https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 27 Sep 2026 21:34:38 +0000 https://vulnerability.circl.lu/sighting/9a0c48d1-e2a6-42fa-845a-aea0eab8ddb1/export {"uuid": "9a0c48d1-e2a6-42fa-845a-aea0eab8ddb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100582", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrjsak2x", "content": "Daily IT Security Digest \u2014 2026-09-26\nmulti-person DMs), CVE-2026-100582 (HIGH, missing authorization in MS Teams channel read allowlist bypass), and CVE-2026-93952 variants affecting Discord integration, the Browser extension relay (DoS), diagnostics-prometheus, and third-party credential routing.", "creation_timestamp": "2026-09-26T05:01:58.077780Z"} {"uuid": "9a0c48d1-e2a6-42fa-845a-aea0eab8ddb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100582", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwfixrjsak2x", "content": "Daily IT Security Digest \u2014 2026-09-26\nmulti-person DMs), CVE-2026-100582 (HIGH, missing authorization in MS Teams channel read allowlist bypass), and CVE-2026-93952 variants affecting Discord integration, the Browser extension relay (DoS), diagnostics-prometheus, and third-party credential routing.", "creation_timestamp": "2026-09-26T05:01:58.077780Z"} https://vulnerability.circl.lu/sighting/9a0c48d1-e2a6-42fa-845a-aea0eab8ddb1/export Sat, 26 Sep 2026 05:01:58 +0000 https://vulnerability.circl.lu/sighting/9f69aaf7-93b4-4c0e-a41d-e752b18bae7c/export {"uuid": "9f69aaf7-93b4-4c0e-a41d-e752b18bae7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100582", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwfc6ijy7j2v", "content": "openclaw msteams <2026.8.1 has a HIGH severity bug (CVE-2026-100582) allowing unauthorized channel reads. Upgrade to 2026.8.1+ to block data exposure. https://radar.offseq.com/threat/cve-2026-100582-missing-authorization-in-openclaw-msteams-98e504ab6e11afa6 #OffSeq #Vulnerability #Cybersecurity", "creation_timestamp": "2026-09-26T03:00:27.992966Z"} {"uuid": "9f69aaf7-93b4-4c0e-a41d-e752b18bae7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100582", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwfc6ijy7j2v", "content": "openclaw msteams <2026.8.1 has a HIGH severity bug (CVE-2026-100582) allowing unauthorized channel reads. Upgrade to 2026.8.1+ to block data exposure. https://radar.offseq.com/threat/cve-2026-100582-missing-authorization-in-openclaw-msteams-98e504ab6e11afa6 #OffSeq #Vulnerability #Cybersecurity", "creation_timestamp": "2026-09-26T03:00:27.992966Z"} https://vulnerability.circl.lu/sighting/9f69aaf7-93b4-4c0e-a41d-e752b18bae7c/export Sat, 26 Sep 2026 03:00:27 +0000 https://vulnerability.circl.lu/sighting/fc0cb6c7-dd85-4f72-9ff9-580c6d7d3002/export {"uuid": "fc0cb6c7-dd85-4f72-9ff9-580c6d7d3002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100582", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117335105540930772", "content": "CVE-2026-100582 (HIGH): openclaw msteams <2026.8.1 has a missing authorization flaw \u2014 low-trust users can bypass channel read allowlists and access restricted data. Patch to 2026.8.1 ASAP. https://radar.offseq.com/threat/cve-2026-100582-missing-authorization-in-openclaw-msteams-98e504ab6e11afa6 #OffSeq #Vuln #OpenClaw #Security", "creation_timestamp": "2026-09-26T03:00:25.881344Z"} {"uuid": "fc0cb6c7-dd85-4f72-9ff9-580c6d7d3002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100582", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117335105540930772", "content": "CVE-2026-100582 (HIGH): openclaw msteams <2026.8.1 has a missing authorization flaw \u2014 low-trust users can bypass channel read allowlists and access restricted data. Patch to 2026.8.1 ASAP. https://radar.offseq.com/threat/cve-2026-100582-missing-authorization-in-openclaw-msteams-98e504ab6e11afa6 #OffSeq #Vuln #OpenClaw #Security", "creation_timestamp": "2026-09-26T03:00:25.881344Z"} https://vulnerability.circl.lu/sighting/fc0cb6c7-dd85-4f72-9ff9-580c6d7d3002/export Sat, 26 Sep 2026 03:00:25 +0000