https://vulnerability.circl.lu/sightings/feed 2026-09-19T01:45:45.046405+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9cec2ea5-68fb-4f53-a97e-c34e15c50f18/export 2026-09-19T01:45:45.069179+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9cec2ea5-68fb-4f53-a97e-c34e15c50f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93759", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxkmverv2z", "content": "\ud83d\udfe0 CVE-2026-93759 - High (8.6)\n\nMongoid does not neutralize a string-typed query criterion supplied to its query builder, and ins...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93759/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T20:02:29.011817Z"} 2026-09-18T20:02:29.011817+00:00 https://vulnerability.circl.lu/sighting/5364513d-6cf6-4679-9c2a-a21777da5e3d/export 2026-09-19T01:45:45.071962+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5364513d-6cf6-4679-9c2a-a21777da5e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93753", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxjbtb2e22", "content": "\ud83d\udfe0 CVE-2026-93753 - High (7.5)\n\ndeepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() functio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93753/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T20:01:44.482852Z"} 2026-09-18T20:01:44.482852+00:00 https://vulnerability.circl.lu/sighting/42a587fc-42ca-4e1d-a00d-25ced9f1c9fe/export 2026-09-19T01:45:45.072177+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "42a587fc-42ca-4e1d-a00d-25ced9f1c9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93752", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxj2fxyh2e", "content": "\ud83d\udfe0 CVE-2026-93752 - High (7.5)\n\nCSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93752/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T20:01:36.250136Z"} 2026-09-18T20:01:36.250136+00:00 https://vulnerability.circl.lu/sighting/dca50ab8-914d-4f79-877e-bf4e382e948d/export 2026-09-19T01:45:45.072356+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dca50ab8-914d-4f79-877e-bf4e382e948d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93752", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4hhey276adide", "content": "CVE-2026-93752 - CSSOM through 0.5.0 Denial of Service via length Property\nCVE ID : CVE-2026-93752\n \n Published : Sept. 18, 2026, 6:18 p.m. | 21\u00a0minutes ago\n \n Description : CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() tha...", "creation_timestamp": "2026-09-18T19:09:31.683179Z"} 2026-09-18T19:09:31.683179+00:00 https://vulnerability.circl.lu/sighting/f94691c4-50f1-4a9f-817c-51d1a5ef5fd0/export 2026-09-19T01:45:45.072536+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f94691c4-50f1-4a9f-817c-51d1a5ef5fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7fbnbb2gmpxdb", "content": "CVE-2026-93753 - deepmerge through 4.3.1 Prototype Poisoning via mergeObject\nCVE ID : CVE-2026-93753\n \n Published : Sept. 18, 2026, 6:18 p.m. | 21\u00a0minutes ago\n \n Description : deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() function th...", "creation_timestamp": "2026-09-18T19:03:32.257305Z"} 2026-09-18T19:03:32.257305+00:00 https://vulnerability.circl.lu/sighting/b9ff53b2-7f87-474f-b02d-b3faf7a40fb4/export 2026-09-19T01:45:45.072732+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b9ff53b2-7f87-474f-b02d-b3faf7a40fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3pqoilxumkk4q", "content": "CVE-2026-93759 - Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist\nCVE ID : CVE-2026-93759\n \n Published : Sept. 18, 2026, 6:18 p.m. | 21\u00a0minutes ago\n \n Description : Mongoid does not neutralize a string-typed query criterion sup...", "creation_timestamp": "2026-09-18T18:57:31.755574Z"} 2026-09-18T18:57:31.755574+00:00 https://vulnerability.circl.lu/sighting/e670a8bb-23c0-4948-a10c-4e2a349db5e1/export 2026-09-19T01:45:45.072912+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e670a8bb-23c0-4948-a10c-4e2a349db5e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7keyvefpsou7k", "content": "CVE-2026-93758 - Cross-principal document update, theft, and deletion via unvalidated id in nested attributes\nCVE ID : CVE-2026-93758\n \n Published : Sept. 18, 2026, 5:17 p.m. | 23\u00a0minutes ago\n \n Description : An insecure direct object reference in the nested attributes handlin...", "creation_timestamp": "2026-09-18T18:09:31.527218Z"} 2026-09-18T18:09:31.527218+00:00 https://vulnerability.circl.lu/sighting/414fb32a-3f9c-4d44-b95d-3677f5cc52c2/export 2026-09-19T01:45:45.073054+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "414fb32a-3f9c-4d44-b95d-3677f5cc52c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93758", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsquki7mn24", "content": "\ud83d\udfe0 CVE-2026-93758 - High (8.1)\n\nAn insecure direct object reference in the nested attributes handling of the Mongoid object-docum...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93758/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T18:02:45.973124Z"} 2026-09-18T18:02:45.973124+00:00 https://vulnerability.circl.lu/sighting/b2022dc3-1e56-4b2e-acfc-cfd57a237d9f/export 2026-09-19T01:45:45.073154+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b2022dc3-1e56-4b2e-acfc-cfd57a237d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9375", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moqy56mrki2s", "content": "CVE-2026-9375 - DoS in Urllib3. Decompression bomb bypass in streaming API with Brotli. CVSS 7.5. No patch available yet. Monitor for updates. #CVE #infosec #python\n\nhttps://www.valtersit.com/cve/CVE-2026-9375/", "creation_timestamp": "2026-06-20T23:11:09.776610Z"} 2026-06-20T23:11:09.776610+00:00