https://vulnerability.circl.lu/sightings/feed 2026-07-30T00:57:21.024204+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7562de88-c81c-4c6a-b8a8-09eaa9222728/export 2026-07-30T00:57:21.038100+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7562de88-c81c-4c6a-b8a8-09eaa9222728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrssgmegbl2i", "content": "CVE-2026-4672 - Missing Authorization in GitLab\nCVE ID : CVE-2026-4672\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 1...", "creation_timestamp": "2026-07-29T20:49:58.206785Z"} 2026-07-29T20:49:58.206785+00:00 https://vulnerability.circl.lu/sighting/c44831be-452f-4f82-98f3-537131f2c263/export 2026-07-30T00:57:21.040336+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c44831be-452f-4f82-98f3-537131f2c263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46726", "type": "published-proof-of-concept", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "content": "", "creation_timestamp": "2026-07-22T00:00:03.983216Z"} 2026-07-22T00:00:03.983216+00:00 https://vulnerability.circl.lu/sighting/09b1ab0e-63c7-42c1-b423-66f26038a4aa/export 2026-07-30T00:57:21.040475+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "09b1ab0e-63c7-42c1-b423-66f26038a4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46726", "type": "seen", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "content": "", "creation_timestamp": "2026-07-21T00:00:35.642890Z"} 2026-07-21T00:00:35.642890+00:00 https://vulnerability.circl.lu/sighting/59ba9338-5fff-4d67-aecd-9deddc41121d/export 2026-07-30T00:57:21.040588+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "59ba9338-5fff-4d67-aecd-9deddc41121d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46726", "type": "seen", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "content": "", "creation_timestamp": "2026-07-20T18:00:13.002500Z"} 2026-07-20T18:00:13.002500+00:00 https://vulnerability.circl.lu/sighting/fe657d55-308b-4685-bb24-a9f249e62b51/export 2026-07-30T00:57:21.040690+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fe657d55-308b-4685-bb24-a9f249e62b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46726", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93694", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46726\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 12:52:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-46726: Apache Camel camel-vertx-websocket unfiltered inbound header injection enabling SSRF and secret disclosure via property-placeholder resolution (fixed in 4.14.8/4.18.3/4.21.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:52.081145Z"} 2026-07-17T00:00:52.081145+00:00 https://vulnerability.circl.lu/sighting/3f7f4f08-0217-4464-ab9a-b9b3acbf2956/export 2026-07-30T00:57:21.040797+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3f7f4f08-0217-4464-ab9a-b9b3acbf2956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46726", "type": "seen", "source": "https://t.me/GithubRedTeam/93694", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-46726\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 12:52:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-46726: Apache Camel camel-vertx-websocket unfiltered inbound header injection enabling SSRF and secret disclosure via property-placeholder resolution (fixed in 4.14.8/4.18.3/4.21.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T15:00:03.574979Z"} 2026-07-16T15:00:03.574979+00:00 https://vulnerability.circl.lu/sighting/a2df710e-85b1-4129-8326-bd328d3f5d4f/export 2026-07-30T00:57:21.040899+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a2df710e-85b1-4129-8326-bd328d3f5d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46726", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6oxz2kj42i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-46726: \u0440\u0438\u0441\u043a\u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/30ECC73D-C314-464B-A755-45FD0CC1F521", "creation_timestamp": "2026-07-09T03:29:40.195002Z"} 2026-07-09T03:29:40.195002+00:00 https://vulnerability.circl.lu/sighting/33d3d31e-193c-4bcb-83c8-6a5d736234ce/export 2026-07-30T00:57:21.040995+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "33d3d31e-193c-4bcb-83c8-6a5d736234ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46726", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwenys7kc2m", "content": "CVE-2026-46726: Apache Camel: Camel-Vertx-Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling server-side request forgery and disclosure of", "creation_timestamp": "2026-07-05T20:03:52.982162Z"} 2026-07-05T20:03:52.982162+00:00 https://vulnerability.circl.lu/sighting/11530690-25ab-43e0-b09c-ccaa120b54bf/export 