https://vulnerability.circl.lu/sightings/feed 2026-09-14T17:53:03.674042+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/daf2f398-1e0f-401c-a819-c4d6ea923596/export 2026-09-14T17:53:03.701907+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "daf2f398-1e0f-401c-a819-c4d6ea923596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6223", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz2qcabjj2j", "content": "CVE-2026-6223 - bihayat app\nThe BiHayat mobile app for Bah\u00e7elievler Municipality (versions 2.1.7 through 07092026) does not limit how many times a user can try to log in, letting an attacker get past the login\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bihayatapp #CVE #infosec", "creation_timestamp": "2026-09-08T12:50:06.101569Z"} 2026-09-08T12:50:06.101569+00:00 https://vulnerability.circl.lu/sighting/6b2f27fb-59ea-4dca-8999-e7fcf41d5dc8/export 2026-09-14T17:53:03.703481+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6b2f27fb-59ea-4dca-8999-e7fcf41d5dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6223", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muwolhdjws2j", "content": "\ud83d\udea8 CVE-2026-6223 \u2014 CVSS 9.4 CRITICAL\n\nImproper restriction of excessive authentication attempts vulnerability in Bah\u00e7elievler Muncipality BiHayat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-6223\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-07T14:07:19.254199Z"} 2026-09-07T14:07:19.254199+00:00 https://vulnerability.circl.lu/sighting/67855ebf-a8c0-439a-a45c-a68d469650c9/export 2026-09-14T17:53:03.703626+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "67855ebf-a8c0-439a-a45c-a68d469650c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6223", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muwktvxnox24", "content": "CVE-2026-6223: Bah\u00e7elievler BiHayat App (v2.1.7+) has a CRITICAL auth bypass flaw \u2014 improper brute-force protection. No patch yet. Tighten access controls and monitor logins. https://radar.offseq.com/threat/cve-2026-6223-cwe-307-improper-restriction-of-excessive-authentication-attempts-in-bahelie...", "creation_timestamp": "2026-09-07T13:00:28.973948Z"} 2026-09-07T13:00:28.973948+00:00 https://vulnerability.circl.lu/sighting/af0c9fd7-7fab-4681-ac85-9ab531b31e6c/export 2026-09-14T17:53:03.703734+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "af0c9fd7-7fab-4681-ac85-9ab531b31e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6223", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117229881004981941", "content": "CRITICAL vuln: CVE-2026-6223 in Bah\u00e7elievler Municipality BiHayat App (v2.1.7+) enables authentication bypass via weak brute-force protections. No vendor fix yet. Assess and strengthen your controls. https://radar.offseq.com/threat/cve-2026-6223-cwe-307-improper-restriction-of-excessive-authentication-attempts-in-bahelievler-e94a3e6ad304a991 #OffSeq #CVE20266223 #Infosec #AppSec", "creation_timestamp": "2026-09-07T13:00:26.904707Z"} 2026-09-07T13:00:26.904707+00:00 https://vulnerability.circl.lu/sighting/a79840e5-3827-48b4-aa0a-5e9d1cf5ef67/export 2026-09-14T17:53:03.703839+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a79840e5-3827-48b4-aa0a-5e9d1cf5ef67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62233", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtocaperzd2f", "content": "CVE-2026-62233 - grav\nThe Grav Plugin API version 1.0.6 or earlier does not properly check user permissions for certain API requests. This allows unauthorized users to gain super-admin access and potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-22T12:40:04.441083Z"} 2026-08-22T12:40:04.441083+00:00 https://vulnerability.circl.lu/sighting/90905be0-6c07-4ca3-b20e-d875ce0f0561/export 2026-09-14T17:53:03.703945+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "90905be0-6c07-4ca3-b20e-d875ce0f0561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62233", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmjso4lsr2m", "content": "CVE-2026-62233 - grav-plugin-api\nA non-admin user can create a super-admin account and bypass two-factor authentication in the Grav API Plugin. This is fixed in version 1.0.6. Update to the latest version to ensure\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#getgrav #CVE #infosec", "creation_timestamp": "2026-08-21T19:50:03.727119Z"} 2026-08-21T19:50:03.727119+00:00 https://vulnerability.circl.lu/sighting/cb968fe8-f200-42ee-811c-3d4e34ff4c11/export 2026-09-14T17:53:03.704046+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cb968fe8-f200-42ee-811c-3d4e34ff4c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62234", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtijttg3sm2p", "content": "CVE-2026-62234 - grav\nGrav webhooks before version 2.0.4 allow authorized users to access local files and potentially sensitive information. This can happen when a malicious user creates a webhook with a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-20T05:40:03.940417Z"} 2026-08-20T05:40:03.940417+00:00 https://vulnerability.circl.lu/sighting/d3189248-9a63-488b-98cc-390ff453f8c3/export 2026-09-14T17:53:03.704142+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d3189248-9a63-488b-98cc-390ff453f8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62234", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqywvhya4v23", "content": "\ud83d\udfe0 CVE-2026-62234 - High (8.1)\n\nGrav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated us...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62234/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T14:00:38.775171Z"} 2026-07-19T14:00:38.775171+00:00 https://vulnerability.circl.lu/sighting/d63b1e34-7b5e-4316-8889-801cc30de157/export 2026-09-14T17:53:03.704243+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d63b1e34-7b5e-4316-8889-801cc30de157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62231", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqssvvbovb2s", "content": "CVE-2026-62231 - Grav\nCVE ID : CVE-2026-62231\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : The Grav API plugin (getgrav/grav-plugin-api) before 1.0.6 contains an authorization bypass: API keys can be created with a restricted scopes array, but the ...", "creation_timestamp": "2026-07-17T03:33:19.001383Z"} 2026-07-17T03:33:19.001383+00:00 https://vulnerability.circl.lu/sighting/18a8c2ab-0a1a-4dc1-9cf3-2478065027f9/export 2026-09-14T17:53:03.704339+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "18a8c2ab-0a1a-4dc1-9cf3-2478065027f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqssdyfti62i", "content": "CVE-2026-62232 - Grav\nCVE ID : CVE-2026-62232\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FASecret task checks only user existence...", "creation_timestamp": "2026-07-17T03:23:18.372029Z"} 2026-07-17T03:23:18.372029+00:00