https://vulnerability.circl.lu/sightings/feed 2026-10-08T20:02:41.891068+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/76074f89-667e-42c0-aa02-3530f3093322/export 2026-10-08T20:02:41.919624+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "76074f89-667e-42c0-aa02-3530f3093322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117236485519105661", "content": "CVE-2026-48019: CRLF injection in Laravel (<12.60.0, <13.10.0) may let unauthenticated attackers tamper with outbound emails via user-supplied addresses. CVSS 8.9. No patch confirmed\u2014upgrade to 12.60.0 or 13.10.0 immediately. Details: https://www.valtersit.com/cve/CVE-2026-48019/", "creation_timestamp": "2026-09-08T17:00:07.322014Z"} 2026-09-08T17:00:07.322014+00:00 https://vulnerability.circl.lu/sighting/616a7ff5-e66c-4dcc-90c5-666c2b03d6cd/export 2026-10-08T20:02:41.921917+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "616a7ff5-e66c-4dcc-90c5-666c2b03d6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muzipahvzt2z", "content": "CVE-2026-48019: CRLF injection in Laravel (<12.60.0, <13.10.0) may let unauthenticated attackers tamper with outbound emails via user-supplied addresses. CVSS 8.9. No patch confirmed\u2014upgrade to 12.60.0 or 13.10.0 immediately. Details: https://www.valtersit.com/cve/CVE-2026-48019/", "creation_timestamp": "2026-09-08T17:00:03.818515Z"} 2026-09-08T17:00:03.818515+00:00 https://vulnerability.circl.lu/sighting/f4b8fb5b-630d-40e0-98d0-50c52790ab13/export 2026-10-08T20:02:41.922054+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f4b8fb5b-630d-40e0-98d0-50c52790ab13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muqme6cngb2t", "content": "Laravel 12.60.0/13.10.0\u3088\u308a\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u30e1\u30fc\u30eb\u691c\u8a3c\u306eCRLF\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u63d0\u4f9b\u30a2\u30c9\u30ec\u30b9\u306b\u30e1\u30fc\u30eb\u3092\u9001\u308b\u30a2\u30d7\u30ea\u304c\u5f71\u97ff\u3092\u53d7\u3051\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u2026\nCVE-2026-48019 CVSS 8.9 | HIGH", "creation_timestamp": "2026-09-05T04:11:29.271992Z"} 2026-09-05T04:11:29.271992+00:00 https://vulnerability.circl.lu/sighting/4516e089-8dfb-4c43-89e1-e52d402de801/export 2026-10-08T20:02:41.922166+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4516e089-8dfb-4c43-89e1-e52d402de801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muq6dapvqu2m", "content": "\ud83d\udfe0 CVE-2026-48019 - High (8.9)\n\nLaravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48019/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T00:00:26.382097Z"} 2026-09-05T00:00:26.382097+00:00 https://vulnerability.circl.lu/sighting/69ba7524-8704-4a39-8205-31f13de3df55/export 2026-10-08T20:02:41.922263+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "69ba7524-8704-4a39-8205-31f13de3df55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48017", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moeiuuv7po2c", "content": "CVE-2026-48017 - DbGate: Remote Code Execution via functionName injection in loadReader endpoint\nCVE ID : CVE-2026-48017\n \n Published : June 15, 2026, 10:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : DbGate is cross-platform database manager. In versions 7.1.8 and prior, t...", "creation_timestamp": "2026-06-16T00:06:08.189675Z"} 2026-06-16T00:06:08.189675+00:00 https://vulnerability.circl.lu/sighting/94159b62-5ff8-43a0-a420-648cab199bb5/export 2026-10-08T20:02:41.922371+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "94159b62-5ff8-43a0-a420-648cab199bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48017", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moefa77ofs2n", "content": "\ud83d\udfe0 CVE-2026-48017 - High (8.8)\n\nDbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-re...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48017/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T23:00:53.753212Z"} 2026-06-15T23:00:53.753212+00:00 https://vulnerability.circl.lu/sighting/8e1560aa-f28d-4e67-b4a3-3f5e946bf18d/export 2026-10-08T20:02:41.922469+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8e1560aa-f28d-4e67-b4a3-3f5e946bf18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "published-proof-of-concept", "source": "Telegram/z4CK41gKHpfLp7kaaAJJNGb1sNYljSZXLMSwKCJ0b-jo3nA", "content": "", "creation_timestamp": "2026-06-14T09:00:04.000000Z"} 2026-06-14T09:00:04+00:00 https://vulnerability.circl.lu/sighting/736a1a26-4256-42ef-8a4f-efbc2956a890/export 2026-10-08T20:02:41.922574+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "736a1a26-4256-42ef-8a4f-efbc2956a890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48017", "type": "published-proof-of-concept", "source": "Telegram/rpU8_0BAIqup9jbze7w25ozrvXdkaGKGrrCImb0BnEmBLEk", "content": "", "creation_timestamp": "2026-06-13T15:00:07.000000Z"} 2026-06-13T15:00:07+00:00 https://vulnerability.circl.lu/sighting/3f4d6c9d-4c6a-4df5-bd61-a0722e77892e/export 2026-10-08T20:02:41.922668+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3f4d6c9d-4c6a-4df5-bd61-a0722e77892e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48017", "type": "published-proof-of-concept", "source": "Telegram/IcL1XemrMUM6U-pBPK8371ehYGh5Dbmz448pfDWO5N1krLU", "content": "", "creation_timestamp": "2026-06-13T11:00:13.000000Z"} 2026-06-13T11:00:13+00:00 https://vulnerability.circl.lu/sighting/5fd50abe-2bb4-43e3-a304-ad05171af1d3/export 2026-10-08T20:02:41.922763+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5fd50abe-2bb4-43e3-a304-ad05171af1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48019", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mni47aj5bx2s", "content": "Critical #Laravel CRLF Injection Vulnerability (CVE-2026-48019) allows attackers to manipulate outbound emails. Upgrade to versions 13.10.0 or 12.60.0 immediately! #CyberSecurity #WebSecurity Link: thedailytechfeed.com/critical-lar...", "creation_timestamp": "2026-06-04T17:04:45.023169Z"} 2026-06-04T17:04:45.023169+00:00