https://vulnerability.circl.lu/sightings/feed 2026-07-18T21:12:38.002602+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fe5eafa6-b35f-402d-88da-d3c3e22e025f/export 2026-07-18T21:12:38.029871+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fe5eafa6-b35f-402d-88da-d3c3e22e025f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "published-proof-of-concept", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-18T00:00:41.794848Z"} 2026-07-18T00:00:41.794848+00:00 https://vulnerability.circl.lu/sighting/c3a02fc0-9ac2-4d23-b88d-c3b44b4afcfc/export 2026-07-18T21:12:38.033114+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c3a02fc0-9ac2-4d23-b88d-c3b44b4afcfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-17T00:00:30.910295Z"} 2026-07-17T00:00:30.910295+00:00 https://vulnerability.circl.lu/sighting/e94b7b91-7b3e-4c1f-9a85-595593dfe261/export 2026-07-18T21:12:38.033269+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e94b7b91-7b3e-4c1f-9a85-595593dfe261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-16T19:00:15.474871Z"} 2026-07-16T19:00:15.474871+00:00 https://vulnerability.circl.lu/sighting/4af92b99-4cec-41cf-a13c-d4f643d6406b/export 2026-07-18T21:12:38.033378+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4af92b99-4cec-41cf-a13c-d4f643d6406b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40473\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:16:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:33.644116Z"} 2026-07-15T00:00:33.644116+00:00 https://vulnerability.circl.lu/sighting/2fe31851-d00b-4b6b-a9f2-0a90546fcdd3/export 2026-07-18T21:12:38.033493+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2fe31851-d00b-4b6b-a9f2-0a90546fcdd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://t.me/GithubRedTeam/92636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40473\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:16:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:10.029821Z"} 2026-07-14T00:00:10.029821+00:00 https://vulnerability.circl.lu/sighting/0f031d20-6802-4bb3-80b5-9240aa8867ef/export 2026-07-18T21:12:38.033615+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0f031d20-6802-4bb3-80b5-9240aa8867ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://t.me/GithubRedTeam/92636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40473\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:16:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.675865Z"} 2026-07-13T22:00:06.675865+00:00 https://vulnerability.circl.lu/sighting/a1c1da05-1389-4cb8-beb1-b377e9d26dae/export 2026-07-18T21:12:38.033758+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a1c1da05-1389-4cb8-beb1-b377e9d26dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/foojay.io/post/3mm4iszh7u224", "content": "New post from @brianvermeer.nl on Foojay: A practical look at the Thymeleaf template injection vulnerability (CVE-2026-40478) and why understanding the context matters more than the panic.\n\nfoojay.io/today/dont-p...\n\n#Java #Security #Thymeleaf", "creation_timestamp": "2026-05-18T08:53:27.990287Z"} 2026-05-18T08:53:27.990287+00:00 https://vulnerability.circl.lu/sighting/114fa46a-92cf-42b6-ae21-6868d8e50b75/export 2026-07-18T21:12:38.033868+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "114fa46a-92cf-42b6-ae21-6868d8e50b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4047", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mkompalp7h2d", "content": "Hackers exploited two auth bypass flaws (CVE-2026-3965 & CVE-2026-4047) in Qinglong task scheduler to deploy cryptominers via RCE starting Feb 7. Fix applied after initial mitigation proved insufficient. #Qinglong #RemoteExecution #China", "creation_timestamp": "2026-04-30T03:00:25.778607Z"} 2026-04-30T03:00:25.778607+00:00 https://vulnerability.circl.lu/sighting/bd55fe42-a878-44d4-a505-863439b0967c/export 2026-07-18T21:12:38.033974+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bd55fe42-a878-44d4-a505-863439b0967c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mkoildefdb2g", "content": "The latest update for #Snyk includes \"'A Mini Shai-Hulud Has Appeared': Bun-Based Stealer Hits #SAP @cap-js and mbt npm Packages\" and \"Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)\".\n \n#CyberSecurity #DevOps #OpenSource https://opsmtrs.com/3yzKsZo", "creation_timestamp": "2026-04-30T01:46:38.614063Z"} 2026-04-30T01:46:38.614063+00:00 https://vulnerability.circl.lu/sighting/4b9e9881-5eb9-4c76-9fb3-47d697340d77/export 2026-07-18T21:12:38.034081+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4b9e9881-5eb9-4c76-9fb3-47d697340d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/brianvermeer.nl/post/3mknezhgwys25", "content": "A high CVSS score does not always mean \"all hands on deck.\" It is wiser to assess the situation first before rushing into stress mode. For example, examine CVE-2026-40478 in Thymeleaf.\n\nsnyk.io/blog/thymele...", "creation_timestamp": "2026-04-29T15:10:23.346735Z"} 2026-04-29T15:10:23.346735+00:00