https://vulnerability.circl.lu/sightings/feed 2026-09-28T01:29:51.263858+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/81f64a61-eb16-417f-aad7-f7900f42ba7d/export 2026-09-28T01:29:51.294009+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "81f64a61-eb16-417f-aad7-f7900f42ba7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42284", "type": "seen", "source": "https://t.me/shimiscyberworld/1280", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-07\n\n\ud83d\udcca 32 vulnerabilities detected today \u2014 8 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2026-6508 (9.8) \u2014 CVE-2026-6508: Liderahenk Origin Validation Error Allows\u2026\n \u2022 CVE-2026-7414 (9.8) \u2014 Yarbo Firmware v2.3.9 Critical Hardcoded Credential\u2026\n \u2022 CVE-2026-7415 (9.8) \u2014 CVE-2026-7415: Yarbo Robot Firmware Exposes Sensitive Data\u2026\n \u2022 CVE-2026-37709 (9.8) \u2014 Snipe-IT CVE-2026-37709: Critical RCE via Insecure\u2026\n \u2022 CVE-2026-5791 (9.6) \u2014 DivvyDrive Critical CSRF Vulnerability: CVE-2026-5791 Poses\u2026\n \u2022 CVE-2026-41589 (9.6) \u2014 CVE-2026-41589: Critical Path Traversal in Wish SSH Server\u2026\n \u2022 CVE-2026-6795 (9.6) \u2014 DivvyDrive Open Redirect Vulnerability CVE-2026-6795 Rated\u2026\n \u2022 CVE-2026-41902 (9.1) \u2014 CVE-2026-41902: FreeScout Invite Hash Vulnerability Allows\u2026\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2026-3953 (8.8) \u2014 CVE-2026-3953: Gosoft Proticaret E-Commerce XSS\u2026\n \u2022 CVE-2026-5784 (8.8) \u2014 DivvyDrive Stored XSS Vulnerability (CVE-2026-5784) Poses\u2026\n \u2022 CVE-2026-6002 (8.8) \u2014 DivvyDrive XSS Vulnerability (CVE-2026-6002) Poses High Risk\n \u2022 CVE-2026-42215 (8.8) \u2014 CVE-2026-42215: GitPython Arbitrary Command Execution\u2026\n \u2022 CVE-2026-41505 (8.7) \u2014 CVE-2026-41505: RELATE Courseware Package Suffers\u2026\n \u2022 CVE-2025-14341 (8.3) \u2014 CVE-2025-14341: DivvyDrive Vulnerability Allows Excessive\u2026\n \u2022 CVE-2026-41490 (8.3) \u2014 Dagster Orchestration Platform Vulnerable to SQL Injection\u2026\n \u2022 CVE-2026-41422 (8.3) \u2014 Daptin Headless CMS SQLi Puts Data at High Risk\n \u2022 CVE-2026-42284 (8.1) \u2014 CVE-2026-42284: GitPython Vulnerability Allows Remote Code\u2026\n \u2022 CVE-2026-42214 (7.8) \u2014 NotepadNext CVE-2026-42214: Arbitrary Command Execution via\u2026\n \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:13.589499Z"} 2026-09-12T10:00:13.589499+00:00 https://vulnerability.circl.lu/sighting/9ca37428-6c46-429d-b5a4-7e04ec11dfef/export 2026-09-28T01:29:51.296765+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9ca37428-6c46-429d-b5a4-7e04ec11dfef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42288", "type": "seen", "source": "https://t.me/shimiscyberworld/1432", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42288 \u2014 CVSS 10\nChurchCRM RCE: Unpatched Setup Wizard Leaves Systems Exposed\n\nCVE-2026-42288 \u2014 ChurchCRM is an open-source church management system. Prior to 7.3.2, The fix for CVE-2026-39337 is incomplete. The pre-authentication remote code execution vulner\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve #critical #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42288 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:05.406742Z"} 2026-09-12T10:00:05.406742+00:00 https://vulnerability.circl.lu/sighting/f9954a55-4930-463e-b7d7-1530b2ef67d3/export 2026-09-28T01:29:51.296911+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f9954a55-4930-463e-b7d7-1530b2ef67d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42281", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mmyf5hjzdo23", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-42281 MagicMirror\u00b2\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nMagicMirror\u00b2\u306f\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u30e2\u30b8\u30e5\u30e9\u30fc\u578b\u30b9\u30de\u30fc\u30c8\u30df\u30e9\u30fc\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3067\u3059\u3002\u30d0\u30fc\u30b8\u30e7\u30f32.36.0\u4ee5\u524d\u3067\u306f\u3001/cors\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u306e\u8106\u5f31\u6027\u304c\u5b58\u5728\u3057\u3001", "creation_timestamp": "2026-05-29T11:02:26.824054Z"} 2026-05-29T11:02:26.824054+00:00 https://vulnerability.circl.lu/sighting/b0f11730-cde0-442a-bab6-0fcdff0cae80/export 