https://vulnerability.circl.lu/sightings/feed 2026-09-19T05:21:18.081575+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8d554908-2e8e-413b-b4c9-24c4d317f46c/export 2026-09-19T05:21:18.107470+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "8d554908-2e8e-413b-b4c9-24c4d317f46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-66393", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-rf74-v2fm-23pw", "content": "", "creation_timestamp": "2026-09-02T16:35:07.388573Z"} 2026-09-02T16:35:07.388573+00:00 https://vulnerability.circl.lu/sighting/c1d34c61-5158-4e13-b8b3-373a297daa74/export 2026-09-19T05:21:18.110484+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c1d34c61-5158-4e13-b8b3-373a297daa74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu4lqbmiqk24", "content": "\ud83d\udccc CVE-2026-66393 - NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of ser... https://www.cyberhub.blog/cves/CVE-2026-66393", "creation_timestamp": "2026-08-28T05:07:06.781046Z"} 2026-08-28T05:07:06.781046+00:00 https://vulnerability.circl.lu/sighting/6d706a7a-7c0b-41bc-8753-dcb21ba1d69a/export 2026-09-19T05:21:18.111372+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6d706a7a-7c0b-41bc-8753-dcb21ba1d69a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117145475063628409", "content": "CVE-2026-66393 - DoS vulnerability in NLTK. Deeply nested JSON triggers unhandled recursion crash in Python. CVSS 7.5. Update to 3.9.4 immediately. #CVE #Python #infosec\nhttps://www.valtersit.com/cve/CVE-2026-66393/", "creation_timestamp": "2026-08-23T15:14:55.246364Z"} 2026-08-23T15:14:55.246364+00:00 https://vulnerability.circl.lu/sighting/54f22ff2-448e-4890-8df7-abff726d6537/export 2026-09-19T05:21:18.111460+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "54f22ff2-448e-4890-8df7-abff726d6537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtr3ei4wt52t", "content": "CVE-2026-66393 - DoS vulnerability in NLTK. Deeply nested JSON triggers unhandled recursion crash in Python. CVSS 7.5. Update to 3.9.4 immediately. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-66393/", "creation_timestamp": "2026-08-23T15:14:54.058961Z"} 2026-08-23T15:14:54.058961+00:00 https://vulnerability.circl.lu/sighting/e974c529-59b9-4c09-bfe4-1dc5154da7d0/export 2026-09-19T05:21:18.111527+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e974c529-59b9-4c09-bfe4-1dc5154da7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66393", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpbkhwdi52z", "content": "\ud83d\udfe0 CVE-2026-66393 - High (7.5)\n\nNLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.deco...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66393/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T22:00:19.001667Z"} 2026-08-22T22:00:19.001667+00:00 https://vulnerability.circl.lu/sighting/91706235-3d02-4807-b645-f9935f077549/export 2026-09-19T05:21:18.111599+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "91706235-3d02-4807-b645-f9935f077549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6639", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u", "content": "CVE-2026-6639 ai-copilot-content-generator (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T08:15:10.456160Z"} 2026-08-06T08:15:10.456160+00:00 https://vulnerability.circl.lu/sighting/60a5406b-fd9d-4676-8793-4a2bdf2f37ab/export 2026-09-19T05:21:18.111662+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "60a5406b-fd9d-4676-8793-4a2bdf2f37ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltwvjt2e", "content": "CVE-2026-66398\nAuthenticated administrators with specific privileges can upload malicious files and execute code on the server. This allows attackers to access sensitive data and potentially take control of the system. Update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:09.208479Z"} 2026-07-30T04:56:09.208479+00:00 https://vulnerability.circl.lu/sighting/a98670e4-3d66-4f64-9869-0de25d14c57d/export 2026-09-19T05:21:18.111728+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a98670e4-3d66-4f64-9869-0de25d14c57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltbwyb2j", "content": "CVE-2026-66396\nSiYuan, a software used for managing documents, has a security issue. An attacker with permission to edit documents can embed malicious code in an image, which can then be executed when the document is opened.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:04.163402Z"} 2026-07-30T04:56:04.163402+00:00 https://vulnerability.circl.lu/sighting/f18a3ae1-3f59-477e-816d-eed24b4fc63c/export 2026-09-19T05:21:18.111792+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f18a3ae1-3f59-477e-816d-eed24b4fc63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66397", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniawca42i", "content": "CVE-2026-66397\nA vulnerability in phpMyFAQ, a FAQ management system, allows authenticated attackers to delete any file on the server. This could allow an attacker to disable security features and create new administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.553722Z"} 2026-07-30T04:54:04.553722+00:00 https://vulnerability.circl.lu/sighting/ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d/export 2026-09-19T05:21:18.111855+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66395", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniagskn23", "content": "CVE-2026-66395\nA security flaw in SiYuan Desktop's bazaar plugin allows attackers to inject malicious code by sending a specially crafted web link. This could potentially allow attackers to take control of a user's computer.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.037819Z"} 2026-07-30T04:54:04.037819+00:00