2026-07-30T00:57:21.041088+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "11530690-25ab-43e0-b09c-ccaa120b54bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46727", "type": "seen", "source": "https://gist.github.com/alanalvestech/c27d2e789ce815ce3262baa8f8fce26c", "content": "- https://github.com/0xedward/awesome-rails-security\n- https://rubygems.org/pages/security\n- https://kinsta.com/blog/ruby-on-rails-applications/\n- https://www.fastruby.io/blog/rails/security/ruby-security-toolkit.html\n- https://medium.com/@Anita-ihuman/ruby-on-rails-security-best-practices-for-cloud-deployments-on-upcloud-897a3347ddce\n- https://dev.to/rachgrey/the-top-rails-gems-for-cybersecurity-applications-you-should-know-about-131g\n- https://github.com/devise-security/devise-security\n- https://github.com/wardencommunity/warden\n- https://github.com/binarylogic/authlogic\n- https://github.com/omniauth/omniauth\n- https://github.com/jwt/ruby-jwt\n- https://github.com/nsarno/knock\n- https://github.com/ambethia/recaptcha/\n- https://github.com/presidentbeef/brakeman\n- https://github.com/rubysec/bundler-audit\n- https://github.com/rubysec/ruby-advisory-db\n- https://github.com/rubocop/rubocop\n- https://github.com/thesp0nge/dawnscanner\n- https://github.com/flyerhzm/rails_best_practices\n- https://github.com/hawkeyesec/scanner-cli\n- https://github.com/awslabs/git-secrets\n- https://www.guardrails.io/\n- https://hakiri.io/\n- https://report-uri.com/\n- https://groups.google.com/g/rubyonrails-security\n- https://guides.rubyonrails.org/security.html\n- https://github.com/rietta/DeleteMe\n- https://pentesterlab.com/exercises/\n- https://medium.com/kkempin/preventing-security-issues-in-ruby-on-rails-based-on-owasp-cheatsheet-2fbca18b6a85\n- https://github.com/ankane/secure_rails\n- https://ankane.org/sensitive-data-rails\n- https://github.com/ankane/production_rails\n- https://github.com/eliotsykes/rails-security-checklist\n- https://github.com/brunofacca/zen-rails-security-checklist\n- https://www.codementor.io/ruby-on-rails/tutorial/ruby-on-rails-security-best-practices\n- https://www.invicti.com/blog/web-security/ruby-on-rails-security-basics\n- https://www.cloudbees.com/blog/level-up-your-security-in-rails\n- https://rubygarage.org/\n- https://bauland42.com/ruby-on-rails-security-strategy\n- https://www.cloudbees.com/blog/preproduction-checklist-for-a-rails-app\n- https://sloboda-studio.com/blog/ruby-on-rails-security-guide/\n- https://www.honeybadger.io/blog/ruby-security-tutorial-and-rails-security-guide/\n- https://rails-sqli.org/\n- https://codeclimate.com/legacy/rails-insecure-defaults\n- https://www.vdalabs.com/from-the-experts/\n- https://phrack.org/issues/69/12#article\n- https://hackerone.com/ruby?type=team\n- https://rails-bestpractices.com/\n- https://snyk.io/\n- https://www.ruby-lang.org/en/news/2026/05/20/getaddrinfo-cve-2026-46727/\n- https://groups.google.com/g/ruby-security-ann\n- https://www.ruby-lang.org/en/security/\n- https://api.osv.dev/v1/querybatch\n- https://osv.dev/list?q=Rails&ecosystem=\n- https://railsgoat.cktricky.com/\n- https://security.snyk.io/vuln/rubygems\n- https://github.com/OWASP/railsgoat\n- https://github.com/OWASP/railsgoat/wiki\n- https://github.com/OWASP/railsgoat/wiki/Rails-8-Tutorials\n- https://medium.com/@nikoo.asadnejad.work/owasp-top-10-2026-the-most-critical-web-application-security-risks-every-developer-should-d41531188c9a\n- https://github.com/cursor/plugins/blob/main/cursor-team-kit/skills/thermo-nuclear-code-quality-review/SKILL.md?plain=1\n- https://github.com/thoughtbot/top_secret", "creation_timestamp": "2026-06-11T15:27:35.000000Z"} 2026-06-11T15:27:35+00:00 https://vulnerability.circl.lu/sighting/213de919-5aec-4a88-a49f-1ca40b09ab6d/export 2026-07-30T00:57:21.041206+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "213de919-5aec-4a88-a49f-1ca40b09ab6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46725", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mn7wm5x4de2s", "content": "\u3010\u7dca\u6025\u3011CVE-2026-46725 \uff08\u88fd\u54c1\u540d\u30fb\u30d0\u30fc\u30b8\u30e7\u30f3\uff09\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff5c\u5373\u6642\u5bfe\u5fdc\u304c\u5fc5\u8981\n\n\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u653b\u6483\u8005\u304c\u5236\u5fa1\u3059\u308b\u30af\u30c3\u30ad\u30fc\u3092PHP\u306eunserialize()\u95a2\u6570\u306b\u5b89\u5168\u306b\u51e6\u7406\u305b\u305a\u306b\u76f4\u63a5\u6e21\u3059\u3053\u3068\u306b\u8d77\u56e0\u3057\u307e\u3059\u3002\u30ea\u30e2\u30fc\u30c8\u306e\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u306f\u3001", "creation_timestamp": "2026-06-01T11:03:17.691838Z"} 2026-06-01T11:03:17.691838+00:00