https://vulnerability.circl.lu/sightings/feed 2026-08-21T06:16:44.857745+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/21e294ff-9569-4c09-acfc-2e68611bb027/export 2026-08-21T06:16:44.879647+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "21e294ff-9569-4c09-acfc-2e68611bb027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtktm63u3t25", "content": "CVE-2026-76850\nLMDeploy reads messages from other machines and automatically turns them into executable instructions without first checking the source. An attacker who can supply those messages could cause the LMDeploy\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-21T03:40:04.128811Z"} 2026-08-21T03:40:04.128811+00:00 https://vulnerability.circl.lu/sighting/1ab3a273-ee41-473b-813f-6d115a082716/export 2026-08-21T06:16:44.881635+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1ab3a273-ee41-473b-813f-6d115a082716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrtfv6f2p", "content": "Daily IT Security Digest \u2014 2026-08-20\nAI/ML infrastructure deployments. (Source: [OFFSEQ Radar](https://radar.offseq.com/threat/cve-2026-76850-internlm-lmdeploy-rce/), [Mastodon](https://infosec.exchange/@offseq/117125246166620239))\n\n## 6. ServiceNow RCE CVE-2026-6875 Exploited to Bypass Sandbox", "creation_timestamp": "2026-08-20T05:03:09.198099Z"} 2026-08-20T05:03:09.198099+00:00 https://vulnerability.circl.lu/sighting/5a2ca255-9fd4-4a3a-8659-d1a545650412/export 2026-08-21T06:16:44.881728+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5a2ca255-9fd4-4a3a-8659-d1a545650412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrsumdt2f", "content": "Daily IT Security Digest \u2014 2026-08-20\nRadar](https://radar.offseq.com/threat/hackers-exploit-geoserver-sqli-zero-day-rce/), [Mastodon](https://infosec.exchange/@offseq/117092687906166890))\n\n## 5. InternetLM lmdeploy RCE via Pickle Deserialization \u2014 CVE-2026-76850\n\nA critical remote code execution", "creation_timestamp": "2026-08-20T05:03:08.555308Z"} 2026-08-20T05:03:08.555308+00:00 https://vulnerability.circl.lu/sighting/82f84e8d-3b1b-44f8-980e-3a30c399ea78/export 2026-08-21T06:16:44.881803+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "82f84e8d-3b1b-44f8-980e-3a30c399ea78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtibhmda3t2c", "content": "CVE-2026-76850 - lmdeploy\nLMDeploy's disaggregated serving feature allows a malicious peer to inject code that can be executed by the server, potentially leading to unauthorized access or data tampering.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lmdeploy #internlm #CVE #infosec", "creation_timestamp": "2026-08-20T03:10:04.096849Z"} 2026-08-20T03:10:04.096849+00:00 https://vulnerability.circl.lu/sighting/c89c16ac-1a62-40b0-b913-7ac7df626cc8/export 2026-08-21T06:16:44.881874+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c89c16ac-1a62-40b0-b913-7ac7df626cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mti3vinry42x", "content": "InternLM lmdeploy (0.9.2 \u2013 <0.16.0) CRITICAL vuln: Untrusted pickle deserialization allows remote code execution if disaggregated serving is enabled. Enable API keys or disable the feature. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fd...", "creation_timestamp": "2026-08-20T01:30:27.737253Z"} 2026-08-20T01:30:27.737253+00:00 https://vulnerability.circl.lu/sighting/d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664/export 2026-08-21T06:16:44.881945+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125246166620239", "content": "CVE-2026-76850 (CRITICAL): InternLM lmdeploy <0.16.0 vulnerable to remote code execution via untrusted pickle deserialization on ZeroMQ endpoints. Enable API keys or disable disaggregated serving to mitigate. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fdd1d6177df51 #OffSeq #Infosec #Vuln #CVE202676850", "creation_timestamp": "2026-08-20T01:30:26.298765Z"} 2026-08-20T01:30:26.298765+00:00 https://vulnerability.circl.lu/sighting/d8e7590e-d01b-48ec-98fb-1378fe759004/export 2026-08-21T06:16:44.882014+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d8e7590e-d01b-48ec-98fb-1378fe759004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfyxigq25", "content": "\ud83d\udea8 CVE-2026-76850 \u2014 CVSS 9.3 CRITICAL\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmd...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76850\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:12.370811Z"} 2026-08-20T00:10:12.370811+00:00 https://vulnerability.circl.lu/sighting/cc7a005b-128b-4e1d-8f46-a559be82cdd5/export 2026-08-21T06:16:44.882080+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cc7a005b-128b-4e1d-8f46-a559be82cdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r", "content": "\ud83d\udd34 CVE-2026-76850 - Critical (9.8)\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv corout...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:35.359390Z"} 2026-08-19T23:00:35.359390+00:00 https://vulnerability.circl.lu/sighting/68025dda-9bf0-4f4b-9760-317d1077fc88/export 2026-08-21T06:16:44.882146+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "68025dda-9bf0-4f4b-9760-317d1077fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx", "content": "CVE-2026-76850 - LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector\nCVE ID : CVE-2026-76850\n \n Published : Aug. 19, 2026, 10:17 p.m. | 14\u00a0minutes ago\n \n Description : LMDeploy deserializes disaggregated-serving peer mes...", "creation_timestamp": "2026-08-19T22:56:46.323082Z"} 2026-08-19T22:56:46.323082+00:00