d-47d2f4f61ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msg2doqp4y2u", "content": "CVE-2026-67531\nA security issue in FrontMCP allows unauthenticated users to execute code on the server, potentially exposing sensitive information like passwords and authentication keys. This issue has been fixed in version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T12:32:04.675060Z"} https://vulnerability.circl.lu/sighting/29c6cfc7-80bd-46d9-848d-47d2f4f61ff1/export Thu, 06 Aug 2026 12:32:04 +0000 https://vulnerability.circl.lu/sighting/15568fd4-13b3-4044-8e52-385987e5c17e/export {"uuid": "15568fd4-13b3-4044-8e52-385987e5c17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67531", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6ezh3hvhio52s", "content": "CVE-2026-67531 - FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool\nCVE ID : CVE-2026-67531\n \n Published : Aug. 6, 2026, 12:16 a.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : FrontMCP is a TypeScript-first framework for the Model Context Proto...", "creation_timestamp": "2026-08-06T01:57:25.862879Z"} {"uuid": "15568fd4-13b3-4044-8e52-385987e5c17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67531", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6ezh3hvhio52s", "content": "CVE-2026-67531 - FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool\nCVE ID : CVE-2026-67531\n \n Published : Aug. 6, 2026, 12:16 a.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : FrontMCP is a TypeScript-first framework for the Model Context Proto...", "creation_timestamp": "2026-08-06T01:57:25.862879Z"} https://vulnerability.circl.lu/sighting/15568fd4-13b3-4044-8e52-385987e5c17e/export Thu, 06 Aug 2026 01:57:25 +0000 https://vulnerability.circl.lu/sighting/6ffbef71-5447-490d-99d8-b69c813a3501/export {"uuid": "6ffbef71-5447-490d-99d8-b69c813a3501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mseukvp33t2o", "content": "CVE-2026-67531\nA security issue in FrontMCP versions prior to 1.5.7 allows malicious scripts to access and execute code on the server, potentially exposing sensitive data such as OAuth client secrets, database credentials,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T01:16:06.714769Z"} {"uuid": "6ffbef71-5447-490d-99d8-b69c813a3501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mseukvp33t2o", "content": "CVE-2026-67531\nA security issue in FrontMCP versions prior to 1.5.7 allows malicious scripts to access and execute code on the server, potentially exposing sensitive data such as OAuth client secrets, database credentials,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T01:16:06.714769Z"} https://vulnerability.circl.lu/sighting/6ffbef71-5447-490d-99d8-b69c813a3501/export Thu, 06 Aug 2026 01:16:06 +0000 https://vulnerability.circl.lu/sighting/dc6ad7d2-05c8-4114-af40-803634b81e0c/export {"uuid": "dc6ad7d2-05c8-4114-af40-803634b81e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67531", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mseqe45ddk2j", "content": "CVE-2026-67531 (CRITICAL): agentfront frontmcp <1.5.7 lets attackers run code on your server \u2014 secrets at risk. Upgrade to 1.5.7+ without delay. https://radar.offseq.com/threat/cve-2026-67531-cwe-94-improper-control-of-generation-of-code-code-injection-in-agentfront-frontmcp-2c28d3d3312eb9f5 #Off...", "creation_timestamp": "2026-08-06T00:00:42.242821Z"} {"uuid": "dc6ad7d2-05c8-4114-af40-803634b81e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67531", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mseqe45ddk2j", "content": "CVE-2026-67531 (CRITICAL): agentfront frontmcp <1.5.7 lets attackers run code on your server \u2014 secrets at risk. Upgrade to 1.5.7+ without delay. https://radar.offseq.com/threat/cve-2026-67531-cwe-94-improper-control-of-generation-of-code-code-injection-in-agentfront-frontmcp-2c28d3d3312eb9f5 #Off...", "creation_timestamp": "2026-08-06T00:00:42.242821Z"} https://vulnerability.circl.lu/sighting/dc6ad7d2-05c8-4114-af40-803634b81e0c/export Thu, 06 Aug 2026 00:00:42 +0000 https://vulnerability.circl.lu/sighting/8e0a0d80-7cac-446b-a2e0-491f3925970d/export {"uuid": "8e0a0d80-7cac-446b-a2e0-491f3925970d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67531", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117045620857763460", "content": "CVE-2026-67531 (CRITICAL): agentfront frontmcp <1.5.7 suffers a code injection flaw enabling remote code execution and theft of secrets. Upgrade to v1.5.7+ ASAP. https://radar.offseq.com/threat/cve-2026-67531-cwe-94-improper-control-of-generation-of-code-code-injection-in-agentfront-frontmcp-2c28d3d3312eb9f5 #OffSeq #Vulnerability #RCE #InfoSec #CVE2026", "creation_timestamp": "2026-08-06T00:00:40.487242Z"} {"uuid": "8e0a0d80-7cac-446b-a2e0-491f3925970d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67531", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117045620857763460", "content": "CVE-2026-67531 (CRITICAL): agentfront frontmcp <1.5.7 suffers a code injection flaw enabling remote code execution and theft of secrets. Upgrade to v1.5.7+ ASAP. https://radar.offseq.com/threat/cve-2026-67531-cwe-94-improper-control-of-generation-of-code-code-injection-in-agentfront-frontmcp-2c28d3d3312eb9f5 #OffSeq #Vulnerability #RCE #InfoSec #CVE2026", "creation_timestamp": "2026-08-06T00:00:40.487242Z"} https://vulnerability.circl.lu/sighting/8e0a0d80-7cac-446b-a2e0-491f3925970d/export Thu, 06 Aug 2026 00:00:40 +0000