https://vulnerability.circl.lu/sightings/feed 2026-07-29T18:55:33.069484+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7227bed9-549c-4f42-bd3d-6d2cbf8b0040/export 2026-07-29T18:55:33.092847+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7227bed9-549c-4f42-bd3d-6d2cbf8b0040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49121", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mrqm3i2vwt2x", "content": "A critical-severity fix just shipped for Amd Aiter. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-49121", "creation_timestamp": "2026-07-28T23:51:02.366478Z"} 2026-07-28T23:51:02.366478+00:00 https://vulnerability.circl.lu/sighting/d8715a70-f203-4bbd-b32d-aa2bb151ef93/export 2026-07-29T18:55:33.095400+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d8715a70-f203-4bbd-b32d-aa2bb151ef93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49121", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobw4hxgbr2v", "content": "\ud83d\udea8 ALERT: CVE-2026-49121\n\nCVSS 8.1/10\n\n\ud83d\udccb WHAT IT IS:\n\n\n\ud83c\udfaf WHO'S AFFECTED:\n \u2022 Unknown\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown vector\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n 1. Identify affected systems in your environment\n 2. Apply patches within 48 ho", "creation_timestamp": "2026-06-14T23:25:05.813513Z"} 2026-06-14T23:25:05.813513+00:00 https://vulnerability.circl.lu/sighting/26c300a7-568a-4edf-850b-6b3821f27f14/export 2026-07-29T18:55:33.095531+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "26c300a7-568a-4edf-850b-6b3821f27f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49121", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnt62evx3c2z", "content": "\ud83d\udccc CVE-2026-49121 - AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function w... https://www.cyberhub.blog/cves/CVE-2026-49121", "creation_timestamp": "2026-06-09T02:37:05.901561Z"} 2026-06-09T02:37:05.901561+00:00 https://vulnerability.circl.lu/sighting/1b68987c-89c2-4418-a834-5c47ac60a4ff/export 2026-07-29T18:55:33.095633+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1b68987c-89c2-4418-a834-5c47ac60a4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49120", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndsaysdgm27", "content": "CVE-2026-49120 - Medplum\nCVE ID : CVE-2026-49120\n \n Published : June 2, 2026, 8:16 p.m. | 2\u00a0hours, 57\u00a0minutes ago\n \n Description : Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform u...", "creation_timestamp": "2026-06-02T23:56:07.200220Z"} 2026-06-02T23:56:07.200220+00:00 https://vulnerability.circl.lu/sighting/8a584716-7b9d-4d2e-853f-d68ce463e553/export 2026-07-29T18:55:33.095726+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8a584716-7b9d-4d2e-853f-d68ce463e553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49120", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mndihgn75l25", "content": "\ud83d\udfe0 CVE-2026-49120 - High (8.5)\n\nMedplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription wo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49120/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-02T21:00:46.213479Z"} 2026-06-02T21:00:46.213479+00:00 https://vulnerability.circl.lu/sighting/60827d76-63d8-4968-a4c3-8a80807e6582/export 2026-07-29T18:55:33.095816+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "60827d76-63d8-4968-a4c3-8a80807e6582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49129", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwze7lssy2e", "content": "CVE-2026-49129 - Music Player Daemon\nCVE ID : CVE-2026-49129\n \n Published : May 28, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLO...", "creation_timestamp": "2026-05-28T21:58:34.447516Z"} 2026-05-28T21:58:34.447516+00:00 https://vulnerability.circl.lu/sighting/278c8cd1-943b-4ac3-8c40-852dc5a3d748/export 2026-07-29T18:55:33.095909+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "278c8cd1-943b-4ac3-8c40-852dc5a3d748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49127", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwyscpvqc2k", "content": "CVE-2026-49127 - Music Player Daemon\nCVE ID : CVE-2026-49127\n \n Published : May 28, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack...", "creation_timestamp": "2026-05-28T21:48:33.851512Z"} 2026-05-28T21:48:33.851512+00:00 https://vulnerability.circl.lu/sighting/85a6b21b-1331-4878-aea8-3d2466da2523/export 2026-07-29T18:55:33.095997+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "85a6b21b-1331-4878-aea8-3d2466da2523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49128", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwykn46cb2k", "content": "CVE-2026-49128 - Music Player Daemon\nCVE ID : CVE-2026-49128\n \n Published : May 28, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow and LocalStorage::MapUTF...", "creation_timestamp": "2026-05-28T21:44:16.239197Z"} 2026-05-28T21:44:16.239197+00:00 https://vulnerability.circl.lu/sighting/37566333-5b50-43f9-8507-e5cd18a9466b/export 2026-07-29T18:55:33.096082+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "37566333-5b50-43f9-8507-e5cd18a9466b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49128", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4mj22h2e", "content": "\ud83d\udfe0 CVE-2026-49128 - High (7.5)\n\nMusic Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in Local...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49128/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T21:00:39.269152Z"} 2026-05-28T21:00:39.269152+00:00 https://vulnerability.circl.lu/sighting/51283278-a09e-418e-944f-3b76d3a8bdb5/export 2026-07-29T18:55:33.096173+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "51283278-a09e-418e-944f-3b76d3a8bdb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49127", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4f2zpy2k", "content": "\ud83d\udfe0 CVE-2026-49127 - High (8.6)\n\nMusic Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49127/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T21:00:32.458811Z"} 2026-05-28T21:00:32.458811+00:00