https://vulnerability.circl.lu/sightings/feed 2026-09-07T12:56:06.626776+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8bc63b46-fd06-4d96-8b8a-6621178f5b7a/export 2026-09-07T12:56:06.644087+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8bc63b46-fd06-4d96-8b8a-6621178f5b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95672", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52832-PoC-exploit-nuclio-dashboard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mdvpat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:43:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root. (CVE-2026-52832, \u22641.15.27)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-02T00:00:23.071007Z"} 2026-08-02T00:00:23.071007+00:00 https://vulnerability.circl.lu/sighting/3606e83c-2fc9-4c9c-bb0a-78c6fa3d61dd/export 2026-09-07T12:56:06.646433+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3606e83c-2fc9-4c9c-bb0a-78c6fa3d61dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95672", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52832-PoC-exploit-nuclio-dashboard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mdvpat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:43:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root. (CVE-2026-52832, \u22641.15.27)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-01T19:00:04.003455Z"} 2026-08-01T19:00:04.003455+00:00 https://vulnerability.circl.lu/sighting/ec4bb238-9823-4685-8d56-0bbbacef54bc/export 2026-09-07T12:56:06.646583+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ec4bb238-9823-4685-8d56-0bbbacef54bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "published-proof-of-concept", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-30T01:00:13.963222Z"} 2026-07-30T01:00:13.963222+00:00 https://vulnerability.circl.lu/sighting/c1ee879d-0d1e-4395-873c-0475fe297cf2/export 2026-09-07T12:56:06.646705+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c1ee879d-0d1e-4395-873c-0475fe297cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "seen", "source": "https://t.me/GithubRedTeam/95672", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52832-PoC-exploit-nuclio-dashboard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mdvpat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:43:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root. (CVE-2026-52832, \u22641.15.27)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T00:02:05.915955Z"} 2026-07-30T00:02:05.915955+00:00 https://vulnerability.circl.lu/sighting/2e49d89c-f017-4ae3-a08b-48f2d8e8fa39/export 2026-09-07T12:56:06.646808+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2e49d89c-f017-4ae3-a08b-48f2d8e8fa39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "published-proof-of-concept", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-30T00:00:09.800759Z"} 2026-07-30T00:00:09.800759+00:00 https://vulnerability.circl.lu/sighting/64cd0f91-b1b2-46cc-884f-3863d654b1a9/export 2026-09-07T12:56:06.646905+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "64cd0f91-b1b2-46cc-884f-3863d654b1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "seen", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-29T20:00:04.370411Z"} 2026-07-29T20:00:04.370411+00:00 https://vulnerability.circl.lu/sighting/314d4193-ca01-42f3-bac6-406cd97c22c3/export 2026-09-07T12:56:06.647004+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "314d4193-ca01-42f3-bac6-406cd97c22c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "seen", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-29T13:00:06.163822Z"} 2026-07-29T13:00:06.163822+00:00 https://vulnerability.circl.lu/sighting/c1d127d4-c4ec-4c54-8aff-6a0b6b9fc32b/export 2026-09-07T12:56:06.647099+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c1d127d4-c4ec-4c54-8aff-6a0b6b9fc32b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "seen", "source": "https://t.me/GithubRedTeam/95672", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52832-PoC-exploit-nuclio-dashboard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mdvpat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:43:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root. (CVE-2026-52832, \u22641.15.27)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T12:01:54.614045Z"} 2026-07-29T12:01:54.614045+00:00 https://vulnerability.circl.lu/sighting/0f18cfe2-1cfd-4670-8045-626a01037290/export 2026-09-07T12:56:06.647205+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "0f18cfe2-1cfd-4670-8045-626a01037290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52832", "type": "published-proof-of-concept", "source": "https://github.com/nuclio/nuclio/security/advisories/GHSA-wpcj-rmv4-86qg", "content": "", "creation_timestamp": "2026-07-16T20:35:02.492221Z"} 2026-07-16T20:35:02.492221+00:00