https://vulnerability.circl.lu/sightings/feed 2026-09-18T05:17:00.617027+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/01ee51fd-c8e2-473c-9047-e2268aa502a8/export 2026-09-18T05:17:00.638811+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "01ee51fd-c8e2-473c-9047-e2268aa502a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://gist.github.com/ichintu/4bf7ae5351bf31e7fd8a71db957a56bc", "content": "This threat intelligence briefing highlights four key developments:\n\n\u2022 **Iranian Hacktivism:** The Iran-linked Handala Hack group is deploying the HEAVYGRAM Telegram backdoor and CRUDEEXCLUDE utility to execute remote commands, steal credentials, exfiltrate session data, and capture screenshots.\n\u2022 **AI Agent Vulnerabilities:** AI systems using the Model Context Protocol (MCP) are exposed to attacks via untrusted tool descriptions, enabling metadata poisoning and context manipulation. Experts recommend pinning descriptions, treating them as untrusted input, and applying cryptographic hashing.\n\u2022 **Critical CVEs:** Azure Billing (CVE-2026-62874, CVSS 10.0) contains a privilege escalation flaw due to insufficient data verification. WeGIA charity software (CVE-2026-54670, CVSS 9.1) suffers from unauthenticated auth bypass and local file inclusion, allowing data/financial manipulation; patched in v3.8.5.", "creation_timestamp": "2026-09-18T04:01:52.936109Z"} 2026-09-18T04:01:52.936109+00:00 https://vulnerability.circl.lu/sighting/ce4f3576-f89d-40b4-a403-6fbfbda8844a/export 2026-09-18T05:17:00.641184+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ce4f3576-f89d-40b4-a403-6fbfbda8844a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqzxh6da62t", "content": "CVE-2026-54670 - wegia\nThe web manager used by charities (versions before 3.8.5) does not properly check who can call certain functions. This means anyone on the internet can see donation records,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wegia #labredescefetrj #CVE #infosec", "creation_timestamp": "2026-09-18T01:40:06.158501Z"} 2026-09-18T01:40:06.158501+00:00 https://vulnerability.circl.lu/sighting/f2491dc6-e269-44e7-a832-e8084bd68dba/export 2026-09-18T05:17:00.641341+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f2491dc6-e269-44e7-a832-e8084bd68dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqusonzzo2t", "content": "\ud83d\udea8 CVE-2026-54670 \u2014 CVSS 9.1 CRITICAL\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request dispatcher in ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54670\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T00:07:57.804184Z"} 2026-09-18T00:07:57.804184+00:00 https://vulnerability.circl.lu/sighting/8de03a05-9eef-494b-b6eb-15528ddd1400/export 2026-09-18T05:17:00.641458+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8de03a05-9eef-494b-b6eb-15528ddd1400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqr4mzuzc24", "content": "\ud83d\udd34 CVE-2026-54670 - Critical (9.1)\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request disp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54670/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T23:01:57.773370Z"} 2026-09-17T23:01:57.773370+00:00