https://vulnerability.circl.lu/sightings/feed 2026-07-29T04:57:39.539639+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/930bd9d5-9eb0-4439-b350-65da4d7dfb9a/export 2026-07-29T04:57:39.557208+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "930bd9d5-9eb0-4439-b350-65da4d7dfb9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15704", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrfcjkumbr2o", "content": "\ud83d\udd34 CVE-2026-15704 - Critical (9.8)\n\nIn Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15704/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T12:00:41.962030Z"} 2026-07-24T12:00:41.962030+00:00 https://vulnerability.circl.lu/sighting/1f24a7fb-7a93-47f4-86eb-1aa8b5f430be/export 2026-07-29T04:57:39.558595+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1f24a7fb-7a93-47f4-86eb-1aa8b5f430be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15704", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrf7nuygss2v", "content": "ABAC\u30df\u30c9\u30eb\u30a6\u30a7\u30a2\u306e\u4e0d\u5177\u5408\u306b\u3088\u308a\u3001\u672b\u5c3e\u306b\u30b9\u30e9\u30c3\u30b7\u30e5\u304c\u4ed8\u3044\u305f\u30ea\u30af\u30a8\u30b9\u30c8\u304c\u610f\u56f3\u305b\u305a\u8a31\u53ef\u3055\u308c\u3001\u8a8d\u8a3c\u306a\u3057\u306bAPI\u64cd\u4f5c\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-15704 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-07-24T11:09:24.364335Z"} 2026-07-24T11:09:24.364335+00:00 https://vulnerability.circl.lu/sighting/827133bc-a813-4053-884b-c6e12f7ac43a/export 2026-07-29T04:57:39.558722+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "827133bc-a813-4053-884b-c6e12f7ac43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15704", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mreyhi2tsl2r", "content": "Eclipse BaSyx Go Components <=1.0.0 hit by CRITICAL auth bypass (CVE-2026-15704). Trailing slash lets attackers evade ABAC and access protected APIs. Upgrade to 1.0.1 ASAP. https://radar.offseq.com/threat/cve-2026-15704-cwe-863-in-eclipse-foundation-eclipse-basyx-go-components-eeb4ef03f595d434 #O...", "creation_timestamp": "2026-07-24T09:00:34.203704Z"} 2026-07-24T09:00:34.203704+00:00 https://vulnerability.circl.lu/sighting/2711a975-a76c-4e16-ab13-902405570600/export 2026-07-29T04:57:39.558811+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2711a975-a76c-4e16-ab13-902405570600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15704", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116974133641581836", "content": "Eclipse BaSyx Go Components (<=1.0.0) suffer a CRITICAL auth bypass (CVE-2026-15704): ABAC checks can be evaded by adding a trailing slash to API routes. Immediate upgrade to 1.0.1 is required. https://radar.offseq.com/threat/cve-2026-15704-cwe-863-in-eclipse-foundation-eclipse-basyx-go-components-eeb4ef03f595d434 #OffSeq #CVE202615704 #infosec #AppSec", "creation_timestamp": "2026-07-24T09:00:32.001967Z"} 2026-07-24T09:00:32.001967+00:00 https://vulnerability.circl.lu/sighting/d01e976c-ac7f-4aec-8020-6a06a9935963/export 2026-07-29T04:57:39.558890+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d01e976c-ac7f-4aec-8020-6a06a9935963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15704", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrewjtdsfk2r", "content": "CVE-2026-15704 - eclipse basyx go components\nA vulnerability in Eclipse BaSyx Go Components versions 1.0.0 and below allows unauthorized access to protected API routes. This can happen when an attacker adds\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eclipsefoundation #CVE #infosec", "creation_timestamp": "2026-07-24T08:26:04.644850Z"} 2026-07-24T08:26:04.644850+00:00