https://vulnerability.circl.lu/sightings/feed 2026-09-27T21:34:35.284479+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9a0c48d1-e2a6-42fa-845a-aea0eab8ddb1/export 2026-09-27T21:34:35.311987+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9a0c48d1-e2a6-42fa-845a-aea0eab8ddb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100582", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrjsak2x", "content": "Daily IT Security Digest \u2014 2026-09-26\nmulti-person DMs), CVE-2026-100582 (HIGH, missing authorization in MS Teams channel read allowlist bypass), and CVE-2026-93952 variants affecting Discord integration, the Browser extension relay (DoS), diagnostics-prometheus, and third-party credential routing.", "creation_timestamp": "2026-09-26T05:01:58.077780Z"} 2026-09-26T05:01:58.077780+00:00 https://vulnerability.circl.lu/sighting/9f69aaf7-93b4-4c0e-a41d-e752b18bae7c/export 2026-09-27T21:34:35.314126+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9f69aaf7-93b4-4c0e-a41d-e752b18bae7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100582", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwfc6ijy7j2v", "content": "openclaw msteams <2026.8.1 has a HIGH severity bug (CVE-2026-100582) allowing unauthorized channel reads. Upgrade to 2026.8.1+ to block data exposure. https://radar.offseq.com/threat/cve-2026-100582-missing-authorization-in-openclaw-msteams-98e504ab6e11afa6 #OffSeq #Vulnerability #Cybersecurity", "creation_timestamp": "2026-09-26T03:00:27.992966Z"} 2026-09-26T03:00:27.992966+00:00 https://vulnerability.circl.lu/sighting/fc0cb6c7-dd85-4f72-9ff9-580c6d7d3002/export 2026-09-27T21:34:35.314265+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fc0cb6c7-dd85-4f72-9ff9-580c6d7d3002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100582", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117335105540930772", "content": "CVE-2026-100582 (HIGH): openclaw msteams <2026.8.1 has a missing authorization flaw \u2014 low-trust users can bypass channel read allowlists and access restricted data. Patch to 2026.8.1 ASAP. https://radar.offseq.com/threat/cve-2026-100582-missing-authorization-in-openclaw-msteams-98e504ab6e11afa6 #OffSeq #Vuln #OpenClaw #Security", "creation_timestamp": "2026-09-26T03:00:25.881344Z"} 2026-09-26T03:00:25.881344+00:00