https://vulnerability.circl.lu/sightings/feed 2026-09-18T12:14:00.061033+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/450f5a01-74bf-4d66-aa6c-3a2641d39438/export 2026-09-18T12:14:00.071801+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "450f5a01-74bf-4d66-aa6c-3a2641d39438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13684", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvrwcs4ycr2j", "content": "\ud83d\udea8 CVE-2026-13684 \u2014 CVSS 9.8 CRITICAL\n\nAn improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) befo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-13684\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T10:07:31.452620Z"} 2026-09-18T10:07:31.452620+00:00 https://vulnerability.circl.lu/sighting/cfcebe9c-1cb1-4f1d-9c88-e16c37ff38eb/export 2026-09-18T12:14:00.073453+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cfcebe9c-1cb1-4f1d-9c88-e16c37ff38eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13639", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvrwck7eq42p", "content": "\ud83d\udea8 CVE-2026-13639 \u2014 CVSS 9.8 CRITICAL\n\nAn insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-690...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-13639\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T10:07:23.173389Z"} 2026-09-18T10:07:23.173389+00:00 https://vulnerability.circl.lu/sighting/d2724bec-d890-47cd-a921-70cbed266c55/export 2026-09-18T12:14:00.073614+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d2724bec-d890-47cd-a921-70cbed266c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13639", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvruwjryii2t", "content": "Synology fixed 8 DSM vulnerabilities, including two critical unauthenticated flaws (CVE-2026-13684, CVE-2026-13639) on DiskStation Manager. Update now.\n\n#Synology #DSM #NAS #CVE #Vulnerability #DiskStation #InfoSec #PatchNow #NetworkSecurity #DataStorage", "creation_timestamp": "2026-09-18T09:42:47.527994Z"} 2026-09-18T09:42:47.527994+00:00 https://vulnerability.circl.lu/sighting/173249cd-f3ba-4765-845a-7b9bc9ffc317/export 2026-09-18T12:14:00.073736+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "173249cd-f3ba-4765-845a-7b9bc9ffc317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13684", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvruwjryii2t", "content": "Synology fixed 8 DSM vulnerabilities, including two critical unauthenticated flaws (CVE-2026-13684, CVE-2026-13639) on DiskStation Manager. Update now.\n\n#Synology #DSM #NAS #CVE #Vulnerability #DiskStation #InfoSec #PatchNow #NetworkSecurity #DataStorage", "creation_timestamp": "2026-09-18T09:42:47.449247Z"} 2026-09-18T09:42:47.449247+00:00 https://vulnerability.circl.lu/sighting/7e329d8e-9443-4c18-a4f4-11d25262e39f/export 2026-09-18T12:14:00.073848+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7e329d8e-9443-4c18-a4f4-11d25262e39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13639", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvrt45iqpk2y", "content": "CVE-2026-13639 - diskstation manager (dsm)\nOlder versions of Synology DiskStation Manager may not generate enough random data during login, letting attackers guess authentication tokens. