https://vulnerability.circl.lu/sightings/feed 2026-09-02T15:17:47.892831+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8c02ef6d-da10-4767-9407-34545080c330/export 2026-09-02T15:17:47.920283+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8c02ef6d-da10-4767-9407-34545080c330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mujwsxkzri2t", "content": "CVE-2026-75604 - next.js\nIf you run a Next.js web app on a Windows server and use certain routing features, an attacker can trick the system into accessing files outside its safe area, exposing secret data and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nextjs #vercel #CVE #infosec", "creation_timestamp": "2026-09-02T12:30:04.966565Z"} 2026-09-02T12:30:04.966565+00:00 https://vulnerability.circl.lu/sighting/f510f956-0408-4614-b9d0-dc5ff528442a/export 2026-09-02T15:17:47.922347+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f510f956-0408-4614-b9d0-dc5ff528442a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48675", "content": "CVE-2026-75604 Next.js Windows RCE \n*\nPoC", "creation_timestamp": "2026-09-02T06:00:05.299042Z"} 2026-09-02T06:00:05.299042+00:00 https://vulnerability.circl.lu/sighting/b70ef44f-64a3-4540-b048-74621ec579cd/export 2026-09-02T15:17:47.922507+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b70ef44f-64a3-4540-b048-74621ec579cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muijoyhfph2z", "content": "\ud83d\udd34 CVE-2026-75604 - Critical (9)\n\nNext.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75604/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T23:02:33.816747Z"} 2026-09-01T23:02:33.816747+00:00 https://vulnerability.circl.lu/sighting/b3a83add-323c-4e7e-88c1-609feb40327d/export 2026-09-02T15:17:47.922648+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b3a83add-323c-4e7e-88c1-609feb40327d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mufpoa26uu2c", "content": "~Checkpoint~\nAttacks hit airports, healthcare and government while actively exploited flaws enable remote code execution.\n-\nIOCs: CVE-2026-82078, CVE-2026-18885, CVE-2026-75604\n-\n#Ransomware #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-08-31T20:11:31.738877Z"} 2026-08-31T20:11:31.738877+00:00 https://vulnerability.circl.lu/sighting/0b1efb63-2b85-4d19-8538-f0be6f0c139b/export 2026-09-02T15:17:47.922777+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "0b1efb63-2b85-4d19-8538-f0be6f0c139b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://www.acn.gov.it/portale/w/next.js-disponibili-poc-per-2-vulnerabilita", "content": "", "creation_timestamp": "2026-08-31T12:45:02.790538Z"} 2026-08-31T12:45:02.790538+00:00 https://vulnerability.circl.lu/sighting/002af1a0-790d-424a-b39d-9bb930ddd3d7/export 2026-09-02T15:17:47.923996+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "002af1a0-790d-424a-b39d-9bb930ddd3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "content": "", "creation_timestamp": "2026-08-31T00:00:40.225506Z"} 2026-08-31T00:00:40.225506+00:00 https://vulnerability.circl.lu/sighting/66ce6669-51a2-4f7b-b1f4-a2cd91e8cd1d/export 2026-09-02T15:17:47.924191+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "66ce6669-51a2-4f7b-b1f4-a2cd91e8cd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "content": "", "creation_timestamp": "2026-08-30T00:00:27.726077Z"} 2026-08-30T00:00:27.726077+00:00 https://vulnerability.circl.lu/sighting/543eac21-29b2-420b-bf7e-54178d68c73a/export 2026-09-02T15:17:47.924309+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "543eac21-29b2-420b-bf7e-54178d68c73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "content": "", "creation_timestamp": "2026-08-29T23:00:20.812516Z"} 2026-08-29T23:00:20.812516+00:00 https://vulnerability.circl.lu/sighting/f0805f68-5553-4f75-9222-99daa079c168/export 2026-09-02T15:17:47.924417+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f0805f68-5553-4f75-9222-99daa079c168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/117178773943525377", "content": "Next.js patched two critical flaws that let an unauthenticated attacker run code on the server.\nApps on Vercel are already fixed. Self-hosted deployments are not.\nUpdate to 15.5.24 or 16.3.3 now. (CVE-2026-75604)\nhttps://suriq.io/blog/nextjs-critical-flaws-self-hosted-rce\n#CVE #CloudSecurity #infosec #cybersecurity", "creation_timestamp": "2026-08-29T16:16:16.344597Z"} 2026-08-29T16:16:16.344597+00:00 https://vulnerability.circl.lu/sighting/c8bf4bb2-9a33-4a1e-8a07-ed08fd0a4477/export 2026-09-02T15:17:47.924522+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c8bf4bb2-9a33-4a1e-8a07-ed08fd0a4477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mu7ukyfmsb2e", "content": "Next.js patched two critical flaws that let an unauthenticated attacker run code on the server.\n\nApps on Vercel are already fixed. Self-hosted deployments are not.\n\nUpdate to 15.5.24 or 16.3.3 now. (CVE-2026-75604)", "creation_timestamp": "2026-08-29T12:23:13.069191Z"} 2026-08-29T12:23:13.069191+00:00