https://vulnerability.circl.lu/sightings/feed 2026-09-11T23:08:41.325309+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/06200632-6aca-491f-b699-7bf1755a2e92/export 2026-09-11T23:08:41.352159+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "06200632-6aca-491f-b699-7bf1755a2e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbhhxg5a72c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T20:59:23.091470Z"} 2026-09-11T20:59:23.091470+00:00 https://vulnerability.circl.lu/sighting/0d1dbae3-ba32-4688-98f8-3f760ba993fb/export 2026-09-11T23:08:41.354528+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0d1dbae3-ba32-4688-98f8-3f760ba993fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbdv6mlox27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T19:55:13.446089Z"} 2026-09-11T19:55:13.446089+00:00 https://vulnerability.circl.lu/sighting/670e1844-d86b-4a23-a1b8-b1639454e914/export 2026-09-11T23:08:41.354672+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "670e1844-d86b-4a23-a1b8-b1639454e914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbafeozon2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T18:52:40.164170Z"} 2026-09-11T18:52:40.164170+00:00 https://vulnerability.circl.lu/sighting/2739ab39-7599-4a3e-91bd-a483aa959103/export 2026-09-11T23:08:41.354782+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2739ab39-7599-4a3e-91bd-a483aa959103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvb4vbpscf2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T17:49:58.669390Z"} 2026-09-11T17:49:58.669390+00:00 https://vulnerability.circl.lu/sighting/77ad9af7-5662-42bc-a851-f658e34c3323/export 2026-09-11T23:08:41.354883+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "77ad9af7-5662-42bc-a851-f658e34c3323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvazipgtsx24", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T16:49:15.715268Z"} 2026-09-11T16:49:15.715268+00:00 https://vulnerability.circl.lu/sighting/b1c7940d-0daa-4e9a-bd1e-602d5e6bade3/export 2026-09-11T23:08:41.354984+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b1c7940d-0daa-4e9a-bd1e-602d5e6bade3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvasjg7ahm2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds,\u2026\nCVSS 9.1 \u00b7 EPSS 0.2%\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T14:44:23.663262Z"} 2026-09-11T14:44:23.663262+00:00 https://vulnerability.circl.lu/sighting/75d7b99e-fd2d-4ccb-a5fd-1a2424eecd6a/export 2026-09-11T23:08:41.355083+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "75d7b99e-fd2d-4ccb-a5fd-1a2424eecd6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvahyzfuwf2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T11:36:16.706761Z"} 2026-09-11T11:36:16.706761+00:00 https://vulnerability.circl.lu/sighting/b69bf216-3d65-4909-9a81-4c9a7e7d8b1a/export 2026-09-11T23:08:41.355180+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b69bf216-3d65-4909-9a81-4c9a7e7d8b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvaegv3crq2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T10:32:26.086828Z"} 2026-09-11T10:32:26.086828+00:00 https://vulnerability.circl.lu/sighting/6045e87e-e287-4007-8419-5a4be61432e4/export 2026-09-11T23:08:41.355273+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6045e87e-e287-4007-8419-5a4be61432e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv73jddkdh2j", "content": "CVE-2026-89086 - jose\nThe jose software for OCaml versions earlier than 0.11.0 can mistakenly treat an RSA signature as valid even when it was not created with the correct public key. This means an attacker could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jose #ocaml #CVE #infosec", "creation_timestamp": "2026-09-10T22:20:04.729346Z"} 2026-09-10T22:20:04.729346+00:00 https://vulnerability.circl.lu/sighting/127776dd-dd89-4629-a1c1-fa73e2982834/export 2026-09-11T23:08:41.355368+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "127776dd-dd89-4629-a1c1-fa73e2982834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv72tzbqc522", "content": "\ud83d\udea8 CVE-2026-89086 \u2014 CVSS 9.1 CRITICAL\n\nIn the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89086\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T22:08:09.604316Z"} 2026-09-10T22:08:09.604316+00:00