https://vulnerability.circl.lu/sightings/feed 2026-05-11T00:47:25.375779+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/957d540f-dbcb-4347-9a14-7eb43d517a2e/export 2026-05-11T00:47:25.749801+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "957d540f-dbcb-4347-9a14-7eb43d517a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40982", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116531411462780607", "content": "\u26a0\ufe0f CRITICAL: CVE-2026-40982 in Spring Cloud Config (3.1.0 \u2013 5.0.0) enables path traversal \u2014 attackers can access arbitrary files via crafted URLs. Upgrade to a safe version ASAP: 3.1.14, 4.1.10, 4.2.7, 4.3.3, or 5.0.3. Details: https://radar.offseq.com/threat/cve-2026-40982-cwe-22-improper-limitation-of-a-pat-df996457 #OffSeq #SpringCloud #CVE202640982", "creation_timestamp": "2026-05-07T04:30:27.681922Z"} 2026-05-07T04:30:27.681922+00:00 https://vulnerability.circl.lu/sighting/a33aac8e-e2dc-46cb-827d-c85f823555ea/export 2026-05-11T00:47:25.749688+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "a33aac8e-e2dc-46cb-827d-c85f823555ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-40982", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlaeyqh2um2y", "content": "Spring Cloud Config (3.1.0 \u2013 5.0.0) hit by CRITICAL path traversal flaw \u2014 attackers may access files via crafted URLs. Upgrade to 3.1.14, 4.1.10, 4.2.7, 4.3.3, or 5.0.3 now! https://radar.offseq.com/threat/cve-2026-40982-cwe-22-improper-limitation-of-a-pat-df996457 #OffSeq #SpringCloud #CVE202640982", "creation_timestamp": "2026-05-07T04:30:29.452864Z"} 2026-05-07T04:30:29.452864+00:00 https://vulnerability.circl.lu/sighting/e1b1f2a3-eed9-4929-957f-a657f69d3c15/export 2026-05-11T00:47:25.749592+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "e1b1f2a3-eed9-4929-957f-a657f69d3c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40982", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlai3lq23y2p", "content": "CVE-2026-40982 - Spring Cloud Config Directory Traversal Vulnerability\nCVE ID : CVE-2026-40982\n \n Published : May 7, 2026, 3:49 a.m. | 35\u00a0minutes ago\n \n Description : Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-conf...", "creation_timestamp": "2026-05-07T05:25:46.120237Z"} 2026-05-07T05:25:46.120237+00:00 https://vulnerability.circl.lu/sighting/ee676326-2996-41b8-a279-166e4ff579b1/export 2026-05-11T00:47:25.749454+00:00 Joseph Lee http://vulnerability.circl.lu/user/syspect {"uuid": "ee676326-2996-41b8-a279-166e4ff579b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40982", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-431", "content": "", "creation_timestamp": "2026-05-07T06:48:23.000000Z"} 2026-05-07T06:48:23+00:00 https://vulnerability.circl.lu/sighting/c1398d9b-3d96-40b2-ba85-0e5333228e86/export 2026-05-11T00:47:25.748355+00:00 Joseph Lee http://vulnerability.circl.lu/user/syspect {"uuid": "c1398d9b-3d96-40b2-ba85-0e5333228e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40982", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-spring-cloud-config", "content": "", "creation_timestamp": "2026-05-07T07:29:50.000000Z"} 2026-05-07T07:29:50+00:00 https://vulnerability.circl.lu/sighting/bc9e001b-f6fc-4269-9611-e0cf8ec4fb8f/export 2026-05-11T00:47:25.746090+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "bc9e001b-f6fc-4269-9611-e0cf8ec4fb8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40982", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh3arwaw2e", "content": "\ud83d\udd17 CVE : CVE-2026-40981, CVE-2026-40982, CVE-2026-41002, CVE-2026-41004", "creation_timestamp": "2026-05-07T14:40:20.407806Z"} 2026-05-07T14:40:20.407806+00:00