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#diskstationmanager #synology #CVE #infosec", "creation_timestamp": "2026-09-18T09:10:07.220918Z"} 2026-09-18T09:10:07.220918+00:00 https://vulnerability.circl.lu/sighting/93e5fa9d-9e11-45fa-ae56-be7fcfb3cd1c/export 2026-09-18T12:14:00.073949+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "93e5fa9d-9e11-45fa-ae56-be7fcfb3cd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13684", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvrt42igdm2j", "content": "CVE-2026-13684 - diskstation manager (dsm)\nVersions of Synology DiskStation Manager before the latest updates may let a remote user trick the system into handling data incorrectly. This can lead\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#diskstationmanager #synology #CVE #infosec", "creation_timestamp": "2026-09-18T09:10:04.439820Z"} 2026-09-18T09:10:04.439820+00:00 https://vulnerability.circl.lu/sighting/d1353a38-562d-42b2-8c2f-9e41f59e5a2c/export 2026-09-18T12:14:00.074053+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d1353a38-562d-42b2-8c2f-9e41f59e5a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13584", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvqh2izylv2y", "content": "~Cisa~\nSame-segment attackers can tamper with control data and cause DoS; no fix planned.\n-\nIOCs: CVE-2026-13584\n-\n#CVE202613584 #ICS #ThreatIntel", "creation_timestamp": "2026-09-17T20:01:47.850632Z"} 2026-09-17T20:01:47.850632+00:00 https://vulnerability.circl.lu/sighting/5791ff2c-ea74-494d-aaaf-48e750500639/export 2026-09-18T12:14:00.074149+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5791ff2c-ea74-494d-aaaf-48e750500639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13293", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvlge4g6lp2i", "content": "~Cybergcca~\nIBM MQ RCE and vulnerabilities affect GNU libextractor, Firefox, and Docker Sandboxes; patch promptly.\n-\nIOCs: CVE-2026-13293, CVE-2026-19290, CVE-2026-91752\n-\n#CVE202613293 #ThreatIntel #Vulnerability", "creation_timestamp": "2026-09-15T20:05:57.823523Z"} 2026-09-15T20:05:57.823523+00:00 https://vulnerability.circl.lu/sighting/06ebf519-56e8-4eb7-9ab5-b64a35cde97d/export 2026-09-18T12:14:00.074254+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "06ebf519-56e8-4eb7-9ab5-b64a35cde97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-13293", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-922", "content": "", "creation_timestamp": "2026-09-15T16:16:36.945348Z"} 2026-09-15T16:16:36.945348+00:00 https://vulnerability.circl.lu/sighting/1e51d1e3-276b-46a7-abd5-5fcf9a1d582b/export 2026-09-18T12:14:00.075474+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1e51d1e3-276b-46a7-abd5-5fcf9a1d582b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13149", "type": "seen", "source": "https://gist.github.com/dystewart/7127d826eefe32ba23981e94fb701fb3", "content": "# SPDX-FileCopyrightText: Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. All rights reserved.\n# SPDX-License-Identifier: Apache-2.0\n#\n# Licensed under the Apache License, Version 2.0 (the \"License\");\n# you may not use this file except in compliance with the License.