https://vulnerability.circl.lu/sightings/feed 2026-10-12T08:05:13.869413+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/678bba19-9977-4044-8213-9fc722ca3180/export 2026-10-12T08:05:13.898026+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "678bba19-9977-4044-8213-9fc722ca3180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108860", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxmzrgctrd2b", "content": "\ud83d\udd34 CVE-2026-108860 - Critical (9.1)\n\nBotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticate...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108860/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-11T22:16:29.013602Z"} 2026-10-11T22:16:29.013602+00:00 https://vulnerability.circl.lu/sighting/8f5598a5-f284-468c-b385-a209204c2ea2/export 2026-10-12T08:05:13.900550+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8f5598a5-f284-468c-b385-a209204c2ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxmf56aqmh27", "content": "\ud83d\udea8 CVE-2026-108860 \u2014 CVSS 9.3 CRITICAL\n\nBotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-11T16:07:14.059699Z"} 2026-10-11T16:07:14.059699+00:00 https://vulnerability.circl.lu/sighting/73b733cd-c982-475f-afe2-f3ef3bad4862/export 2026-10-12T08:05:13.900708+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "73b733cd-c982-475f-afe2-f3ef3bad4862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108860", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxm75k4qmz22", "content": "CVE-2026-108860 - botsharp\nBotSharp up to version 5.2.0 includes a default secret that is used to sign login tokens. Because the secret is fixed and publicly known, a remote attacker can create a valid\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#botsharp #scisharp #CVE #infosec", "creation_timestamp": "2026-10-11T14:20:04.225658Z"} 2026-10-11T14:20:04.225658+00:00 https://vulnerability.circl.lu/sighting/32d16363-754d-4cfa-a0c4-6923e48c27ba/export 2026-10-12T08:05:13.900821+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "32d16363-754d-4cfa-a0c4-6923e48c27ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108860", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117422572316335892", "content": "CVE-2026-108860 BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json. Attackers can sign tokens with the committed HMAC secret and fixed botsharp issuer and audience to impersonate any known user, including administrators, on Authorize-protected API routes.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108860https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/scisharp-botsharp-public-jwt-signing-keyhttps://github.com/SciSharp/BotSharp/blob/a11ee0317cab5c619df1cb5d0c4fc39d1b6e30b4/src/WebStarter/appsettings.json#L16-L20https://github.com/SciSharp/BotSharp/blob/a11ee0317cab5c619df1cb5d0c4fc39d1b6e30b4/src/Infrastructure/BotSharp.OpenAPI/BotSharpOpenApiExtensions.cs#L46-L57https://github.com/SciSharp/BotSharphttps://www.vulncheck.com/advisories/botsharp-through-5.2.0-authentication-bypass-via-hard-coded-jwt-signing-key#SciSharp #BotSharp#CVE_2026_108860#bot", "creation_timestamp": "2026-10-11T13:44:23.632819Z"} 2026-10-11T13:44:23.632819+00:00