https://vulnerability.circl.lu/sightings/feed 2026-09-12T18:16:02.357081+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4dd7f327-1676-4f61-9b95-9690a268762d/export 2026-09-12T18:16:02.381615+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4dd7f327-1676-4f61-9b95-9690a268762d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86439", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz3c5rmgl24", "content": "CVE-2026-86439 - knowns\nVersions of knowns older than 0.30.0 do not verify the file locations entered into its MCP functions. An attacker could give specially crafted paths to read, create, change, or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#knowns #knownsdev #CVE #infosec", "creation_timestamp": "2026-09-08T13:00:06.664824Z"} 2026-09-08T13:00:06.664824+00:00 https://vulnerability.circl.lu/sighting/99f2a0ff-c43c-4a42-94f7-f021240c6667/export 2026-09-12T18:16:02.385357+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "99f2a0ff-c43c-4a42-94f7-f021240c6667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86439", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpx2ca5423", "content": "\ud83d\udfe0 CVE-2026-86439 - High (8.8)\n\nknowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86439/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T00:04:22.766659Z"} 2026-09-08T00:04:22.766659+00:00