https://vulnerability.circl.lu/sightings/feed 2026-08-04T22:29:38.825499+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3a8acded-8c02-417e-8278-462aa2cd8a1d/export 2026-08-04T22:29:38.853544+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3a8acded-8c02-417e-8278-462aa2cd8a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117022971447141232", "content": "CVE-2026-67336: better-auth <1.6.11 uses insecure crypto defaults in oidcProvider & mcp, advertising 'none' algo & accepting plain PKCE. Exploitation can lead to unsigned tokens & code interception. Severity: CRITICAL. Patch to 1.6.11+ https://radar.offseq.com/threat/better-auth-versions-before-1611-contain-insecure-cryptographic-defaults-in-the-oidcprovider-and-mcp-eb22076a221f3a81 #OffSeq #CVE202667336 #OAuth #Security", "creation_timestamp": "2026-08-02T00:00:37.529213Z"} 2026-08-02T00:00:37.529213+00:00 https://vulnerability.circl.lu/sighting/e166d5b3-f9fd-44ad-a7fd-d3d4838fe1c7/export 2026-08-04T22:29:38.855873+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e166d5b3-f9fd-44ad-a7fd-d3d4838fe1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2lyo7cei25", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67336:better-auth 1.6.11 \u4e4b\u524d\u7248\u672c\u7684\u52a0\u5bc6\u6f0f\u6d1e\u98ce\u9669\u4e0e\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/DEB17FF7-B423-414C-85F8-2437A2F4045F", "creation_timestamp": "2026-08-01T23:16:05.667017Z"} 2026-08-01T23:16:05.667017+00:00 https://vulnerability.circl.lu/sighting/82491452-c0fb-4eb5-8f5b-3bae1581a80a/export 2026-08-04T22:29:38.856031+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "82491452-c0fb-4eb5-8f5b-3bae1581a80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lyfqpxo2j", "content": "\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Better-Auth: \u05de\u05d4 \u05db\u05dc \u05de\u05e4\u05ea\u05d7 \u05d5\u05de\u05e9\u05ea\u05de\u05e9 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea \u05e2\u05dc CVE-2026-67336\n\n\n\nhttps://khesef.xyz/posts/6959956F-D7E7-4A35-B7C8-FAE22DC94DA5", "creation_timestamp": "2026-08-01T23:15:56.765309Z"} 2026-08-01T23:15:56.765309+00:00 https://vulnerability.circl.lu/sighting/f3ed9b53-0300-45f2-aecf-7abea04dede0/export 2026-08-04T22:29:38.856137+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f3ed9b53-0300-45f2-aecf-7abea04dede0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lycvlav2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67336 \u0432 better-auth: \u043a\u0430\u043a \u0441\u043b\u0430\u0431\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/59CC029A-9EE3-4AA2-BC0E-C78ADE698516", "creation_timestamp": "2026-08-01T23:15:53.830727Z"} 2026-08-01T23:15:53.830727+00:00 https://vulnerability.circl.lu/sighting/8dd2db1e-4e03-4518-becf-987ac215ab9a/export 2026-08-04T22:29:38.856246+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8dd2db1e-4e03-4518-becf-987ac215ab9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2hq24uci2c", "content": "CVE-2026-67336: \u05d7\u05e9\u05d9\u05e4\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05e7\u05e8\u05d9\u05e4\u05d8\u05d5\u05d2\u05e8\u05e4\u05d9\u05ea \u05d4\u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-better-auth \u05d5\u05d4\u05e9\u05dc\u05db\u05d5\u05ea\u05d9\u05d4 \u05e2\u05dc \u05d0\u05d1\u05d8\u05d7\u05ea \u05de\u05e2\u05e8\u05db\u05d5\u05ea OAuth\n\n\n\nhttps://khesef.xyz/posts/55C59A3C-FE33-410D-BE83-5E13FF1BE3B4", "creation_timestamp": "2026-08-01T21:59:41.436795Z"} 2026-08-01T21:59:41.436795+00:00 https://vulnerability.circl.lu/sighting/bc0c363d-ffe9-4853-9b75-ccb2018a36a4/export 2026-08-04T22:29:38.856361+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bc0c363d-ffe9-4853-9b75-ccb2018a36a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2hphbbqr2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67336 \u0432 better-auth: \u043a\u0430\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 OAuth 2.0 \u0438 OpenID Connect\n\n\n\nhttps://kripta.biz/posts/4E0C312D-4299-4591-BE0A-8E7A39674D92", "creation_timestamp": "2026-08-01T21:59:21.356996Z"} 2026-08-01T21:59:21.356996+00:00 https://vulnerability.circl.lu/sighting/84dbf111-3d4c-498c-bda1-ebb3d04909a7/export 2026-08-04T22:29:38.856463+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "84dbf111-3d4c-498c-bda1-ebb3d04909a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2c2flwuo23", "content": "CVE-2026-67336 - better-auth\nVersions of better-auth before 1.6.11 have default settings that make it easier for attackers to intercept sensitive information. This affects the oidcProvider and mcp plugins, which\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#betterauth #CVE #infosec", "creation_timestamp": "2026-08-01T20:18:06.527886Z"} 2026-08-01T20:18:06.527886+00:00 https://vulnerability.circl.lu/sighting/05bddbc2-b597-4ebf-bf4e-e3b007aa2aba/export 2026-08-04T22:29:38.856567+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "05bddbc2-b597-4ebf-bf4e-e3b007aa2aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqemwqfs2l", "content": "\ud83d\udfe0 CVE-2026-67336 - High (8.7)\n\nbetter-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67336/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:01:42.565388Z"} 2026-08-01T15:01:42.565388+00:00