https://vulnerability.circl.lu/sightings/feed 2026-09-14T16:01:04.294865+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d78108bd-08b7-42ed-9c59-61d08e752248/export 2026-09-14T16:01:04.313933+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d78108bd-08b7-42ed-9c59-61d08e752248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90937", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvibukmgim2b", "content": "\ud83d\udea8 CVE-2026-90937 \u2014 CVSS 9.4 CRITICAL\n\nfroxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90937\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T14:07:41.389039Z"} 2026-09-14T14:07:41.389039+00:00 https://vulnerability.circl.lu/sighting/67810245-44d5-499d-91d9-bb98808a0ee1/export 2026-09-14T16:01:04.315714+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "67810245-44d5-499d-91d9-bb98808a0ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90937", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rfmuht2f", "content": "CVE-2026-90937 - froxlor\nIn versions of Froxlor earlier than 2.2.5, the system does not check for hidden line\u2011break characters in the URLs used for subdomain redirects. This lets an authenticated customer paste\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#froxlor #CVE #infosec", "creation_timestamp": "2026-09-14T13:30:07.972130Z"} 2026-09-14T13:30:07.972130+00:00