https://vulnerability.circl.lu/sightings/feed 2026-09-19T04:36:38.343479+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/cac0293d-d36c-4e6d-91fb-62a684c94e3c/export 2026-09-19T04:36:38.361856+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cac0293d-d36c-4e6d-91fb-62a684c94e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt7snhzuc2j", "content": "CVE-2026-93868 - cotonti\nThe password reset feature in Cotonti (up to version 1.0.0) creates codes that can be guessed because they are based on the server's current time. An attacker who knows the server's clock can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cotonti #CVE #infosec", "creation_timestamp": "2026-09-18T22:30:07.364511Z"} 2026-09-18T22:30:07.364511+00:00 https://vulnerability.circl.lu/sighting/a2c876b3-a622-45bc-a6f5-8d2cf102cf1f/export 2026-09-19T04:36:38.365011+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a2c876b3-a622-45bc-a6f5-8d2cf102cf1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvt6pssb6j2g", "content": "\ud83d\udea8 CVE-2026-93868 \u2014 CVSS 9.2 CRITICAL\n\nCotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecove...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93868\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T22:10:38.027172Z"} 2026-09-18T22:10:38.027172+00:00 https://vulnerability.circl.lu/sighting/ae6d4878-cec2-4bab-b99d-6907e140cb2a/export 2026-09-19T04:36:38.365316+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ae6d4878-cec2-4bab-b99d-6907e140cb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gntdxhbaxnqn5", "content": "CVE-2026-93868 - Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG\nCVE ID : CVE-2026-93868\n \n Published : Sept. 18, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : Cotonti through 1.0.0 derives password recovery validation tokens from md5(microti...", "creation_timestamp": "2026-09-18T22:04:31.680832Z"} 2026-09-18T22:04:31.680832+00:00 https://vulnerability.circl.lu/sighting/c25f7044-c405-4c43-9e6c-195a78450d9a/export 2026-09-19T04:36:38.365453+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c25f7044-c405-4c43-9e6c-195a78450d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvt2v5jjpb2r", "content": "\ud83d\udfe0 CVE-2026-93868 - High (8.1)\n\nCotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93868/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T21:02:03.482356Z"} 2026-09-18T21:02:03.482356+00:00