https://vulnerability.circl.lu/sightings/feed 2026-09-14T10:33:11.189397+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1cde1a38-2e8f-450b-b402-1c470c63c39a/export 2026-09-14T10:33:11.218733+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1cde1a38-2e8f-450b-b402-1c470c63c39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90562", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvfpub3t6j2j", "content": "CVE-2026-90562 - langbot\nVersions of LangBot before 4.10.11 create password\u2011reset keys that are easy to guess and do not limit how often the reset function can be called. If an attacker knows the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langbot #langbotapp #CVE #infosec", "creation_timestamp": "2026-09-13T13:40:05.036966Z"} 2026-09-13T13:40:05.036966+00:00 https://vulnerability.circl.lu/sighting/6f9bdd4f-3244-4ae7-ad28-c5db199c5f87/export 2026-09-14T10:33:11.220568+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6f9bdd4f-3244-4ae7-ad28-c5db199c5f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90562", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfnpxbamg2o", "content": "\ud83d\udfe0 CVE-2026-90562 - High (8.1)\n\nLangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90562/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-13T13:02:03.753457Z"} 2026-09-13T13:02:03.753457+00:00 https://vulnerability.circl.lu/sighting/ab01e392-5f5d-4fc9-a399-18aca3b03060/export 2026-09-14T10:33:11.220712+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ab01e392-5f5d-4fc9-a399-18aca3b03060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90562", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvfkoc5v7y2f", "content": "\ud83d\udea8 CVE-2026-90562 \u2014 CVSS 9.2 CRITICAL\n\nLangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate li...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90562\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-13T12:07:15.798572Z"} 2026-09-13T12:07:15.798572+00:00 https://vulnerability.circl.lu/sighting/d5d51e8b-7890-4f2f-9eb8-1fccdd65fac0/export 2026-09-14T10:33:11.220824+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d5d51e8b-7890-4f2f-9eb8-1fccdd65fac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90562", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvfkc44rgx2p", "content": "LangBot 4.0.8.1 \u2013 4.10.10 has a CRITICAL flaw: weak password reset keys & no rate limiting enable admin password takeovers. Upgrade to 4.10.11+ ASAP. https://radar.offseq.com/threat/cve-2026-90562-insufficient-entropy-in-langbot-app-langbot-e9a2899a1e2d1fa5 #OffSeq #CVE202690562 #AppSec", "creation_timestamp": "2026-09-13T12:00:27.175390Z"} 2026-09-13T12:00:27.175390+00:00 https://vulnerability.circl.lu/sighting/ea74ae3d-079f-47fa-85f0-f327f3d0ff0e/export 2026-09-14T10:33:11.220922+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ea74ae3d-079f-47fa-85f0-f327f3d0ff0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90562", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117263618841865453", "content": "LangBot <4.10.11 is affected by CRITICAL CVE-2026-90562: password reset keys generated with only 24 bits of entropy & no rate limiting let attackers brute-force admin resets. Upgrade to 4.10.11+! https://radar.offseq.com/threat/cve-2026-90562-insufficient-entropy-in-langbot-app-langbot-e9a2899a1e2d1fa5 #OffSeq #CVE202690562 #infosec #AppSec", "creation_timestamp": "2026-09-13T12:00:25.742219Z"} 2026-09-13T12:00:25.742219+00:00