https://vulnerability.circl.lu/sightings/feed 2026-09-10T23:32:16.963395+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1a4e7a00-1baf-406f-bcd4-b93755917d33/export 2026-09-10T23:32:16.987265+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1a4e7a00-1baf-406f-bcd4-b93755917d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31020", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117233536308063782", "content": "CVE-2026-31020: SSTI to RCE in DocsGPT \u22640.15.0 via unsanitized Jinja prompts. CVSS 9.8, unpatched. No auth needed. Patch? None yet\u2014disable custom prompts or isolate instance now. Details: https://www.valtersit.com/cve/CVE-2026-31020/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-08T04:30:05.957867Z"} 2026-09-08T04:30:05.957867+00:00 https://vulnerability.circl.lu/sighting/92ff9459-deb9-49d4-9990-318250b732cd/export 2026-09-10T23:32:16.989133+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "92ff9459-deb9-49d4-9990-318250b732cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31020", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muy6s55sty27", "content": "CVE-2026-31020: SSTI to RCE in DocsGPT \u22640.15.0 via unsanitized Jinja prompts. CVSS 9.8, unpatched. No auth needed. Patch? None yet\u2014disable custom prompts or isolate instance now. Details: https://www.valtersit.com/cve/CVE-2026-31020/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-08T04:30:03.730420Z"} 2026-09-08T04:30:03.730420+00:00 https://vulnerability.circl.lu/sighting/370782a3-657f-4e8c-a07a-bd93ba5188cd/export 2026-09-10T23:32:16.989248+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "370782a3-657f-4e8c-a07a-bd93ba5188cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31020", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqvvmznns2k", "content": "\ud83d\udd34 CVE-2026-31020 - Critical (9.8)\n\nIn DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-31020/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T07:02:19.270798Z"} 2026-09-05T07:02:19.270798+00:00 https://vulnerability.circl.lu/sighting/8d53db7c-0a1b-4084-bf79-a46209276e6d/export 2026-09-10T23:32:16.989345+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8d53db7c-0a1b-4084-bf79-a46209276e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31020", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muprdzukii2p", "content": "\ud83d\udea8 CVE-2026-31020 \u2014 CVSS 9.8 CRITICAL\n\nIn DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define p...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-31020\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T20:08:13.564372Z"} 2026-09-04T20:08:13.564372+00:00 https://vulnerability.circl.lu/sighting/7c5a79ea-15c2-49ba-b727-619ec885bef7/export 2026-09-10T23:32:16.989433+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7c5a79ea-15c2-49ba-b727-619ec885bef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31020", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muponykjjc25", "content": "CVE-2026-31020\nDocsGPT versions up to 0.15 let users create their own chatbot prompts, but the software does not check or protect the content of those prompts. This means a remote attacker could insert special code that the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-04T19:20:06.753457Z"} 2026-09-04T19:20:06.753457+00:00