https://vulnerability.circl.lu/sightings/feed 2026-07-06T20:43:45.374517+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b1dfaf9a-5d58-4e6d-b6d8-5a40a61a45fb/export 2026-07-06T20:43:45.402164+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b1dfaf9a-5d58-4e6d-b6d8-5a40a61a45fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48204", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpywpibcwx2h", "content": "CVE-2026-48204 - apache camel\nApache Camel's MongoDB component allows unauthenticated HTTP clients to switch MongoDB operations, including deleting files, without a password. This means that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecamel #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-06T20:32:05.711354Z"} 2026-07-06T20:32:05.711354+00:00 https://vulnerability.circl.lu/sighting/6a721f9c-d277-417a-9070-0e86f9b83e39/export 2026-07-06T20:43:45.404950+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6a721f9c-d277-417a-9070-0e86f9b83e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48204", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfbr7xxk2r", "content": "CVE-2026-48204: Apache Camel: Camel-MongoDB-GridFS: The gridfs.* control headers used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to switch the GridFS operation - including destructive file deletion - in the default configuration", "creation_timestamp": "2026-07-05T20:14:52.487008Z"} 2026-07-05T20:14:52.487008+00:00