https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 10:37:41 +0000 https://vulnerability.circl.lu/sighting/643a6a1b-8207-401b-b91a-57b41ca43d17/export {"uuid": "643a6a1b-8207-401b-b91a-57b41ca43d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-109567", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsm7zpny22l", "content": "CVE-2026-109567 - rapyd-admin\nThe Rapyd Admin tool (versions 9.0.0 through 9.19.x) has a flaw in its user\u2011editing feature that lets someone with basic edit permissions assign the admin role to their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rapydadmin #zofe #CVE #infosec", "creation_timestamp": "2026-10-14T03:30:04.495546Z"} {"uuid": "643a6a1b-8207-401b-b91a-57b41ca43d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-109567", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsm7zpny22l", "content": "CVE-2026-109567 - rapyd-admin\nThe Rapyd Admin tool (versions 9.0.0 through 9.19.x) has a flaw in its user\u2011editing feature that lets someone with basic edit permissions assign the admin role to their own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rapydadmin #zofe #CVE #infosec", "creation_timestamp": "2026-10-14T03:30:04.495546Z"} https://vulnerability.circl.lu/sighting/643a6a1b-8207-401b-b91a-57b41ca43d17/export Wed, 14 Oct 2026 03:30:04 +0000 https://vulnerability.circl.lu/sighting/409ddccc-4ddc-4102-be29-a526abc025de/export {"uuid": "409ddccc-4ddc-4102-be29-a526abc025de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-109567", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117430122518867129", "content": "CVE-2026-109567 Rapyd Admin from 9.0.0 before 9.20.0 Privilege Escalation via UsersEdit Component Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire component that allows users with the edit users permission to assign themselves the admin role. Attackers holding roles such as the shipped operator role can submit the admin role ID for their own account, lifting tenant scoping, bypassing per-record authorization, and enabling impersonation.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109567https://github.com/zofe/rapyd-admin/commit/acd6ee85f9e5ccec67199673b039c605d161406ahttps://github.com/zofe/rapyd-admin/releases/tag/v9.20.0https://github.com/zofe/rapyd-admin/blob/v9.19.0/app/Modules/Auth/Livewire/UsersEdit.php#L119-L121https://github.com/zofe/rapyd-adminhttps://www.vulncheck.com/advisories/rapyd-admin-from-9.0.0-before-9.20.0-privilege-escalation-via-usersedit-component#zofe #rapyd-admin#CVE_2026_109567#bot", "creation_timestamp": "2026-10-12T21:44:29.515605Z"} {"uuid": "409ddccc-4ddc-4102-be29-a526abc025de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-109567", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117430122518867129", "content": "CVE-2026-109567 Rapyd Admin from 9.0.0 before 9.20.0 Privilege Escalation via UsersEdit Component Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire component that allows users with the edit users permission to assign themselves the admin role. Attackers holding roles such as the shipped operator role can submit the admin role ID for their own account, lifting tenant scoping, bypassing per-record authorization, and enabling impersonation.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109567https://github.com/zofe/rapyd-admin/commit/acd6ee85f9e5ccec67199673b039c605d161406ahttps://github.com/zofe/rapyd-admin/releases/tag/v9.20.0https://github.com/zofe/rapyd-admin/blob/v9.19.0/app/Modules/Auth/Livewire/UsersEdit.php#L119-L121https://github.com/zofe/rapyd-adminhttps://www.vulncheck.com/advisories/rapyd-admin-from-9.0.0-before-9.20.0-privilege-escalation-via-usersedit-component#zofe #rapyd-admin#CVE_2026_109567#bot", "creation_timestamp": "2026-10-12T21:44:29.515605Z"} https://vulnerability.circl.lu/sighting/409ddccc-4ddc-4102-be29-a526abc025de/export Mon, 12 Oct 2026 21:44:29 +0000