https://vulnerability.circl.lu/sightings/feed 2026-09-15T16:25:57.566389+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7af76b11-7399-43b1-bae2-94c98ad03747/export 2026-09-15T16:25:57.607857+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7af76b11-7399-43b1-bae2-94c98ad03747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75430", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzworfnub2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-75430: PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication\u2026\nCVSS 9.8 \u00b7 EPSS 0.9%\nhttps://beta.vulnsea.com/cve/CVE-2026-75430\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T21:10:19.616090Z"} 2026-09-08T21:10:19.616090+00:00 https://vulnerability.circl.lu/sighting/2694a427-032a-4c87-9a62-c0cf7b70bcac/export 2026-09-15T16:25:57.609990+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2694a427-032a-4c87-9a62-c0cf7b70bcac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75430", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muponwx4ku2v", "content": "CVE-2026-75430\nPowerJob Worker version 5.1.2 (and likely earlier) opens a web address that anyone can reach without a login. An outside attacker could use this to run any program they choose on your server. Update the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-04T19:20:04.843879Z"} 2026-09-04T19:20:04.843879+00:00 https://vulnerability.circl.lu/sighting/1d65b328-3a19-4e2c-a418-1f8201adbfea/export 2026-09-15T16:25:57.610133+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1d65b328-3a19-4e2c-a418-1f8201adbfea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75430", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupkojv6262o", "content": "\ud83d\udea8 CVE-2026-75430 \u2014 CVSS 9.8 CRITICAL\n\nPowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75430\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T18:08:49.769574Z"} 2026-09-04T18:08:49.769574+00:00 https://vulnerability.circl.lu/sighting/f4f8588b-7998-4773-8062-2dcd6b0f54e8/export 2026-09-15T16:25:57.610246+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f4f8588b-7998-4773-8062-2dcd6b0f54e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75430", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mupkabrhkl2e", "content": "\ud83d\udd34 CVE-2026-75430 - Critical (9.8)\n\nPowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer H...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75430/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T18:00:52.185053Z"} 2026-09-04T18:00:52.185053+00:00 https://vulnerability.circl.lu/sighting/af3fde25-e1e5-41cf-a103-b3c3b3a4f8e0/export 2026-09-15T16:25:57.610351+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "af3fde25-e1e5-41cf-a103-b3c3b3a4f8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75430", "type": "seen", "source": "https://gist.github.com/unpredictable21/fcb62d394db30525412c4b5b1efd0233", "content": "# CVE-2026-75430 - PowerJob Worker /worker/deployContainer Unauthenticated Remote Code Execution\n\n## Basic Info\n\n| Field | Value |\n|---|---|\n| **CVE ID** | CVE-2026-75430 |\n| **Vulnerability Type** | Remote Code Execution (RCE) |\n| **Vendor of Product** | https://github.com/PowerJob/PowerJob |\n| **Affected Product Code Base** | PowerJob - 5.1.2 (and likely earlier versions) |\n| **Attack Type** | Remote |\n| **Impact** | Code execution |\n| **Discoverer** | Yujie He |\n\n## Summary\n\nPowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code.\n\n## Additional Information\n\nThe default docker-compose.yml publishes the Worker port 27777 to the host, making the attack surface externally accessible. The Worker requires the application to be registered with the PowerJob Server during startup (via /server/assert); otherwise, the Worker process exits and port 27777 is not listening. However, in any production or demo deployment where the Worker is actually running, this precondition is satisfied, and the exploit is fully unauthenticated.\n\nA working Proof-of-Concept (PoC) Python script has been developed that automatically builds the malicious JAR, hosts it, and triggers the vulnerability; it is available upon request to the vendor or security team. The vulnerability has been confirmed on PowerJob 5.1.2 with both JDK 8 and JDK 21 environments.\n\n## Affected Components\n\n- powerjob-worker (powerjob-worker-samples)\n- WorkerActor.java\n- OmsContainerFactory.java\n- OmsJarContainer.java\n- OhMyClassLoader.java\n- ClassPathXmlApplicationContext (Spring)\n\n## References\n\n- https://github.com/PowerJob/PowerJob\n- https://github.com/PowerJob/PowerJob/blob/master/powerjob-worker/src/main/java/tech/powerjob/worker/actors/WorkerActor.java\n- https://github.com/PowerJob/PowerJob/blob/master/powerjob-worker/src/main/java/tech/powerjob/worker/container/OmsContainerFactory.java\n- https://github.com/PowerJob/PowerJob/blob/master/SECURITY.md\n\n## Proof of Concept\n\nhttps://github.com/unpredictable21/PowerJob_PJ09_worker_deployContainer_RCE_\n", "creation_timestamp": "2026-09-04T09:43:50.601854Z"} 2026-09-04T09:43:50.601854+00:00