https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 09 Jul 2026 19:37:53 +0000 https://vulnerability.circl.lu/sighting/bd47f428-fac6-4adb-b222-fdadbbadb2a1/export {"uuid": "bd47f428-fac6-4adb-b222-fdadbbadb2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq734t72sj2k", "content": "\ud83d\udccc CVE-2026-46354 - Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, ... https://www.cyberhub.blog/cves/CVE-2026-46354", "creation_timestamp": "2026-07-09T07:07:08.384664Z"} {"uuid": "bd47f428-fac6-4adb-b222-fdadbbadb2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq734t72sj2k", "content": "\ud83d\udccc CVE-2026-46354 - Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, ... https://www.cyberhub.blog/cves/CVE-2026-46354", "creation_timestamp": "2026-07-09T07:07:08.384664Z"} https://vulnerability.circl.lu/sighting/bd47f428-fac6-4adb-b222-fdadbbadb2a1/export Thu, 09 Jul 2026 07:07:08 +0000 https://vulnerability.circl.lu/sighting/98599627-5b7a-44e7-863a-6c4893cfb19d/export {"uuid": "98599627-5b7a-44e7-863a-6c4893cfb19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3tqzha2n2l", "content": "CVE-2026-46354 - Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft\nCVE ID : CVE-2026-46354\n \n Published : July 7, 2026, 10:16 p.m. | 58\u00a0minutes ago\n \n Description : Coder allows organizations to provision remote development envi...", "creation_timestamp": "2026-07-08T00:17:15.343244Z"} {"uuid": "98599627-5b7a-44e7-863a-6c4893cfb19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3tqzha2n2l", "content": "CVE-2026-46354 - Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft\nCVE ID : CVE-2026-46354\n \n Published : July 7, 2026, 10:16 p.m. | 58\u00a0minutes ago\n \n Description : Coder allows organizations to provision remote development envi...", "creation_timestamp": "2026-07-08T00:17:15.343244Z"} https://vulnerability.circl.lu/sighting/98599627-5b7a-44e7-863a-6c4893cfb19d/export Wed, 08 Jul 2026 00:17:15 +0000 https://vulnerability.circl.lu/sighting/5ba1c866-33b4-44fd-b4a9-8152edb917d3/export {"uuid": "5ba1c866-33b4-44fd-b4a9-8152edb917d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3l74tvwf2v", "content": "CVE-2026-46354 - coder\nAn attacker can steal a Coder agent session token by sending a forged request to the Azure instance identity endpoint. This allows them to access sensitive information, such as Git SSH\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coder #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T21:44:05.055193Z"} {"uuid": "5ba1c866-33b4-44fd-b4a9-8152edb917d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3l74tvwf2v", "content": "CVE-2026-46354 - coder\nAn attacker can steal a Coder agent session token by sending a forged request to the Azure instance identity endpoint. This allows them to access sensitive information, such as Git SSH\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coder #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T21:44:05.055193Z"} https://vulnerability.circl.lu/sighting/5ba1c866-33b4-44fd-b4a9-8152edb917d3/export Tue, 07 Jul 2026 21:44:05 +0000