https://vulnerability.circl.lu/sightings/feed 2026-09-04T08:38:32.533109+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9857f839-9194-4329-8c84-400e49803260/export 2026-09-04T08:38:32.557882+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9857f839-9194-4329-8c84-400e49803260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18108", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mshwxui4542r", "content": "\ud83d\udccc CVE-2026-18108 - Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted... https://www.cyberhub.blog/cves/CVE-2026-18108", "creation_timestamp": "2026-08-07T06:37:07.086341Z"} 2026-08-07T06:37:07.086341+00:00 https://vulnerability.circl.lu/sighting/b4fa8c95-7aa3-49a6-a78e-33cbdf6035c9/export 2026-09-04T08:38:32.559872+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b4fa8c95-7aa3-49a6-a78e-33cbdf6035c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18108", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms7mnp5hpg2m", "content": "CVE-2026-18108 - Critical auth bypass in Perl Net::SAML2. Encrypted assertions without signatures accepted. CVSS 9.8. Upgrade to >=0.86 now. #CVE #Perl #infosec\n\nhttps://www.valtersit.com/cve/cve-2026-18108/", "creation_timestamp": "2026-08-03T23:11:16.571596Z"} 2026-08-03T23:11:16.571596+00:00 https://vulnerability.circl.lu/sighting/ab1750e8-3809-4bbf-8e10-7abcd6d3d991/export 2026-09-04T08:38:32.560012+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ab1750e8-3809-4bbf-8e10-7abcd6d3d991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18108", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117034101614868174", "content": "CVE-2026-18108 - Critical auth bypass in Perl Net::SAML2. Encrypted assertions without signatures accepted. CVSS 9.8. Upgrade to >=0.86 now. #CVE #Perl #infosec\nhttps://www.valtersit.com/cve/cve-2026-18108/", "creation_timestamp": "2026-08-03T23:11:10.609885Z"} 2026-08-03T23:11:10.609885+00:00 https://vulnerability.circl.lu/sighting/03c99992-9afa-4354-a996-bddb3ae71d6b/export 2026-09-04T08:38:32.560135+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "03c99992-9afa-4354-a996-bddb3ae71d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18108", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7fdcwaxk22", "content": "CVE-2026-18108 - net::saml2\nOlder versions of the Net::SAML2 library for Perl can be tricked into accepting fake login credentials from anyone, not just the intended user. This can happen if an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#netsaml2 #timlegge #CVE #infosec", "creation_timestamp": "2026-08-03T21:00:05.605069Z"} 2026-08-03T21:00:05.605069+00:00