\n# You may obtain a copy of the License at\n#\n# http://www.apache.org/licenses/LICENSE-2.0\n#\n# Unless required by applicable law or agreed to in writing, software\n# distributed under the License is distributed on an \"AS IS\" BASIS,\n# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n# See the License for the specific language governing permissions and\n# limitations under the License.\n\nARG BASE_IMAGE_URL=registry.access.redhat.com/ubi9/ubi\nARG BASE_IMAGE_TAG=9.8-1782841664\nARG PYTHON_VERSION=3.12\n\n# Specified on the command line with:\n# --build-arg VULN_ANALYSIS_VERSION=$(python -m setuptools_scm)\nARG VULN_ANALYSIS_VERSION=2.0.0\n\nFROM ${BASE_IMAGE_URL}:${BASE_IMAGE_TAG} AS base\n\nCOPY --from=ghcr.io/astral-sh/uv:0.7.15 /uv /uvx /bin/\n\nARG VULN_ANALYSIS_VERSION\nARG PYTHON_VERSION\nARG AGENT_GIT_COMMIT\nARG AGENT_GIT_TAG\n\nENV PYTHONDONTWRITEBYTECODE=1 \\\n AGENT_GIT_COMMIT=${AGENT_GIT_COMMIT} \\\n AGENT_GIT_TAG=${AGENT_GIT_TAG}\n\nRUN dnf install -y --nodocs \\\n bsdtar \\\n ca-certificates \\\n gcc \\\n gcc-c++ \\\n git \\\n git-lfs \\\n krb5-devel \\\n libatomic \\\n make \\\n python3.12 \\\n python3.12-devel \\\n skopeo \\\n wget \\\n xz \\\n && dnf clean all \\\n && update-ca-trust\n\n# Install Go.\nRUN curl -L \\\n https://go.dev/dl/go1.24.1.linux-amd64.tar.gz \\\n -o /tmp/go1.24.1.linux-amd64.tar.gz \\\n && tar -C /usr/local \\\n -xzf /tmp/go1.24.1.linux-amd64.tar.gz \\\n && rm -f /tmp/go1.24.1.linux-amd64.tar.gz\n\nENV GOTOOLCHAIN=auto\n\n# Install Node.js and npm.\n# CVE-2026-13149: brace-expansion DoS.\nARG NODE_VERSION=26.5.0\n\nRUN curl -fsSL \\\n -o /tmp/node.tar.xz \\\n \"https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-x64.tar.xz\" \\\n && mkdir -p /opt/nodejs \\\n && tar -C /opt/nodejs \\\n -xJf /tmp/node.tar.xz \\\n --strip-components=1 \\\n && rm -f /tmp/node.tar.xz\n\nENV PATH=\"/opt/nodejs/bin:${PATH}\"\n\n# CVE-2026-42338:\n# ip-address <10.1.1 XSS, transitively included through npm/socks.\nRUN cd /tmp \\\n && npm pack ip-address@10.1.1 \\\n && tar -xzf ip-address-*.tgz \\\n && rm -rf /opt/nodejs/lib/node_modules/npm/node_modules/ip-address \\\n && mv package /opt/nodejs/lib/node_modules/npm/node_modules/ip-address \\\n && rm -f /tmp/ip-address-*.tgz \\\n && rm -rf /tmp/package\n\n# npm <=11.17 bundles brace-expansion <=5.0.6.\nRUN npm install -g npm@11.18.0 \\\n && node --version \\\n && npm --version\n\n# Install Temurin JDK 17.\nARG JDK_URL=\"https://github.com/adoptium/temurin17-binaries/releases/download/jdk-17.0.18%2B8/OpenJDK17U-jdk_x64_linux_hotspot_17.0.18_8.tar.gz\"\nARG JDK_DIR=\"jdk-17.0.18+8\"\n\nRUN mkdir -p /opt/jdk \\\n && curl -fsSL \\\n -o /tmp/jdk.tgz \\\n \"${JDK_URL}\" \\\n && tar -C /opt/jdk \\\n -xzf /tmp/jdk.tgz \\\n && rm -f /tmp/jdk.tgz\n\nENV JAVA_HOME=\"/opt/jdk/${JDK_DIR}\"\nENV PATH=\"${JAVA_HOME}/bin:${PATH}\"\n\n# Install Maven.\nARG MVN_VER=3.9.11\n\nRUN curl -fsSL \\\n -o /tmp/maven.tgz \\\n \"https://archive.apache.org/dist/maven/maven-3/${MVN_VER}/binaries/apache-maven-${MVN_VER}-bin.tar.gz\" \\\n && tar -C /opt \\\n -xzf /tmp/maven.tgz \\\n && rm -f /tmp/maven.tgz\n\nENV PATH=\"/opt/apache-maven-${MVN_VER}/bin:${PATH}\"\n\nRUN java -version \\\n && mvn -v\n\n# Configure the RHEL/UBI CA trust bundle.