https://vulnerability.circl.lu/sightings/feed 2026-09-16T11:13:36.942086+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2898a833-b03f-4ba3-b98a-1210a4d33876/export 2026-09-16T11:13:36.972638+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2898a833-b03f-4ba3-b98a-1210a4d33876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117229450709376695", "content": "CVE-2026-86190 - Critical Broken Access Control in WWBN AVideo allows admin session hijacking & data theft. CVSS 9.1. Restrict endpoints now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-86190/", "creation_timestamp": "2026-09-07T11:11:10.197394Z"} 2026-09-07T11:11:10.197394+00:00 https://vulnerability.circl.lu/sighting/8b2b3fe2-5481-4495-b60e-00d1272f8f22/export 2026-09-16T11:13:36.974952+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8b2b3fe2-5481-4495-b60e-00d1272f8f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muweq6f2k727", "content": "CVE-2026-86190 - Critical Broken Access Control in WWBN AVideo allows admin session hijacking & data theft. CVSS 9.1. Restrict endpoints now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-86190/", "creation_timestamp": "2026-09-07T11:11:00.521171Z"} 2026-09-07T11:11:00.521171+00:00 https://vulnerability.circl.lu/sighting/937efc74-4760-4b71-b9b5-e33d71cdb9cd/export 2026-09-16T11:13:36.975110+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "937efc74-4760-4b71-b9b5-e33d71cdb9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86196", "type": "seen", "source": "https://gist.github.com/ichintu/4d7dd4674813d417824a1017200d1117", "content": "CVE-2026-86196 is a high-severity (8.7) vulnerability in Grav API plugin versions prior to 1.0.20. It allows unauthenticated attackers to intercept password reset tokens by manipulating the `Host` header, enabling full account takeover, including super-admin privileges.", "creation_timestamp": "2026-09-05T20:01:40.194392Z"} 2026-09-05T20:01:40.194392+00:00 https://vulnerability.circl.lu/sighting/75ce8e82-09cf-4561-be3c-ace4f486f84d/export 2026-09-16T11:13:36.975231+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "75ce8e82-09cf-4561-be3c-ace4f486f84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murxdbp3xp2z", "content": "\ud83d\udd34 CVE-2026-86190 - Critical (9.1)\n\nWWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that retur...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86190/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T17:00:30.850270Z"} 2026-09-05T17:00:30.850270+00:00 https://vulnerability.circl.lu/sighting/0e76f1d3-c877-4fee-93af-54b23ddc1969/export 2026-09-16T11:13:36.975340+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0e76f1d3-c877-4fee-93af-54b23ddc1969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3murnonfhgc2n", "content": "\ud83d\udea8 CVE-2026-86190 \u2014 CVSS 9.3 CRITICAL\n\nWWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complet...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86190\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T14:07:53.856417Z"} 2026-09-05T14:07:53.856417+00:00 https://vulnerability.circl.lu/sighting/9d57761f-44ba-46a3-af44-934dd75cfdd8/export 2026-09-16T11:13:36.975452+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9d57761f-44ba-46a3-af44-934dd75cfdd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3murll2oedb2y", "content": "CVE-2026-86190\nThe AVideo platform\u2019s videoViewsInfo feature can be called without logging in and will return full user records, including password hashes, password\u2011reset tokens, and live\u2011session identifiers. This lets an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-05T13:30:06.103100Z"} 2026-09-05T13:30:06.103100+00:00