https://vulnerability.circl.lu/sightings/feed 2026-09-12T15:31:26.942978+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/460721a5-bb4f-4a8b-8f4f-8b0162b34781/export 2026-09-12T15:31:26.970928+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "460721a5-bb4f-4a8b-8f4f-8b0162b34781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47839", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvajqyyupa2p", "content": "\ud83d\udea8 CVE-2026-47839 \u2014 CVSS 9.2 CRITICAL\n\nA vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47839\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T12:07:34.373105Z"} 2026-09-11T12:07:34.373105+00:00 https://vulnerability.circl.lu/sighting/fd15e599-3c92-4a12-bf9a-eff95fca39f3/export 2026-09-12T15:31:26.972966+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fd15e599-3c92-4a12-bf9a-eff95fca39f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/haaenqkc7v32z", "content": "CVE-2026-47839 - Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin\nCVE ID : CVE-2026-47839\n \n Published : Sept. 11, 2026, 10:16 a.m. | 39\u00a0minutes ago\n \n Description : A vulnerability allows users authenticating through a federated OIDC provider to obtai...", "creation_timestamp": "2026-09-11T11:39:57.907877Z"} 2026-09-11T11:39:57.907877+00:00 https://vulnerability.circl.lu/sighting/e17cfc77-d9a6-46e6-90e5-a12006542d65/export 2026-09-12T15:31:26.973074+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e17cfc77-d9a6-46e6-90e5-a12006542d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47839", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvagkeljaz2y", "content": "CVE-2026-47839 - uaa\nIn Cloud Foundry UAA (and deployments using cf-deployment), a misconfiguration lets users who sign in through an external OpenID Connect provider obtain the admin scope even when the provider is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#uaa #CVE #infosec", "creation_timestamp": "2026-09-11T11:10:11.295658Z"} 2026-09-11T11:10:11.295658+00:00 https://vulnerability.circl.lu/sighting/b3f6e407-e318-4d26-a2f3-675bdc9759fb/export 2026-09-12T15:31:26.973158+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b3f6e407-e318-4d26-a2f3-675bdc9759fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47839", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvaede5jer2f", "content": "Cloud Foundry UAA faces a CRITICAL vuln (CVE-2026-47839, CVSS 9.2): OIDC users can escalate to uaa.admin via wildcard group mapping. Check configs & stay tuned for patches. https://radar.offseq.com/threat/cve-2026-47839-vulnerability-in-cloud-foundry-foundation-uaa-fe07e0d8fe092d86 #OffSeq #Cloud...", "creation_timestamp": "2026-09-11T10:30:28.901543Z"} 2026-09-11T10:30:28.901543+00:00 https://vulnerability.circl.lu/sighting/c62601fd-aa6e-4801-9ba0-2e76cbf8a5dc/export 2026-09-12T15:31:26.973241+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c62601fd-aa6e-4801-9ba0-2e76cbf8a5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47839", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117251940382716886", "content": "Cloud Foundry UAA hit by CRITICAL vuln (CVE-2026-47839, CVSS 9.2): OIDC users with wildcard group mapping can gain uaa.admin. Review configs, avoid wildcards, and monitor for patches. https://radar.offseq.com/threat/cve-2026-47839-vulnerability-in-cloud-foundry-foundation-uaa-fe07e0d8fe092d86 #OffSeq #CloudSecurity #CVE202647839 #Infosec", "creation_timestamp": "2026-09-11T10:30:26.186466Z"} 2026-09-11T10:30:26.186466+00:00