https://vulnerability.circl.lu/sightings/feed 2026-09-19T03:41:54.231421+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/eeb51155-e243-4b67-acd3-4ee12151098f/export 2026-09-19T03:41:54.250101+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eeb51155-e243-4b67-acd3-4ee12151098f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93839", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtebn6cxr2r", "content": "CVE-2026-93839\nLightLLM versions up through 1.2.0 let anyone connect to its /pd_register WebSocket address and add their own nodes without proving who they are. Doing this can let an attacker see the questions users type,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-18T23:50:05.069543Z"} 2026-09-18T23:50:05.069543+00:00 https://vulnerability.circl.lu/sighting/3476cb36-ee91-4fc6-9b7e-70d81e584fd9/export 2026-09-19T03:41:54.251537+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3476cb36-ee91-4fc6-9b7e-70d81e584fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dygtxf5k7iy37", "content": "CVE-2026-93839 - LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint\nCVE ID : CVE-2026-93839\n \n Published : Sept. 18, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : LightLLM through 1.2.0 contains an authentication bypass vulner...", "creation_timestamp": "2026-09-18T22:10:31.657360Z"} 2026-09-18T22:10:31.657360+00:00 https://vulnerability.circl.lu/sighting/84b34667-b65b-458e-8613-dff37b8e64b5/export 2026-09-19T03:41:54.251685+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "84b34667-b65b-458e-8613-dff37b8e64b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93839", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvt6pjymle2f", "content": "\ud83d\udea8 CVE-2026-93839 \u2014 CVSS 9.3 CRITICAL\n\nLightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93839\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T22:10:28.779187Z"} 2026-09-18T22:10:28.779187+00:00 https://vulnerability.circl.lu/sighting/99b40574-45dd-4606-b648-80cd090adb87/export 2026-09-19T03:41:54.251799+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "99b40574-45dd-4606-b648-80cd090adb87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93839", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117294202459185526", "content": "Go hack more LLM shit.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-93839\nsev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nLightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allows unauthenticated attackers to register arbitrary nodes by supplying crafted JSON without peer address validation. Attackers can disclose full user prompts routed to their socket, trigger denial of service by replacing legitimate nodes, or make the PD Master issue requests to internal network addresses.", "creation_timestamp": "2026-09-18T21:38:14.459079Z"} 2026-09-18T21:38:14.459079+00:00 https://vulnerability.circl.lu/sighting/2c6f37b5-1397-4e10-8f90-e1b3debc3721/export 2026-09-19T03:41:54.251908+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2c6f37b5-1397-4e10-8f90-e1b3debc3721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93839", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvt2uw4cuz2r", "content": "\ud83d\udd34 CVE-2026-93839 - Critical (9.8)\n\nLightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSoc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93839/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T21:01:55.684773Z"} 2026-09-18T21:01:55.684773+00:00