https://vulnerability.circl.lu/sightings/feed 2026-08-25T14:15:07.114192+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2d0d80db-c45d-4ea4-8e2e-a806f5848230/export 2026-08-25T14:15:07.135120+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2d0d80db-c45d-4ea4-8e2e-a806f5848230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtveknyotu2y", "content": "CVE-2026-77337\nOlder versions of CakePHP's login system could be tricked into accepting a fake cookie, letting someone get into an account without a password and possibly slowing the server down. This affects versions before\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T08:10:04.140262Z"} 2026-08-25T08:10:04.140262+00:00 https://vulnerability.circl.lu/sighting/d9453a9c-e336-47df-b743-cace0dbea491/export 2026-08-25T14:15:07.136523+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d9453a9c-e336-47df-b743-cace0dbea491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtun7zlh3b2w", "content": "Another Critical Web Plugin Bug, Because Reality Hates Calm\nPANIC 78% | Lag 0.0h | CakePHP Authentication is being flagged for a critical CVE, CVE-2026-77337, with a CVSS score of 9.1\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-25T01:12:31.061415Z"} 2026-08-25T01:12:31.061415+00:00 https://vulnerability.circl.lu/sighting/200b2744-9971-42e4-9dbd-27e9a0149119/export 2026-08-25T14:15:07.136673+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "200b2744-9971-42e4-9dbd-27e9a0149119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtujmtqa4j24", "content": "\ud83d\udea8 CVE-2026-77337 \u2014 CVSS 9.1 CRITICAL\n\nCakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applica...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77337\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T00:08:06.369980Z"} 2026-08-25T00:08:06.369980+00:00 https://vulnerability.circl.lu/sighting/e486a608-62b4-40cb-8d8b-336823cdd7cd/export 2026-08-25T14:15:07.136790+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e486a608-62b4-40cb-8d8b-336823cdd7cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77337", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtugwwvdb72p", "content": "CVE-2026-77337\nIf you are using the CakePHP Authentication plugin in versions before 2.11.2, 3.3.7, or 4.2.1, an attacker could trick the system into accepting fake login cookies and could also cause the server to use\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T23:20:03.954549Z"} 2026-08-24T23:20:03.954549+00:00