https://vulnerability.circl.lu/sightings/feed 2026-09-26T15:00:31.033545+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1cc98169-928e-48d4-a39a-42f033258619/export 2026-09-26T15:00:31.061745+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1cc98169-928e-48d4-a39a-42f033258619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100520", "type": "seen", "source": "https://gist.github.com/ichintu/649a1fe76b80e5c473482da09368e350", "content": "On September 26, 2026, two high-severity vulnerabilities were disclosed: **CVE-2026-100530** affects OpenClaw (pre-2026.8.1), allowing approved commands to bypass directory context and execute against unreviewed files (Severity: 8.5), while **CVE-2026-100520** impacts Laranode (pre-1.2.1), enabling authenticated users to exploit path traversal in file uploads to deploy cross-tenant code (Severity: 8.8). Both require immediate patching.", "creation_timestamp": "2026-09-26T04:00:21.000000Z"} 2026-09-26T04:00:21+00:00 https://vulnerability.circl.lu/sighting/675db367-45c3-4f2d-a718-2ed32e1346a9/export 2026-09-26T15:00:31.064460+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "675db367-45c3-4f2d-a718-2ed32e1346a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100520", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfd3s34p52n", "content": "\ud83d\udfe0 CVE-2026-100520 - High (8.8)\n\nLaranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/up...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100520/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T03:16:51.621018Z"} 2026-09-26T03:16:51.621018+00:00 https://vulnerability.circl.lu/sighting/0501d1d1-63b1-4ffb-b1ff-6d2486bbb48e/export 2026-09-26T15:00:31.064602+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0501d1d1-63b1-4ffb-b1ff-6d2486bbb48e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a24y6m4nk57sm", "content": "CVE-2026-100520 - Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint\nCVE ID : CVE-2026-100520\n \n Published : Sept. 26, 2026, 1:17 a.m. | 32\u00a0minutes ago\n \n Description : Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /fileman...", "creation_timestamp": "2026-09-26T02:07:06.810828Z"} 2026-09-26T02:07:06.810828+00:00