\nENV REQUESTS_CA_BUNDLE=\"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\" \\\n SSL_CERT_FILE=\"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\"\n\n# Install Tini.\nADD --chmod=755 \\\n --checksum=sha256:93dcc18adc78c65a028a84799ecf8ad40c936fdfc5f2a57b1acda5a8117fa82c \\\n https://github.com/krallin/tini/releases/download/v0.19.0/tini \\\n /tini\n\nSHELL [\"/bin/bash\", \"-c\"]\n\nWORKDIR /workspace\n\n# Copy the project, including the merged OpenShell compatibility changes.\nCOPY ./ /workspace\n\n# Create a named development user. OpenShift may replace this UID with an\n# arbitrary namespace-assigned UID at runtime.\nRUN groupadd workspace-group \\\n && useradd \\\n --uid 1001 \\\n --create-home \\\n --gid workspace-group \\\n user1001 \\\n && chown -R user1001:workspace-group /home/user1001 \\\n && chmod -R g+wrx /home/user1001\n\nRUN --mount=type=cache,id=uv_cache_v006,target=/home/user1001/.cache/uv,mode=0775 \\\n export SETUPTOOLS_SCM_PRETEND_VERSION=\"${VULN_ANALYSIS_VERSION}\" \\\n && export UV_CACHE_DIR=/home/user1001/.cache/uv \\\n && UV_PYTHON_DOWNLOADS=never \\\n uv venv \\\n --python /usr/bin/python3.12 \\\n /workspace/.venv \\\n && UV_PYTHON_DOWNLOADS=never \\\n uv sync --frozen --verbose\n\nRUN chown -R user1001:0 /workspace \\\n && chmod -R g=u /workspace\n\n# OpenShift runs containers with an arbitrary UID belonging to group 0.\n# Give group 0 the same permissions as the owning user.\nRUN chgrp -R 0 \\\n /workspace \\\n /home/user1001 \\\n && chmod -R g=u \\\n /workspace \\\n /home/user1001 \\\n && mkdir -p /opt/exploit-iq \\\n && chgrp -R 0 /opt/exploit-iq \\\n && chmod -R g=u /opt/exploit-iq\n\n# Embed the validated OpenAI/OpenShell NAT configuration.\n# API keys and the HMAC key are supplied separately at runtime.\nCOPY --chown=1001:0 \\\n config-openai.yaml \\\n /opt/exploit-iq/config-openai.yaml\n\nUSER 1001\n\nENV PATH=\"/workspace/.venv/bin:/usr/local/go/bin:${PATH}\"\n\nRUN echo \"source /workspace/.venv/bin/activate\" \\\n >> /home/user1001/.bashrc\n\n# Runtime image.\nFROM base AS runtime\n\nENV PYTHONPATH=\"/workspace/src\" \\\n EXPLOIT_IQ_TRUST_PROXY_DNS=\"true\" \\\n OPENAI_BASE_URL=\"https://api.openai.com/v1\" \\\n OPENAI_API_BASE=\"https://api.openai.com/v1\" \\\n SERPAPI_BASE_URL=\"https://serpapi.com\" \\\n NVD_BASE_URL=\"https://services.nvd.nist.gov\" \\\n GHSA_BASE_URL=\"https://api.github.com\" \\\n CWE_DETAILS_BASE_URL=\"https://cwe.mitre.org/data/definitions\" \\\n TIKTOKEN_CACHE_DIR=\"/sandbox/.cache/tiktoken\" \\\n HF_HUB_CACHE=\"/sandbox/.cache/huggingface\" \\\n XDG_CACHE_HOME=\"/sandbox/.cache/am_cache\" \\\n CHECKLIST_MODEL_NAME=\"gpt-4o-mini\" \\\n CODE_VDB_RETRIEVER_MODEL_NAME=\"gpt-4o-mini\" \\\n DOC_VDB_RETRIEVER_MODEL_NAME=\"gpt-4o-mini\" \\\n CVE_AGENT_EXECUTOR_MODEL_NAME=\"gpt-4o-mini\" \\\n GENERATE_CVSS_MODEL_NAME=\"gpt-4o-mini\" \\\n SUMMARIZE_MODEL_NAME=\"gpt-4o-mini\" \\\n JUSTIFY_MODEL_NAME=\"gpt-4o-mini\" \\\n EMBEDDER_MODEL_NAME=\"text-embedding-3-small\"\n\nEXPOSE 26466\n\nCMD [\"/workspace/.venv/bin/nat\", \"serve\", \"--config_file=/opt/exploit-iq/config-openai.yaml\", \"--host=0.0.0.0\", \"--port=26466\"]", "creation_timestamp": "2026-09-14T15:48:47.768702Z"} 2026-09-14T15:48:47.768702+00:00