https://vulnerability.circl.lu/sightings/feed 2026-08-31T05:18:17.563464+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/dc6307d3-c26c-42df-956b-4a5d5964b3fd/export 2026-08-31T05:18:17.592656+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dc6307d3-c26c-42df-956b-4a5d5964b3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtbgzksx7c26", "content": "CVE-2026-41452 is trending. Hype score 9, currently #3 on cvemon.\n\nKrayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-41452", "creation_timestamp": "2026-08-17T10:00:56.657864Z"} 2026-08-17T10:00:56.657864+00:00 https://vulnerability.circl.lu/sighting/3fe7da0e-d4eb-4b7f-8232-966f9386933c/export 2026-08-31T05:18:17.594767+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3fe7da0e-d4eb-4b7f-8232-966f9386933c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-16T00:00:22.235211Z"} 2026-08-16T00:00:22.235211+00:00 https://vulnerability.circl.lu/sighting/a7dccc5f-72c5-4a43-948e-247a62febdba/export 2026-08-31T05:18:17.594897+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a7dccc5f-72c5-4a43-948e-247a62febdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/I7xd-Kq67NPH6i2L8D3KjrppB3yStp0aHSPNiKmrW8iM8IU", "content": "", "creation_timestamp": "2026-08-16T00:00:21.827892Z"} 2026-08-16T00:00:21.827892+00:00 https://vulnerability.circl.lu/sighting/b9f1fa1f-060d-40f9-a768-49a1ff376a88/export 2026-08-31T05:18:17.594998+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b9f1fa1f-060d-40f9-a768-49a1ff376a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-15T08:00:07.160923Z"} 2026-08-15T08:00:07.160923+00:00 https://vulnerability.circl.lu/sighting/267cb182-1765-45ff-acf2-ed25523dc208/export 2026-08-31T05:18:17.595094+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "267cb182-1765-45ff-acf2-ed25523dc208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "Telegram/I7xd-Kq67NPH6i2L8D3KjrppB3yStp0aHSPNiKmrW8iM8IU", "content": "", "creation_timestamp": "2026-08-15T08:00:06.828359Z"} 2026-08-15T08:00:06.828359+00:00 https://vulnerability.circl.lu/sighting/28b8753a-a601-4ffd-b9ac-90c72880b00a/export 2026-08-31T05:18:17.595187+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "28b8753a-a601-4ffd-b9ac-90c72880b00a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97772", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41452-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 18:36:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41452 \u2014 Krayin CRM unauth installer bypass (X-Requested-With) \u2192 admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T00:00:06.973085Z"} 2026-08-13T00:00:06.973085+00:00 https://vulnerability.circl.lu/sighting/aea7241b-a8c7-4830-86da-aca4ce09c2df/export 2026-08-31T05:18:17.595294+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "aea7241b-a8c7-4830-86da-aca4ce09c2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97772", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41452-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 18:36:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41452 \u2014 Krayin CRM unauth installer bypass (X-Requested-With) \u2192 admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T20:00:03.512592Z"} 2026-08-12T20:00:03.512592+00:00 https://vulnerability.circl.lu/sighting/b1ac62ed-25de-4c69-aafc-02daf2111532/export 2026-08-31T05:18:17.595395+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b1ac62ed-25de-4c69-aafc-02daf2111532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msadpzw6dd2i", "content": "CVE-2026-41452\nAn attacker can access Krayin CRM's admin account and data without a password. This happens when the CRM is being installed. To fix this, update Krayin CRM to the latest version or apply a patch provided by the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T06:04:04.307964Z"} 2026-08-04T06:04:04.307964+00:00