https://vulnerability.circl.lu/sightings/feed 2026-09-27T21:34:11.740892+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0cf107b8-7d4f-4d2f-9f2b-6330c3ca7704/export 2026-09-27T21:34:11.767957+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0cf107b8-7d4f-4d2f-9f2b-6330c3ca7704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "published-proof-of-concept", "source": "Telegram/VCxCWyiIftc3zqyXq_-idMYYXJu_pWk2hZoed5IyUk8wBzA", "content": "", "creation_timestamp": "2026-09-26T03:00:15.000000Z"} 2026-09-26T03:00:15+00:00 https://vulnerability.circl.lu/sighting/2f74bf8e-644a-4b3d-bfe8-b21838410e6e/export 2026-09-27T21:34:11.770455+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2f74bf8e-644a-4b3d-bfe8-b21838410e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103375", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-86350\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abraxas\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 21:59:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-86350 - Apache Tomcat - Critical 9.1 - Unauthenticated GET /header.jsp - HTTP/2 Request Header Mix-up (Request Smuggling)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-25T22:00:09.000000Z"} 2026-09-25T22:00:09+00:00 https://vulnerability.circl.lu/sighting/2e2a1c00-96ab-435a-adc0-e3451e30ac70/export 2026-09-27T21:34:11.770627+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2e2a1c00-96ab-435a-adc0-e3451e30ac70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mw7vkccudc2k", "content": "Tomcat\u306e\u8106\u5f31\u6027(Critical: CVE-2026-76183, CVE-2026-86248, CVE-2026-86350, High: CVE-2026-75973, CVE-2026-77762, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-87022, Medium: CVE-2026-73581, Low: CVE-2026-77756)\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-09-23T23:31:08.733520Z"} 2026-09-23T23:31:08.733520+00:00 https://vulnerability.circl.lu/sighting/037b9b23-c0cd-42b1-883e-905fa7d6bfdd/export 2026-09-27T21:34:11.770742+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "037b9b23-c0cd-42b1-883e-905fa7d6bfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7uwlhtus2k", "content": "CVE-2026-86350 - apache tomcat\nVersions of Apache Tomcat 9.0.118\u20119.0.121, 10.1.55\u201110.1.59, and 11.0.22\u201111.0.25 can misinterpret incoming HTTP/2 traffic, causing request headers to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachetomcat #apachefoundation #Debian13 #CVE #infosec", "creation_timestamp": "2026-09-23T23:20:04.917586Z"} 2026-09-23T23:20:04.917586+00:00 https://vulnerability.circl.lu/sighting/f2f106e7-d3ac-4f9c-9e2c-2631a350fd95/export 2026-09-27T21:34:11.770849+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f2f106e7-d3ac-4f9c-9e2c-2631a350fd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7dhjmfrb2y", "content": "\ud83d\udea8 CVE-2026-86350 \u2014 CVSS 9.1 CRITICAL\n\nInconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in Apache ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86350\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T18:07:25.559981Z"} 2026-09-23T18:07:25.559981+00:00 https://vulnerability.circl.lu/sighting/37063db9-7e85-4979-870e-30474bed1c65/export 2026-09-27T21:34:11.770959+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "37063db9-7e85-4979-870e-30474bed1c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86350", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6sub3gjz2d", "content": "\ud83d\udd17 CVE : CVE-2026-34500, CVE-2026-41293, CVE-2026-73581, CVE-2026-75973, CVE-2026-76183, CVE-2026-77756, CVE-2026-77762, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-86248, CVE-2026-86350, CVE-2026-87022", "creation_timestamp": "2026-09-23T13:10:19.417668Z"} 2026-09-23T13:10:19.417668+00:00