https://vulnerability.circl.lu/sightings/feed 2026-08-27T19:43:27.403839+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8e22fd00-2ee3-4a63-85fd-69360d695f3b/export 2026-08-27T19:43:27.425986+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8e22fd00-2ee3-4a63-85fd-69360d695f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7487", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtydkmt2jf26", "content": "\ud83d\udd17 CVE : CVE-2025-10903, CVE-2026-15387, CVE-2026-18252, CVE-2026-3035, CVE-2026-4398, CVE-2026-7487, CVE-2026-77801", "creation_timestamp": "2026-08-26T12:30:08.556315Z"} 2026-08-26T12:30:08.556315+00:00 https://vulnerability.circl.lu/sighting/48ad064d-5c50-4c38-a8b4-a5bcfecca47d/export 2026-08-27T19:43:27.429049+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "48ad064d-5c50-4c38-a8b4-a5bcfecca47d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74877", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtrldopdh32v", "content": "HIGH severity CVE just published in OpenSSL:\n\nCVE-2026-74877. openssl_encrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revoke_key method that allows authenticated clients to revoke any other client's key.\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74877", "creation_timestamp": "2026-08-23T20:00:47.183466Z"} 2026-08-23T20:00:47.183466+00:00 https://vulnerability.circl.lu/sighting/c7e025e1-d756-42c5-a8f8-dd5311b8afde/export 2026-08-27T19:43:27.429191+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c7e025e1-d756-42c5-a8f8-dd5311b8afde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74874", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtr5wvahku2p", "content": "CVE-2026-74874 [HIGH] OpenSSL\n\nopenssl_encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate_pseudorandom_sequence function. Attackers who know the password can recover the Mer\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74874", "creation_timestamp": "2026-08-23T16:00:59.065587Z"} 2026-08-23T16:00:59.065587+00:00 https://vulnerability.circl.lu/sighting/030b60cb-e3b1-4ea9-bf4c-1372144f07d5/export 2026-08-27T19:43:27.429303+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "030b60cb-e3b1-4ea9-bf4c-1372144f07d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74878", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtkv234zho2t", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74878. openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute aut\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74878", "creation_timestamp": "2026-08-21T04:05:44.550866Z"} 2026-08-21T04:05:44.550866+00:00 https://vulnerability.circl.lu/sighting/75bca771-73be-4717-954a-36a602e7dcb9/export 2026-08-27T19:43:27.429427+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "75bca771-73be-4717-954a-36a602e7dcb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74878", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtjzz23r242j", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74878. openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute aut\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74878", "creation_timestamp": "2026-08-20T20:01:58.193372Z"} 2026-08-20T20:01:58.193372+00:00 https://vulnerability.circl.lu/sighting/c44d9053-255d-4183-8e50-a5004f7a3fa7/export 2026-08-27T19:43:27.429532+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c44d9053-255d-4183-8e50-a5004f7a3fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74878", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtj7bextcp2q", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74878. openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute aut\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74878", "creation_timestamp": "2026-08-20T12:03:27.077625Z"} 2026-08-20T12:03:27.077625+00:00 https://vulnerability.circl.lu/sighting/48c6fcc8-de74-41ae-af3d-2c78d7f4a160/export 2026-08-27T19:43:27.429637+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "48c6fcc8-de74-41ae-af3d-2c78d7f4a160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtirslzue22b", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74876. openssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates key bundles from untrusted data without verifying signatures. Attackers can call from_d\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74876", "creation_timestamp": "2026-08-20T08:02:33.276231Z"} 2026-08-20T08:02:33.276231+00:00 https://vulnerability.circl.lu/sighting/2eb009ae-77da-4d2f-87fc-08768472d652/export 2026-08-27T19:43:27.429733+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2eb009ae-77da-4d2f-87fc-08768472d652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74875", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtienckmqf25", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74875. openssl_encrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jso\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74875", "creation_timestamp": "2026-08-20T04:06:56.516454Z"} 2026-08-20T04:06:56.516454+00:00 https://vulnerability.circl.lu/sighting/c2edce49-efd8-4ceb-bbb5-c68e2783719a/export 2026-08-27T19:43:27.429830+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c2edce49-efd8-4ceb-bbb5-c68e2783719a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74872", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mthwzxjjfv2v", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74872. openssl_encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74872", "creation_timestamp": "2026-08-20T00:03:28.288794Z"} 2026-08-20T00:03:28.288794+00:00 https://vulnerability.circl.lu/sighting/07742d85-a19b-4c87-bdad-f0bfff2125d4/export 2026-08-27T19:43:27.429929+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "07742d85-a19b-4c87-bdad-f0bfff2125d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdfkqhthf25", "content": "CVE-2026-74878 - openssl-encrypt\nThe OpenSSL TOTP rate limiter doesn't share its state across multiple workers or save its state when the server restarts, making it vulnerable to brute-force attacks. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:40:04.850792Z"} 2026-08-18T04:40:04.850792+00:00