https://vulnerability.circl.lu/sightings/feed 2026-10-20T06:10:42.728920+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/04e97603-eda7-45f9-9402-2b3a27ef7990/export 2026-10-20T06:10:42.754571+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "04e97603-eda7-45f9-9402-2b3a27ef7990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvw54tex3226", "content": "MLflow\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3001\u30af\u30e9\u30a6\u30c9\u8a8d\u8a3c\u60c5\u5831\u304c\u76d7\u307e\u308c\u308b\n\n\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306eAI\u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3067\u3042\u308bMLflow\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u30a8\u30f3\u30c9\u30c4\u30fc\u30a8\u30f3\u30c9\u306e\u6a5f\u68b0\u5b66\u7fd2\u30e9\u30a4\u30d5\u30b5\u30a4\u30af\u30eb\u3092\u7ba1\u7406\u3057\u3001AI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u3001LLM\u3001\u304a\u3088\u3073ML\u30e2\u30c7\u30eb\u3092\u672c\u756a\u74b0\u5883\u306b\u30c7\u30d7\u30ed\u30a4\u3059\u308b\u3053\u3068\u3092\u53ef\u80fd\u306b\u3057\u307e\u3059\u3002GitHub\u306e\u30b9\u30bf\u30fc\u6570\u306f27,000\u3092\u8d85\u3048\u3001\u6708\u9593\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u6570\u306f6,000\u4e07\u56de\u4ee5\u4e0a\u3092\u8a87\u308a\u307e\u3059\u3002\n\nCVE-2026-64849 \uff08CVSS\u30b9\u30b3\u30a29.3\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u60aa\u7528\u3055\u308c\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u306e\u554f\u984c\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u304a\u308a\u3001\u653b\u6483\u8005\u304c\u5185...", "creation_timestamp": "2026-09-20T02:20:10.276647Z"} 2026-09-20T02:20:10.276647+00:00 https://vulnerability.circl.lu/sighting/cc6e8f74-90c7-4e53-8359-d88278e42052/export 2026-10-20T06:10:42.755845+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cc6e8f74-90c7-4e53-8359-d88278e42052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvw4magawc26", "content": "\u300cMLflow\u300d\u8106\u5f31\u6027\u306e\u60aa\u7528\u3092\u78ba\u8a8d - \u7c73\u5f53\u5c40\u304c\u6ce8\u610f\u559a\u8d77\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300cMLflow\u300d\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u300cMLflow\u300d\u306f\u6a5f\u68b0\u5b66\u7fd2\u30e2\u30c7\u30eb\u306e\u958b\u767a\u3084\u904b\u7528\u3092\u652f\u63f4\u3059\u308b\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3002\u73fe\u5730\u6642\u95932026\u5e748\u670819\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u306b\u8106\u5f31\u6027\u300cCVE-2026-64849\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-64849\u300d\u306f\u3001\u30b5\u30fc\u30d0\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u306e\u8106\u5f31\u6027\u3067\u3001\u300cMLflow\u300d\u306b\u3088\u3063\u3066\u5185\u90e8\u30b5\u30fc\u30d3\u30b9\u3084\u30af\u30e9\u30a6\u30c9\u74b0\u5883\u306e\u30e1\u30bf\u30c7\u30fc\u30bf\u30b5\u30fc\u30d3\u30b9\u3078\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1...", "creation_timestamp": "2026-09-20T02:10:51.860957Z"} 2026-09-20T02:10:51.860957+00:00 https://vulnerability.circl.lu/sighting/d5bff6f0-1e36-41e0-b930-d902bf22abe2/export 2026-10-20T06:10:42.755972+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d5bff6f0-1e36-41e0-b930-d902bf22abe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvw4e6u6tc26", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nRelease Date August 19, 2026\n\nCVE-2026-64849 MLflow Server-Side Request Forgery Vulnerability", "creation_timestamp": "2026-09-20T02:06:21.349338Z"} 2026-09-20T02:06:21.349338+00:00 https://vulnerability.circl.lu/sighting/435410e5-72c1-4667-a89e-680a42226292/export 2026-10-20T06:10:42.756066+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "435410e5-72c1-4667-a89e-680a42226292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64847", "type": "seen", "source": "https://gist.github.com/alon710/d2d38cc91e8e28c2c97b7ca219941b98", "content": "# CVE-2026-64847: CVE-2026-64847: Indefinite Denial of Service via Undrained Stderr in AnyIO Process Pool Workers\n\n> **CVSS Score:** 6.8\n> **Published:** 2026-09-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-64847\n\n## Summary\nA denial-of-service vulnerability exists in AnyIO prior to version 4.14.2. Standard error streams of process-pool workers are connected to an operating system pipe that is never drained by the parent process. This allows a worker to fill the pipe buffer and deadlock indefinitely.\n\n## TL;DR\nAnyIO process-pool workers can block indefinitely when writing to undrained stderr streams, causing a permanent deadlock of the calling event loop.