https://vulnerability.circl.lu/sightings/feed 2026-08-22T04:21:47.670203+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6e09dca8-0e01-4668-b049-d4a9667d8ace/export 2026-08-22T04:21:47.691287+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6e09dca8-0e01-4668-b049-d4a9667d8ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtlccup23w2n", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-21T08:03:17.799178Z"} 2026-08-21T08:03:17.799178+00:00 https://vulnerability.circl.lu/sighting/a279fc94-179b-4984-8a7f-34dd7216a4a9/export 2026-08-22T04:21:47.694308+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a279fc94-179b-4984-8a7f-34dd7216a4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtkhk56rki25", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-21T00:04:10.916596Z"} 2026-08-21T00:04:10.916596+00:00 https://vulnerability.circl.lu/sighting/22fb0357-43c1-4cd1-88a9-01296a287b3a/export 2026-08-22T04:21:47.694645+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "22fb0357-43c1-4cd1-88a9-01296a287b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtjmnvifjp2t", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-20T16:03:05.867495Z"} 2026-08-20T16:03:05.867495+00:00 https://vulnerability.circl.lu/sighting/de775adc-2948-41aa-8c11-0454807e0c4c/export 2026-08-22T04:21:47.694884+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "de775adc-2948-41aa-8c11-0454807e0c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdg4lqyb52f", "content": "CVE-2026-74880 - openssl-encrypt\nOpenSSL's keyserver and telemetry servers accept refresh tokens in URLs, making them visible in server logs, browser history, and other places. This puts sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:50:04.295540Z"} 2026-08-18T04:50:04.295540+00:00 https://vulnerability.circl.lu/sighting/86253f42-0330-4653-8d87-e6776c2d15a2/export 2026-08-22T04:21:47.695014+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "86253f42-0330-4653-8d87-e6776c2d15a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcdhz5ina25", "content": "CVE-2026-74880 - openssl_encrypt\nOld versions of the OpenSSL Encrypt library in certain routes allow attackers to extract refresh tokens from server logs, potentially giving them unauthorized access.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:30:06.968093Z"} 2026-08-17T18:30:06.968093+00:00 https://vulnerability.circl.lu/sighting/09d323e7-9b5a-433a-9ab8-08f4d65f0605/export 2026-08-22T04:21:47.695086+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "09d323e7-9b5a-433a-9ab8-08f4d65f0605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo5ecwnl2p", "content": "\ud83d\udea8 CVE-2026-74880 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and teleme...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74880\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:08:20.377070Z"} 2026-08-17T12:08:20.377070+00:00