https://vulnerability.circl.lu/sightings/feed 2026-09-04T20:54:56.093877+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/31f72f1d-3893-40e8-b585-cf2feec12cfd/export 2026-09-04T20:54:56.111298+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "31f72f1d-3893-40e8-b585-cf2feec12cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GCVE-128-2026-0001", "type": "seen", "source": "https://social.circl.lu/users/cedric/statuses/117211846838700856", "content": "Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure (GCVE-128-2026-0001 / CVE-2025-68624 )\nN-able Mail Assure through 2025-12-09 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. When connecting to the SMTP TCP port and performing SMTP AUTH with valid credentials, the server accepts arbitrary...\nhttps://vulnerability.circl.lu/vuln/GCVE-128-2026-0001\n#vulnerability #gcve", "creation_timestamp": "2026-09-04T08:34:06.858924Z"} 2026-09-04T08:34:06.858924+00:00 https://vulnerability.circl.lu/sighting/5ac92b78-7dcb-4e6d-aaf8-ae346ac54a93/export 2026-09-04T20:54:56.113676+00:00 Cédric Bonhomme https://vulnerability.circl.lu/user/cedric {"uuid": "5ac92b78-7dcb-4e6d-aaf8-ae346ac54a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "GCVE-128-2026-0001", "type": "seen", "source": "https://gist.github.com/alessandrobertoldi/1ebe0f48aa0119d787ac0ff710057d92", "content": "", "creation_timestamp": "2026-09-04T08:21:56.380271Z"} 2026-09-04T08:21:56.380271+00:00