https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:46:18 +0000 https://vulnerability.circl.lu/sighting/8ca01156-b92f-48f9-b402-821511de9488/export {"uuid": "8ca01156-b92f-48f9-b402-821511de9488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://t.me/pphm_HackerNews/3255", "content": "\ud83d\udd34 Critical MaxKB AI Agent Flaw Lets Prompt Injection Execute System Commands\n\nA critical vulnerability in the MaxKB AI knowledge-base platform could let attackers exploit prompt injection and run operating system commands on vulnerable deployments, including directly on the underlying host in some configurations.\n\nThis flaw, tracked as CVE-2026-77521 and GHSA-f36j-f34j-h3rx, affects MaxKB versions up to and including 2.10.3-lts. The issue has received a maximum CVSS v3.1 score of 10.0 for public or embedded assistants that can be accessed without authentication. The patch for this vulnerability is included in MaxKB version 2.10.5-lts.", "creation_timestamp": "2026-09-22T18:09:01.000000Z"} {"uuid": "8ca01156-b92f-48f9-b402-821511de9488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://t.me/pphm_HackerNews/3255", "content": "\ud83d\udd34 Critical MaxKB AI Agent Flaw Lets Prompt Injection Execute System Commands\n\nA critical vulnerability in the MaxKB AI knowledge-base platform could let attackers exploit prompt injection and run operating system commands on vulnerable deployments, including directly on the underlying host in some configurations.\n\nThis flaw, tracked as CVE-2026-77521 and GHSA-f36j-f34j-h3rx, affects MaxKB versions up to and including 2.10.3-lts. The issue has received a maximum CVSS v3.1 score of 10.0 for public or embedded assistants that can be accessed without authentication. The patch for this vulnerability is included in MaxKB version 2.10.5-lts.", "creation_timestamp": "2026-09-22T18:09:01.000000Z"} https://vulnerability.circl.lu/sighting/8ca01156-b92f-48f9-b402-821511de9488/export Tue, 22 Sep 2026 18:09:01 +0000 https://vulnerability.circl.lu/sighting/25af4333-8ba5-4b8d-92d7-2f84247ead3f/export {"uuid": "25af4333-8ba5-4b8d-92d7-2f84247ead3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw4flulsbe2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-77521: MaxKB is an open-source AI assistant for enterprise\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-77521\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-22T14:07:40.207302Z"} {"uuid": "25af4333-8ba5-4b8d-92d7-2f84247ead3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mw4flulsbe2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-77521: MaxKB is an open-source AI assistant for enterprise\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-77521\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-22T14:07:40.207302Z"} https://vulnerability.circl.lu/sighting/25af4333-8ba5-4b8d-92d7-2f84247ead3f/export Tue, 22 Sep 2026 14:07:40 +0000 https://vulnerability.circl.lu/sighting/428a3435-741a-43c3-9ff0-90220efe5bf5/export {"uuid": "428a3435-741a-43c3-9ff0-90220efe5bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw2pwzmp2j2g", "content": "\ud83d\udea8 CVE-2026-77521 \u2014 CVSS 10 CRITICAL\n\nMaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, M...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77521\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-21T22:07:31.879678Z"} {"uuid": "428a3435-741a-43c3-9ff0-90220efe5bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw2pwzmp2j2g", "content": "\ud83d\udea8 CVE-2026-77521 \u2014 CVSS 10 CRITICAL\n\nMaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, M...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77521\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-21T22:07:31.879678Z"} https://vulnerability.circl.lu/sighting/428a3435-741a-43c3-9ff0-90220efe5bf5/export Mon, 21 Sep 2026 22:07:31 +0000 https://vulnerability.circl.lu/sighting/8982e781-bc36-4823-b26c-124742ed8900/export {"uuid": "8982e781-bc36-4823-b26c-124742ed8900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw2ncb2mqy2p", "content": "CVE-2026-77521 - maxkb\nThe MaxKB AI assistant lets users send prompts that can trigger the system to execute operating\u2011system commands without needing approval. This could allow an attacker to run unwanted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxkb #1paneldev #CVE #infosec", "creation_timestamp": "2026-09-21T21:20:07.594977Z"} {"uuid": "8982e781-bc36-4823-b26c-124742ed8900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77521", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw2ncb2mqy2p", "content": "CVE-2026-77521 - maxkb\nThe MaxKB AI assistant lets users send prompts that can trigger the system to execute operating\u2011system commands without needing approval. This could allow an attacker to run unwanted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxkb #1paneldev #CVE #infosec", "creation_timestamp": "2026-09-21T21:20:07.594977Z"} https://vulnerability.circl.lu/sighting/8982e781-bc36-4823-b26c-124742ed8900/export Mon, 21 Sep 2026 21:20:07 +0000