https://vulnerability.circl.lu/sightings/feed 2026-07-16T21:29:15.599152+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/419921c8-d24f-4def-aa23-07827414cd43/export 2026-07-16T21:29:15.619226+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "419921c8-d24f-4def-aa23-07827414cd43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55652", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqq25nzyeb2x", "content": "CVE-2026-55652 - Wekan: Header-login IP allowlist bypass via X-Forwarded-For spoofing in Wekan allows unauthenticated full account takeover (incl. admin)\nCVE ID : CVE-2026-55652\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : Wekan is open source kan...", "creation_timestamp": "2026-07-16T01:04:56.926408Z"} 2026-07-16T01:04:56.926408+00:00 https://vulnerability.circl.lu/sighting/f9b964f3-270a-4ec7-86f0-09a07172075e/export 2026-07-16T21:29:15.622688+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f9b964f3-270a-4ec7-86f0-09a07172075e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55652", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpt7o5jtk26", "content": "\ud83d\udd34 CVE-2026-55652 - Critical (9.8)\n\nWekan is open source kanban built with Meteor. Prior to 9.46, header-login with HEADER_LOGIN_TRUS...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55652/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T23:00:48.936871Z"} 2026-07-15T23:00:48.936871+00:00 https://vulnerability.circl.lu/sighting/dca8d005-334b-4fa2-86a1-fd7d88cb30f0/export 2026-07-16T21:29:15.622829+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dca8d005-334b-4fa2-86a1-fd7d88cb30f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55652", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5txf2q2w", "content": "CVE-2026-55652 - wekan\nAn attacker can gain full access to any Wekan account, including admin accounts, by sending a fake IP address. This can happen if you're using Wekan's header-login feature with trusted IP\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wekan #CVE #infosec", "creation_timestamp": "2026-07-15T22:06:05.534233Z"} 2026-07-15T22:06:05.534233+00:00