2026-09-28T01:29:51.297023+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b0f11730-cde0-442a-bab6-0fcdff0cae80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42281", "type": "seen", "source": "https://t.me/realcodeb0ss/425", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-42281\n\n\nFofa : \"MagicMirror\"\n\nShodan : 'http.title:\"MagicMirror\"'\n\n\nEnjoy;", "creation_timestamp": "2026-05-15T11:29:12.000000Z"} 2026-05-15T11:29:12+00:00 https://vulnerability.circl.lu/sighting/180f9fc5-ee2e-4498-82cc-e1c79fbfe4cd/export 2026-09-28T01:29:51.297121+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "180f9fc5-ee2e-4498-82cc-e1c79fbfe4cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42281", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mltfjefcgr2h", "content": "CVE-2026-42281 - MagicMirror\u00b2: Unauthenticated SSRF via /cors endpoint\nCVE ID : CVE-2026-42281\n \n Published : May 14, 2026, 4:16 p.m. | 14\u00a0minutes ago\n \n Description : MagicMirror\u00b2 is an open source modular smart mirror platform. Prior to 2.36.0, an unauthenticated Server-Side...", "creation_timestamp": "2026-05-14T18:00:21.711965Z"} 2026-05-14T18:00:21.711965+00:00 https://vulnerability.circl.lu/sighting/1ef6d8a1-dd05-4a23-bf7d-5a9e6defb4f2/export 2026-09-28T01:29:51.297220+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1ef6d8a1-dd05-4a23-bf7d-5a9e6defb4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42281", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116573877881665674", "content": "\ud83d\udea8 CVE-2026-42281: CRITICAL SSRF in MagicMirror\u00b2 (<2.36.0)! /cors endpoint lets unauthenticated attackers scan internal networks & exfiltrate environment secrets. Upgrade to 2.36.0+ now! https://radar.offseq.com/threat/cve-2026-42281-cwe-918-server-side-request-forgery-3c9e7191 #OffSeq #SSRF #MagicMirror #Vuln", "creation_timestamp": "2026-05-14T16:31:25.612976Z"} 2026-05-14T16:31:25.612976+00:00 https://vulnerability.circl.lu/sighting/d84cc6c1-6a99-493e-ad2f-ebdcea2b641a/export 2026-09-28T01:29:51.297316+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d84cc6c1-6a99-493e-ad2f-ebdcea2b641a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42288", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mlph3pnr4j2c", "content": "Fresh CVE alert: CVE-2026-42288 Security Alert: CRITICAL Vulnerability\n\nCVE-2026-42288 CRITICAL alert. Immediate action\u2026\n\nhttps://cyberlensai.com/news/security-alert-cve-2026-42288\n\n#CyberSecurity #AppSec #VulnerabilityManagement", "creation_timestamp": "2026-05-13T04:17:52.329662Z"} 2026-05-13T04:17:52.329662+00:00 https://vulnerability.circl.lu/sighting/dadeed1b-2fee-4eca-a970-300704a5c02c/export 2026-09-28T01:29:51.297418+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dadeed1b-2fee-4eca-a970-300704a5c02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42289", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpdivu7g22z", "content": "\ud83d\udfe0 CVE-2026-42289 - High (8.8)\n\nChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes us...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42289/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-13T03:13:40.470690Z"} 2026-05-13T03:13:40.470690+00:00 https://vulnerability.circl.lu/sighting/3840bc64-a2c3-416a-bc0b-2769860b134b/export 2026-09-28T01:29:51.297519+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3840bc64-a2c3-416a-bc0b-2769860b134b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42288", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpdimrrqk2r", "content": "\ud83d\udd34 CVE-2026-42288 - Critical (10)\n\nChurchCRM is an open-source church management system. Prior to 7.3.2, The fix for CVE-2026-39337 ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42288/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-13T03:13:32.970227Z"} 2026-05-13T03:13:32.970227+00:00 https://vulnerability.circl.lu/sighting/cfd9fc8f-54c9-4979-b37b-01fba00e446a/export 2026-09-28T01:29:51.297620+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cfd9fc8f-54c9-4979-b37b-01fba00e446a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42288", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlp5rxbida2n", "content": "CVE-2026-42288 - ChurchCRM: Incomplete fix for CVE-2026-39337: Unauthenticated RCE in Setup Wizard via unsanitized DB_PASSWORD\nCVE ID : CVE-2026-42288\n \n Published : May 12, 2026, 11:16 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : ChurchCRM is an open-source church management...", "creation_timestamp": "2026-05-13T01:31:22.233467Z"} 2026-05-13T01:31:22.233467+00:00