https://vulnerability.circl.lu/sightings/feed 2026-07-09T08:04:15.983722+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bd47f428-fac6-4adb-b222-fdadbbadb2a1/export 2026-07-09T08:04:16.002088+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bd47f428-fac6-4adb-b222-fdadbbadb2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq734t72sj2k", "content": "\ud83d\udccc CVE-2026-46354 - Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, ... https://www.cyberhub.blog/cves/CVE-2026-46354", "creation_timestamp": "2026-07-09T07:07:08.384664Z"} 2026-07-09T07:07:08.384664+00:00 https://vulnerability.circl.lu/sighting/98599627-5b7a-44e7-863a-6c4893cfb19d/export 2026-07-09T08:04:16.004304+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "98599627-5b7a-44e7-863a-6c4893cfb19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3tqzha2n2l", "content": "CVE-2026-46354 - Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft\nCVE ID : CVE-2026-46354\n \n Published : July 7, 2026, 10:16 p.m. | 58\u00a0minutes ago\n \n Description : Coder allows organizations to provision remote development envi...", "creation_timestamp": "2026-07-08T00:17:15.343244Z"} 2026-07-08T00:17:15.343244+00:00 https://vulnerability.circl.lu/sighting/5ba1c866-33b4-44fd-b4a9-8152edb917d3/export 2026-07-09T08:04:16.004499+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5ba1c866-33b4-44fd-b4a9-8152edb917d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3l74tvwf2v", "content": "CVE-2026-46354 - coder\nAn attacker can steal a Coder agent session token by sending a forged request to the Azure instance identity endpoint. This allows them to access sensitive information, such as Git SSH\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coder #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T21:44:05.055193Z"} 2026-07-07T21:44:05.055193+00:00