https://vulnerability.circl.lu/sightings/feed 2026-09-18T20:06:07.746091+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/669718be-d6cc-48eb-a0d3-c98d3d0b360e/export 2026-09-18T20:06:07.768202+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "669718be-d6cc-48eb-a0d3-c98d3d0b360e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54618", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqx63tmuz2r", "content": "CVE-2026-54618 - obsidian-web-mcp\nVersions of Obsidian Web MCP before 0.2.0 let a remote user obtain a code that can be exchanged for a fixed secret, bypassing any login or permission check. With that secret the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jimprosser #CVE #infosec", "creation_timestamp": "2026-09-18T00:50:07.853213Z"} 2026-09-18T00:50:07.853213+00:00 https://vulnerability.circl.lu/sighting/46b2dc58-965c-4637-818b-88e7870ce428/export 2026-09-18T20:06:07.771318+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "46b2dc58-965c-4637-818b-88e7870ce428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54618", "type": "seen", "source": "https://gist.github.com/ichintu/6581c4aa6bcac5d92204c3046949ce64", "content": "This cyber threat intelligence briefing highlights critical vulnerabilities, defense frameworks, and emerging security discussions:\n\n**Critical Vulnerabilities & Patches:**\n- **Obsidian Web MCP (CVE-2026-54618, CVSS 9.4):** Allows unauthenticated vault access via flawed OAuth flows; fixed in v0.2.0.\n- **Cisco ISE (CVE-2026-76460, CVSS 10.0):** Actively exploited zero-day granting root access through an unauthenticated API; emergency patches released alongside fixes for 21+ other ISE flaws and related firewall products.\n- **Dell (Advisory AV26-934):** Covers multiple products (Networking OS10, OMSA, ECS, DUP, Wyse, DRM); administrators are urged to apply updates promptly.\n\n**Infrastructure & Policy:**\n- A new framework standardizes Kubernetes admission control and supply chain verification in air-gapped environments using DSSE-signed evidence, policy-based filtering, and zero-telemetry data retention for compliance reporting.\n\n**Community & Analysis:**\n- Featured discussions cover state-led information operations and how AI advancements may soon make personal internet history fully attributable.\n\n**Bottom Line:** Immediate patching is critical for Obsidian, Cisco, and Dell systems, while organizations are exploring stricter, air-gapped K8s security policies and monitoring the broader implications of AI and state information campaigns.", "creation_timestamp": "2026-09-18T00:02:10.533783Z"} 2026-09-18T00:02:10.533783+00:00 https://vulnerability.circl.lu/sighting/bc0fdf32-47b3-473d-b873-9fa237d23cd8/export 2026-09-18T20:06:07.771497+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bc0fdf32-47b3-473d-b873-9fa237d23cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54618", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqo3jzrrg25", "content": "\ud83d\udea8 CVE-2026-54618 \u2014 CVSS 9.4 CRITICAL\n\nObsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54618\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T22:07:40.168800Z"} 2026-09-17T22:07:40.168800+00:00