https://vulnerability.circl.lu/sightings/feed 2026-08-04T21:34:47.553180+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/248977e8-cb01-4aaf-b775-06224fd318ec/export 2026-08-04T21:34:47.579521+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "248977e8-cb01-4aaf-b775-06224fd318ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67341", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117024032313529986", "content": "ArcadeDB (<26.7.2) hit by CRITICAL vuln (CVE-2026-67341, CVSS 9.3). Improper auth lets users with DB access execute arbitrary JS via DEFINE FUNCTION, bypassing admin-only restrictions. Restrict access, monitor usage, check for patches. https://radar.offseq.com/threat/cve-2026-67341-incorrect-authorization-in-arcadedata-arcadedb-6bb8ad21f1650c1c #OffSeq #CVE #infosec", "creation_timestamp": "2026-08-02T05:28:02.692767Z"} 2026-08-02T05:28:02.692767+00:00 https://vulnerability.circl.lu/sighting/b0a2e289-e34a-4ca6-9d56-1df5aa3f418d/export 2026-08-04T21:34:47.581575+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b0a2e289-e34a-4ca6-9d56-1df5aa3f418d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2leyxbki2p", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67341 \u0432 ArcadeDB: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/AE5FF16A-B20A-4030-8DD7-45676E235959", "creation_timestamp": "2026-08-01T23:05:05.926529Z"} 2026-08-01T23:05:05.926529+00:00 https://vulnerability.circl.lu/sighting/4c81f46e-3a44-4c8f-b753-e350c179eceb/export 2026-08-04T21:34:47.581758+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4c81f46e-3a44-4c8f-b753-e350c179eceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2jibtotf2r", "content": "ArcadeDB 26.7.2 \u4e4b\u524d\u7248\u672c\u5b58\u5728\u4e25\u91cd\u6388\u6743\u7ed5\u8fc7\u6f0f\u6d1e:CVE-2026-67341 \u5168\u9762\u89e3\u6790\n\n\n\nhttps://qian.cx/posts/649B47C2-4DF5-4211-A679-E079414754B6", "creation_timestamp": "2026-08-01T22:31:08.515185Z"} 2026-08-01T22:31:08.515185+00:00 https://vulnerability.circl.lu/sighting/341e889d-988a-4001-8f03-5da4072a391c/export 2026-08-04T21:34:47.581900+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "341e889d-988a-4001-8f03-5da4072a391c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jhuch5j22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67341 \u0432 ArcadeDB: \u043a\u0430\u043a \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 SQL DEFINE FUNCTION\n\n\n\nhttps://kripta.biz/posts/AB8B8368-9749-42E9-9328-80FF7632EA27", "creation_timestamp": "2026-08-01T22:30:54.511700Z"} 2026-08-01T22:30:54.511700+00:00 https://vulnerability.circl.lu/sighting/f6491fcc-8717-4eec-8b64-1b76c386b612/export 2026-08-04T21:34:47.582042+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f6491fcc-8717-4eec-8b64-1b76c386b612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2c5yegfb2p", "content": "CVE-2026-67341 - arcadedb\nOld versions of ArcadeDB have a security weakness that lets attackers with database access execute their own JavaScript code. This is a serious issue because it allows\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcadedb #arcadedata #CVE #infosec", "creation_timestamp": "2026-08-01T20:20:06.699077Z"} 2026-08-01T20:20:06.699077+00:00 https://vulnerability.circl.lu/sighting/89247e0d-abb8-45c0-a262-b38e6a07823c/export 2026-08-04T21:34:47.582186+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "89247e0d-abb8-45c0-a262-b38e6a07823c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqcr5vi22b", "content": "\ud83d\udd34 CVE-2026-67341 - Critical (9.8)\n\nArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67341/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:00:39.734357Z"} 2026-08-01T15:00:39.734357+00:00 https://vulnerability.circl.lu/sighting/a5acf1d6-6ee3-4f3d-83aa-083ec3186984/export 2026-08-04T21:34:47.582337+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a5acf1d6-6ee3-4f3d-83aa-083ec3186984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4jpcl4yqppusi", "content": "CVE-2026-67341 - ArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTION\nCVE ID : CVE-2026-67341\n \n Published : Aug. 1, 2026, 1:17 p.m. | 25\u00a0minutes ago\n \n Description : ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFIN...", "creation_timestamp": "2026-08-01T13:49:27.415610Z"} 2026-08-01T13:49:27.415610+00:00