https://vulnerability.circl.lu/sightings/feed 2026-09-02T15:25:13.047036+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4ed678d6-9193-4457-abbb-f7fb1b2c2519/export 2026-09-02T15:25:13.067685+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4ed678d6-9193-4457-abbb-f7fb1b2c2519", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e7b332c1-4b08-4624-8978-0b760d815633", "content": "", "creation_timestamp": "2026-09-02T01:01:01.750222Z"} 2026-09-02T01:01:01.750222+00:00 https://vulnerability.circl.lu/sighting/4d9d84aa-b9b9-4d46-809d-ab162e4d35de/export 2026-09-02T15:25:13.069630+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4d9d84aa-b9b9-4d46-809d-ab162e4d35de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://bsky.app/profile/secureinseconds.com/post/3muiqb36o422l", "content": "CVE-2026-72898 (CVSS 10.0) has been in the wild for over a week. N8n and Kilo Code are the latest victims, joining the first-wave roster. The week-two pattern: SMB self-hosted Metabase is the soft target. Audit every instance + run the compromise-hunting query: https://secureinseconds.com/blog/2026-", "creation_timestamp": "2026-09-02T01:00:02.524008Z"} 2026-09-02T01:00:02.524008+00:00 https://vulnerability.circl.lu/sighting/bfdf0c76-ee23-4685-897e-52e84716f559/export 2026-09-02T15:25:13.069824+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bfdf0c76-ee23-4685-897e-52e84716f559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/captainsmok3r_official/503", "content": "CVE-2026-72898 Metabase password-reset unauthenticated SQL injection", "creation_timestamp": "2026-08-29T00:00:07.181900Z"} 2026-08-29T00:00:07.181900+00:00 https://vulnerability.circl.lu/sighting/ef8f08ee-754a-4a81-9491-98c7a591c442/export 2026-09-02T15:25:13.069976+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ef8f08ee-754a-4a81-9491-98c7a591c442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/504", "content": "poc: https://github.com/EQSTLab/CVE-2026-72898", "creation_timestamp": "2026-08-29T00:00:07.151810Z"} 2026-08-29T00:00:07.151810+00:00 https://vulnerability.circl.lu/sighting/29c10ae7-82e3-438b-9518-59b933f20d60/export 2026-09-02T15:25:13.070118+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "29c10ae7-82e3-438b-9518-59b933f20d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99907", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 06:53:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMetabase SQLi\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:00:58.484158Z"} 2026-08-28T00:00:58.484158+00:00 https://vulnerability.circl.lu/sighting/7870f6a7-479b-4a0b-becf-0c595da46944/export 2026-09-02T15:25:13.070266+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7870f6a7-479b-4a0b-becf-0c595da46944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-28T00:00:48.733452Z"} 2026-08-28T00:00:48.733452+00:00 https://vulnerability.circl.lu/sighting/b98a6c64-3c42-4f73-9cdb-24fe720cf240/export 2026-09-02T15:25:13.070407+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b98a6c64-3c42-4f73-9cdb-24fe720cf240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.120083Z"} 2026-08-28T00:00:35.120083+00:00 https://vulnerability.circl.lu/sighting/ccf81cf6-b8bd-4f61-887f-9a5e83d84d77/export 2026-09-02T15:25:13.070545+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ccf81cf6-b8bd-4f61-887f-9a5e83d84d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:04.922909Z"} 2026-08-27T16:00:04.922909+00:00 https://vulnerability.circl.lu/sighting/9c32c9a6-b6ca-4a97-bd87-3f956b7e4c70/export 2026-09-02T15:25:13.070687+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9c32c9a6-b6ca-4a97-bd87-3f956b7e4c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-27T12:00:04.859437Z"} 2026-08-27T12:00:04.859437+00:00 https://vulnerability.circl.lu/sighting/8d3def61-a87f-40c2-89ac-4bcee9bc7b3d/export 2026-09-02T15:25:13.070824+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8d3def61-a87f-40c2-89ac-4bcee9bc7b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72898", "type": "seen", "source": "https://t.me/GithubRedTeam/99907", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-72898\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 06:53:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMetabase SQLi\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T10:00:03.275737Z"} 2026-08-27T10:00:03.275737+00:00