https://vulnerability.circl.lu/sightings/feed 2026-09-03T12:19:31.980593+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d62f1a03-efe7-4e1f-bff1-ffc853906f8c/export 2026-09-03T12:19:32.004146+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d62f1a03-efe7-4e1f-bff1-ffc853906f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtx7ab36q42f", "content": "CVE-2026-62862 - typebot.io\nIf you run a self\u2011hosted TypeBot version up to 3.17.1, the email login link uses a simple 6\u2011digit number that can be guessed repeatedly. An attacker who knows a user's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#typebotio #baptistearno #CVE #infosec", "creation_timestamp": "2026-08-26T01:40:05.672488Z"} 2026-08-26T01:40:05.672488+00:00 https://vulnerability.circl.lu/sighting/52fb0010-cb5f-4184-987b-fa54080fc91a/export 2026-09-03T12:19:32.008168+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "52fb0010-cb5f-4184-987b-fa54080fc91a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtx6fxkvpy2i", "content": "Critical Typebot flaw, because basic security was clearly too much paperwork\nPANIC 91% | Lag 0.0h | Typebot self-hosted versions up to and including 3.17.1 contain CVE-2026-62862, a critical vulnerabi\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-26T01:25:23.453777Z"} 2026-08-26T01:25:23.453777+00:00 https://vulnerability.circl.lu/sighting/93205760-1c90-4559-bf73-4de131941a33/export 2026-09-03T12:19:32.008668+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "93205760-1c90-4559-bf73-4de131941a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtx237f5qa24", "content": "\ud83d\udea8 CVE-2026-62862 \u2014 CVSS 9.1 CRITICAL\n\nTypebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62862\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-26T00:07:47.557268Z"} 2026-08-26T00:07:47.557268+00:00 https://vulnerability.circl.lu/sighting/054ab8c1-fbd2-4cd6-9717-ca769c7ed7a7/export 2026-09-03T12:19:32.009000+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "054ab8c1-fbd2-4cd6-9717-ca769c7ed7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62867", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtof23rn7q25", "content": "CVE-2026-62867\nIncus versions before 7.3.0 let a regular user add special settings to a storage volume that are not checked properly. This can cause the system to run extra commands with full administrator rights, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T13:30:03.875516Z"} 2026-08-22T13:30:03.875516+00:00 https://vulnerability.circl.lu/sighting/39caba50-ecdd-4833-960e-1b0510832893/export 2026-09-03T12:19:32.009292+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "39caba50-ecdd-4833-960e-1b0510832893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62867", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnzeaus7427", "content": "\ud83d\udd34 CVE-2026-62867 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, improper validat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62867/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T10:01:00.369384Z"} 2026-08-22T10:01:00.369384+00:00 https://vulnerability.circl.lu/sighting/45680077-bdd7-4fc4-a8ad-97b115a766f5/export 2026-09-03T12:19:32.009569+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "45680077-bdd7-4fc4-a8ad-97b115a766f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62867", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtms6vg4yu25", "content": "CVE-2026-62867 - incus\nIf you use Incus version earlier than 7.3.0, a user with project-level permissions can add special settings to a storage volume that cause the system to run extra commands with full\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #lxc #CVE #infosec", "creation_timestamp": "2026-08-21T22:20:03.953636Z"} 2026-08-21T22:20:03.953636+00:00 https://vulnerability.circl.lu/sighting/3bbfdd32-0151-438c-9c58-b9e0068d8e17/export 2026-09-03T12:19:32.009790+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3bbfdd32-0151-438c-9c58-b9e0068d8e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62867", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmi52tp4f2p", "content": "CVE-2026-62867 - incus\nA security issue affects incus (Debian). The advisory does not describe the issue in detail. Check the linked advisory for the fixed version and details.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:20:04.890301Z"} 2026-08-21T19:20:04.890301+00:00 https://vulnerability.circl.lu/sighting/8f7a3869-afeb-439e-b5bc-22d6b8d8611d/export 2026-09-03T12:19:32.009896+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8f7a3869-afeb-439e-b5bc-22d6b8d8611d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62867", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5gztobb2f", "content": "\ud83d\udea8 CVE-2026-62867 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of use...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62867\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:48.284145Z"} 2026-08-21T16:08:48.284145+00:00 https://vulnerability.circl.lu/sighting/40a22b8d-7726-4bd2-8f15-facfc408c3e8/export 2026-09-03T12:19:32.009973+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "40a22b8d-7726-4bd2-8f15-facfc408c3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62869", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt24ofhoch2y", "content": "\ud83d\udccc CVE-2026-62869 - Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network. https://www.cyberhub.blog/cves/CVE-2026-62869", "creation_timestamp": "2026-08-14T12:07:06.683980Z"} 2026-08-14T12:07:06.683980+00:00 https://vulnerability.circl.lu/sighting/9cfe5a9e-4ea5-4ed2-bd3a-3f010ccab2fb/export 2026-09-03T12:19:32.010048+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9cfe5a9e-4ea5-4ed2-bd3a-3f010ccab2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62869", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0287", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-56162**, met een CVSS score van 10.0 en de kwetsbaarheden met kenmerk **CVE-2026-50516, CVE-2026-56161, CVE-2026-59115, CVE-2026-62830, CVE-2026-62873** en **CVE-2026-68823**, elk met een CVSS score hoger dan 9, zijn reeds centraal verholpen door Microsoft zelf en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-50481**, met een CVSS score van 9.9 echter, vereist **wel** actie. Deze kwetsbaarheid bevindt zich in de Azure Active Directory en stelt een kwaadwillende in staat om zich verhoogde rechten toe te kennen en daarmee toegang te krijgen tot gegevens en componenten waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.\n\n```\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-47299 | 7.20 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Purview eDiscovery: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-65668 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Kubernetes Service: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50516 | 9.40 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-62869 | 8.80 | Voordoen als andere gebruiker | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Connect Sync: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-65673 | 7.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nAzure SQL Database: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-63522 | 7.80 | Verkrijgen van verhoogde rechten | \n| CVE-2026-56162 | 10.0 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-56161 | 9.60 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nAzure Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-50481 | 9.90 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nApplication Insights Profiler: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-49163 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nAzure SRE Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-62830 | 9.90 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Provisioning Service (SyncFabric): \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-59115 | 9.90 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-70340 | 8.10 | Verkrijgen van verhoogde rechten | \n| CVE-2026-65806 | 6.50 | Toegang tot gevoelige gegevens | \n|----------------|------|-------------------------------------|\n\nAzure Confidential Ledger: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-68823 | 9.10 | Uitvoeren van willekeurige code | \n|----------------|------|-------------------------------------|\n\nMicrosoft 365 Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-62873 | 9.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\nAzure Storage Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID | CVSS | Impact |\n|----------------|------|-------------------------------------|\n| CVE-2026-57104 | 8.80 | Verkrijgen van verhoogde rechten | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-13T01:00:33.334093Z"} 2026-08-13T01:00:33.334093+00:00