https://vulnerability.circl.lu/sightings/feed 2026-08-20T18:18:28.150160+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1ab3a273-ee41-473b-813f-6d115a082716/export 2026-08-20T18:18:28.174397+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1ab3a273-ee41-473b-813f-6d115a082716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrtfv6f2p", "content": "Daily IT Security Digest \u2014 2026-08-20\nAI/ML infrastructure deployments. (Source: [OFFSEQ Radar](https://radar.offseq.com/threat/cve-2026-76850-internlm-lmdeploy-rce/), [Mastodon](https://infosec.exchange/@offseq/117125246166620239))\n\n## 6. ServiceNow RCE CVE-2026-6875 Exploited to Bypass Sandbox", "creation_timestamp": "2026-08-20T05:03:09.198099Z"} 2026-08-20T05:03:09.198099+00:00 https://vulnerability.circl.lu/sighting/5a2ca255-9fd4-4a3a-8659-d1a545650412/export 2026-08-20T18:18:28.175912+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5a2ca255-9fd4-4a3a-8659-d1a545650412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrsumdt2f", "content": "Daily IT Security Digest \u2014 2026-08-20\nRadar](https://radar.offseq.com/threat/hackers-exploit-geoserver-sqli-zero-day-rce/), [Mastodon](https://infosec.exchange/@offseq/117092687906166890))\n\n## 5. InternetLM lmdeploy RCE via Pickle Deserialization \u2014 CVE-2026-76850\n\nA critical remote code execution", "creation_timestamp": "2026-08-20T05:03:08.555308Z"} 2026-08-20T05:03:08.555308+00:00 https://vulnerability.circl.lu/sighting/82f84e8d-3b1b-44f8-980e-3a30c399ea78/export 2026-08-20T18:18:28.176049+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "82f84e8d-3b1b-44f8-980e-3a30c399ea78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtibhmda3t2c", "content": "CVE-2026-76850 - lmdeploy\nLMDeploy's disaggregated serving feature allows a malicious peer to inject code that can be executed by the server, potentially leading to unauthorized access or data tampering.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lmdeploy #internlm #CVE #infosec", "creation_timestamp": "2026-08-20T03:10:04.096849Z"} 2026-08-20T03:10:04.096849+00:00 https://vulnerability.circl.lu/sighting/c89c16ac-1a62-40b0-b913-7ac7df626cc8/export 2026-08-20T18:18:28.176151+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c89c16ac-1a62-40b0-b913-7ac7df626cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mti3vinry42x", "content": "InternLM lmdeploy (0.9.2 \u2013 <0.16.0) CRITICAL vuln: Untrusted pickle deserialization allows remote code execution if disaggregated serving is enabled. Enable API keys or disable the feature. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fd...", "creation_timestamp": "2026-08-20T01:30:27.737253Z"} 2026-08-20T01:30:27.737253+00:00 https://vulnerability.circl.lu/sighting/d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664/export 2026-08-20T18:18:28.176254+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125246166620239", "content": "CVE-2026-76850 (CRITICAL): InternLM lmdeploy <0.16.0 vulnerable to remote code execution via untrusted pickle deserialization on ZeroMQ endpoints. Enable API keys or disable disaggregated serving to mitigate. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fdd1d6177df51 #OffSeq #Infosec #Vuln #CVE202676850", "creation_timestamp": "2026-08-20T01:30:26.298765Z"} 2026-08-20T01:30:26.298765+00:00 https://vulnerability.circl.lu/sighting/d8e7590e-d01b-48ec-98fb-1378fe759004/export 2026-08-20T18:18:28.176350+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d8e7590e-d01b-48ec-98fb-1378fe759004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfyxigq25", "content": "\ud83d\udea8 CVE-2026-76850 \u2014 CVSS 9.3 CRITICAL\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmd...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76850\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:12.370811Z"} 2026-08-20T00:10:12.370811+00:00 https://vulnerability.circl.lu/sighting/cc7a005b-128b-4e1d-8f46-a559be82cdd5/export 2026-08-20T18:18:28.176443+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cc7a005b-128b-4e1d-8f46-a559be82cdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r", "content": "\ud83d\udd34 CVE-2026-76850 - Critical (9.8)\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv corout...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:35.359390Z"} 2026-08-19T23:00:35.359390+00:00 https://vulnerability.circl.lu/sighting/68025dda-9bf0-4f4b-9760-317d1077fc88/export 2026-08-20T18:18:28.176533+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "68025dda-9bf0-4f4b-9760-317d1077fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx", "content": "CVE-2026-76850 - LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector\nCVE ID : CVE-2026-76850\n \n Published : Aug. 19, 2026, 10:17 p.m. | 14\u00a0minutes ago\n \n Description : LMDeploy deserializes disaggregated-serving peer mes...", "creation_timestamp": "2026-08-19T22:56:46.323082Z"} 2026-08-19T22:56:46.323082+00:00