https://vulnerability.circl.lu/sightings/feed 2026-09-27T03:52:15.618547+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/463e22c0-27a6-4458-9799-543ab1bb196f/export 2026-09-27T03:52:15.647713+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "463e22c0-27a6-4458-9799-543ab1bb196f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100551", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwh7mqrqz324", "content": "CVE-2026-100551 - openclaw\nVersions of OpenClaw for iOS released between July 2026 and August 2026 do not check the saved security certificate when showing the Control UI, allowing a fake page to be shown if an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openclaw #CVE #infosec", "creation_timestamp": "2026-09-26T21:20:04.018138Z"} 2026-09-26T21:20:04.018138+00:00 https://vulnerability.circl.lu/sighting/eb63147e-77c1-45ec-8120-1560f02937da/export 2026-09-27T03:52:15.652683+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eb63147e-77c1-45ec-8120-1560f02937da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100551", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfpnr565w26", "content": "\ud83d\udfe0 CVE-2026-100551 - High (8.3)\n\nOpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100551/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T07:01:38.863630Z"} 2026-09-26T07:01:38.863630+00:00 https://vulnerability.circl.lu/sighting/1d95b271-b741-4b00-80a7-81b38a5e3586/export 2026-09-27T03:52:15.652863+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1d95b271-b741-4b00-80a7-81b38a5e3586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100551", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117335813361210337", "content": "CVE-2026-100551: OpenClaw for iOS (>=2026.7.1, <2026.8.11) has a CRITICAL vuln in Control UI WebViews \u2014 TLS pins not enforced. Attackers can steal Gateway creds if they can redirect traffic. Patch to 2026.8.11 ASAP! https://radar.offseq.com/threat/openclaw-for-ios-versions-202671-and-2026811-do-not-enforce-saved-gateway-tls-pins-in-the-control-ui-5ff1fd58a7f58c18 #OffSeq #Vulnerability #iOS #AppSec", "creation_timestamp": "2026-09-26T06:00:26.334009Z"} 2026-09-26T06:00:26.334009+00:00