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Local (AV:L)\n- **CVSS Score**: 6.8 (Medium)\n- **EPSS Score**: Not currently indexed\n- **Impact**: High Availability Impact (Denial of Service)\n- **Exploit Status**: PoC\n- **KEV Status**: Not listed in CISA KEV\n\n## Affected Systems\n\n- AnyIO Python asynchronous concurrency framework\n- **anyio**: < 4.14.2 (Fixed in: `4.14.2`)\n\n## Mitigation\n\n- Upgrade AnyIO to version 4.14.2 or later\n- Manually redirect sys.stderr within task functions to os.devnull in vulnerable versions\n- Configure execution timeouts using anyio.fail_after to prevent infinite blocking of the parent process loop\n\n**Remediation Steps:**\n1. Verify the currently installed AnyIO version using pip show anyio\n2. Update the library to the patched version using pip install --upgrade anyio>=4.14.2\n3. Ensure application tests cover tasks that generate high volumes of diagnostic output to confirm deadlock resilience\n\n## References\n\n- [GitHub Security Advisory GHSA-5p39-cfhj-2xmp](https://github.com/agronholm/anyio/security/advisories/GHSA-5p39-cfhj-2xmp)\n- [AnyIO Pull Request #1207](https://github.com/agronholm/anyio/pull/1207)\n- [AnyIO Patch Commit f1b7301](https://github.com/agronholm/anyio/commit/f1b7301c8264b0d2e8d24a5788fd29e93dea4040)\n- [NVD - CVE-2026-64847](https://nvd.nist.gov/vuln/detail/CVE-2026-64847)\n- [Wiz Vulnerability Database Details](https://www.wiz.io/vulnerability-database/cve/cve-2026-64847)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-64847) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-19T14:31:33.898725Z"} 2026-09-19T14:31:33.898725+00:00 https://vulnerability.circl.lu/sighting/10470040-f836-4980-b939-afcf4e12b627/export 2026-10-20T06:10:42.756169+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "10470040-f836-4980-b939-afcf4e12b627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101428", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-64849-poc-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a isaca0315\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 19:53:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\neste laboratorio puede estar bien o mal preguntale a la IA estoy probando pero debe funcionar hahahah\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:49.206243Z"} 2026-09-10T00:00:49.206243+00:00 https://vulnerability.circl.lu/sighting/205e1e46-c92e-4aa2-9ac2-3e8c1ab7fe5c/export 2026-10-20T06:10:42.756266+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "205e1e46-c92e-4aa2-9ac2-3e8c1ab7fe5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://t.me/GithubRedTeam/101428", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-64849-poc-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a isaca0315\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 19:53:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\neste laboratorio puede estar bien o mal preguntale a la IA estoy probando pero debe funcionar hahahah\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:07.435671Z"} 2026-09-09T05:00:07.435671+00:00 https://vulnerability.circl.lu/sighting/7e742a7b-cc78-43b4-b429-84403fd917bf/export 2026-10-20T06:10:42.756352+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7e742a7b-cc78-43b4-b429-84403fd917bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/thedroptimes.bsky.social/post/3mukldgddom2d", "content": "CISA lists CVE-2026-64849 as actively exploited. MLflow versions before 3.15.0 can expose internal services or cloud metadata through an SSRF flaw.\n\nhttps://bit.ly/4h6jpwT \n\n#Drupal #MLflow #CyberSecurity", "creation_timestamp": "2026-09-02T18:37:12.824529Z"} 2026-09-02T18:37:12.824529+00:00 https://vulnerability.circl.lu/sighting/f2cd4bc4-d8cc-4a12-99c6-949399e5e657/export 2026-10-20T06:10:42.756436+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f2cd4bc4-d8cc-4a12-99c6-949399e5e657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64844", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/43efdsbbfz3f2", "content": "CVE-2026-64844 - Rejected reason: This CVE ID has been rejected or\nCVE ID : CVE-2026-64844\n \n Published : Aug. 30, 2026, 8:16 p.m. | 1\u00a0hour, 52\u00a0minutes ago\n \n Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\n \n Severity:...", "creation_timestamp": "2026-08-30T22:14:54.971281Z"} 2026-08-30T22:14:54.971281+00:00 https://vulnerability.circl.lu/sighting/7cad0bcb-c481-4094-8de5-3d20af5ad4b8/export 2026-10-20T06:10:42.756538+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7cad0bcb-c481-4094-8de5-3d20af5ad4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "exploited", "source": "https://t.me/thehackernews/9834", "content": "\ud83d\udea8 Attackers are exploiting an MLflow flaw to steal cloud credentials.\n\nCVE-2026-64849 lets them reach internal cloud metadata services and extract secrets. Researchers detected scanning within hours of the CVE assignment.\n\nRead: https://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.html", "creation_timestamp": "2026-08-24T00:00:04.952152Z"} 2026-08-24T00:00:04.952152+00:00 https://vulnerability.circl.lu/sighting/6e7c5ada-e9c7-4aa4-a3bb-102f99ee92aa/export 2026-10-20T06:10:42.756642+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6e7c5ada-e9c7-4aa4-a3bb-102f99ee92aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://t.me/thehackernews/9834", "content": "\ud83d\udea8 Attackers are exploiting an MLflow flaw to steal cloud credentials.\n\nCVE-2026-64849 lets them reach internal cloud metadata services and extract secrets. Researchers detected scanning within hours of the CVE assignment.\n\nRead: https://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.html", "creation_timestamp": "2026-08-23T20:00:06.316339Z"} 2026-08-23T20:00:06.316339+00:00