https://vulnerability.circl.lu/sightings/feed 2026-08-20T09:33:23.643575+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f201ea4e-0dc4-4bd3-b1c7-3e6d10830f07/export 2026-08-20T09:33:23.666896+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f201ea4e-0dc4-4bd3-b1c7-3e6d10830f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46495", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr3efcczps2d", "content": "\u300cOpenDJ\u300d\u306b\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u4fee\u6b63\n\nOpen Identity Platform\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30b5\u30fc\u30d0\u300cOpenDJ\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u8106\u5f31\u6027\u304c\u4fee\u6b63\u3055\u308c\u305f\u3002\n\n\u300cJMX Connection Handler\u300d\u3092\u6709\u52b9\u5316\u3057\u3066\u304a\u308a\u3001\u300cJMX RMI\u30b3\u30cd\u30af\u30bf\u300d\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u5834\u5408\u306b\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306e\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u306b\u8d77\u56e0\u3059\u308b\u300cCVE-2026-46495\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\n\n\u5b9f\u884c\u6642\u306e\u30af\u30e9\u30b9\u30d1\u30b9\u3084Java\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u3088\u308a\u5f71\u97ff\u306f\u5909\u5316\u3059\u308b\u304c\u3001\u4efb\u610f\u306eJava\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u3092\u30b5\u30fc\u30d0\u4e0a\u3067\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u3057\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055...", "creation_timestamp": "2026-07-20T13:07:29.467998Z"} 2026-07-20T13:07:29.467998+00:00 https://vulnerability.circl.lu/sighting/0a0a6097-7fe5-4fce-8998-b78c26bdff81/export 2026-08-20T09:33:23.668683+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0a0a6097-7fe5-4fce-8998-b78c26bdff81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46490", "type": "published-proof-of-concept", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-18T00:00:09.643516Z"} 2026-07-18T00:00:09.643516+00:00 https://vulnerability.circl.lu/sighting/f91c2284-664e-473f-9a6e-dba882d3efc0/export 2026-08-20T09:33:23.668776+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f91c2284-664e-473f-9a6e-dba882d3efc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46490", "type": "seen", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-17T00:00:41.962029Z"} 2026-07-17T00:00:41.962029+00:00 https://vulnerability.circl.lu/sighting/7ab18eea-4383-4215-a755-cd152e78130e/export 2026-08-20T09:33:23.668842+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7ab18eea-4383-4215-a755-cd152e78130e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46490", "type": "seen", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-16T19:00:25.708042Z"} 2026-07-16T19:00:25.708042+00:00 https://vulnerability.circl.lu/sighting/b661c689-a266-4ed5-9932-071e6913843b/export 2026-08-20T09:33:23.668905+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b661c689-a266-4ed5-9932-071e6913843b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46490", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46490-samlify-SAML-Attribute-Injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 19:24:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-46490 \u2014 samlify <2.13.0 SAML AttributeValue XML injection -> signed-assertion privilege escalation. Self-contained PoC, verified e2e.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:25.623374Z"} 2026-07-15T00:00:25.623374+00:00 https://vulnerability.circl.lu/sighting/29ad1cd7-6e15-4dc7-ae69-db01f5e9adcc/export 2026-08-20T09:33:23.668974+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "29ad1cd7-6e15-4dc7-ae69-db01f5e9adcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46490", "type": "seen", "source": "https://t.me/GithubRedTeam/91344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46490-samlify-SAML-Attribute-Injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 19:24:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-46490 \u2014 samlify <2.13.0 SAML AttributeValue XML injection -> signed-assertion privilege escalation. Self-contained PoC, verified e2e.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:32.790812Z"} 2026-07-14T00:00:32.790812+00:00 https://vulnerability.circl.lu/sighting/24e40efb-54b7-4947-95d2-f8064b0a2508/export 2026-08-20T09:33:23.669038+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "24e40efb-54b7-4947-95d2-f8064b0a2508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46490", "type": "seen", "source": "https://t.me/GithubRedTeam/91344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46490-samlify-SAML-Attribute-Injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 19:24:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-46490 \u2014 samlify <2.13.0 SAML AttributeValue XML injection -> signed-assertion privilege escalation. Self-contained PoC, verified e2e.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:16.167541Z"} 2026-07-13T22:00:16.167541+00:00 https://vulnerability.circl.lu/sighting/74acffe2-63ba-4249-a5fd-91e0166883ab/export 2026-08-20T09:33:23.669099+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "74acffe2-63ba-4249-a5fd-91e0166883ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46490", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mofr6ky2jf22", "content": "\ud83d\udea8 Luka w samlify (CVE-2026-46490): Eskalacja uprawnie\u0144 w systemach SSO Node.js\n\nWykryto luk\u0119 w popularnej bibliotece `samlify` do obs\u0142ugi SAML. Umo\u017cliwia ona eskalacj\u0119 uprawnie\u0144 przez wstrzykni\u0119cie\n\nhttps://cyberowi.pl/luka-w-samlify-cve-2026-46490-eskalacja-uprawnien-w/\n\n#cyberbezpieczenstwo", "creation_timestamp": "2026-06-16T12:08:10.001083Z"} 2026-06-16T12:08:10.001083+00:00 https://vulnerability.circl.lu/sighting/ad7a8010-be0e-4205-933d-1c43b624a626/export 2026-08-20T09:33:23.669164+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ad7a8010-be0e-4205-933d-1c43b624a626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46491", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvj6kzs4z2r", "content": "\ud83d\udfe0 CVE-2026-46491 - High (8.6)\n\nSimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46491/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T01:01:39.389713Z"} 2026-06-10T01:01:39.389713+00:00 https://vulnerability.circl.lu/sighting/6ab0dbff-156f-41b7-994b-fd7e3f6b1713/export 2026-08-20T09:33:23.669224+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6ab0dbff-156f-41b7-994b-fd7e3f6b1713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvihvh6372u", "content": "CVE-2026-46491 - SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion\nCVE ID : CVE-2026-46491\n \n Published : June 10, 2026, 12:16 a.m. | 20\u00a0minutes ago\n \n Description : SimpleSAMLphp-casserver is ...", "creation_timestamp": "2026-06-10T00:48:56.271496Z"} 2026-06-10T00:48:56.271496+00:00