https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 26 Jul 2026 05:20:00 +0000 https://vulnerability.circl.lu/sighting/403317a1-af0b-417e-b048-d1dddcc5eaa9/export {"uuid": "403317a1-af0b-417e-b048-d1dddcc5eaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrjkmey7jg2i", "content": "CVE-2026-48021\nPrior to version 2026-05-20, epa4all had a security weakness that allowed an attacker to intercept sensitive data and inject malicious requests. This could have allowed an attacker to read and modify\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-26T04:36:04.109541Z"} {"uuid": "403317a1-af0b-417e-b048-d1dddcc5eaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrjkmey7jg2i", "content": "CVE-2026-48021\nPrior to version 2026-05-20, epa4all had a security weakness that allowed an attacker to intercept sensitive data and inject malicious requests. This could have allowed an attacker to read and modify\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-26T04:36:04.109541Z"} https://vulnerability.circl.lu/sighting/403317a1-af0b-417e-b048-d1dddcc5eaa9/export Sun, 26 Jul 2026 04:36:04 +0000 https://vulnerability.circl.lu/sighting/4c329b99-5602-4524-8557-b053d4e783c1/export {"uuid": "4c329b99-5602-4524-8557-b053d4e783c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116980484212804462", "content": "Some increased actor activities are shown targeting med-united epa4all (CVE-2026-48021) https://vuldb.com/vuln/383004/cti", "creation_timestamp": "2026-07-25T11:55:33.525014Z"} {"uuid": "4c329b99-5602-4524-8557-b053d4e783c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116980484212804462", "content": "Some increased actor activities are shown targeting med-united epa4all (CVE-2026-48021) https://vuldb.com/vuln/383004/cti", "creation_timestamp": "2026-07-25T11:55:33.525014Z"} https://vulnerability.circl.lu/sighting/4c329b99-5602-4524-8557-b053d4e783c1/export Sat, 25 Jul 2026 11:55:33 +0000 https://vulnerability.circl.lu/sighting/8215c21b-7d74-44f6-b3a2-7e020609e850/export {"uuid": "8215c21b-7d74-44f6-b3a2-7e020609e850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48021", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrgusiwoyk2o", "content": "med-united epa4all (<2026-05-20) has a CRITICAL TLS cert validation flaw \u2014 attackers can hijack sessions, exposing patient data. Upgrade to 2026-05-20+ now. https://radar.offseq.com/threat/cve-2026-48021-cwe-295-improper-certificate-validation-in-med-united-epa4all-26e8e441c1a877ee #OffSeq #Healt...", "creation_timestamp": "2026-07-25T03:00:28.227022Z"} {"uuid": "8215c21b-7d74-44f6-b3a2-7e020609e850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48021", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrgusiwoyk2o", "content": "med-united epa4all (<2026-05-20) has a CRITICAL TLS cert validation flaw \u2014 attackers can hijack sessions, exposing patient data. Upgrade to 2026-05-20+ now. https://radar.offseq.com/threat/cve-2026-48021-cwe-295-improper-certificate-validation-in-med-united-epa4all-26e8e441c1a877ee #OffSeq #Healt...", "creation_timestamp": "2026-07-25T03:00:28.227022Z"} https://vulnerability.circl.lu/sighting/8215c21b-7d74-44f6-b3a2-7e020609e850/export Sat, 25 Jul 2026 03:00:28 +0000 https://vulnerability.circl.lu/sighting/8bca82f6-8c08-4a08-8711-5c00e55b5209/export {"uuid": "8bca82f6-8c08-4a08-8711-5c00e55b5209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48021", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116978380017178575", "content": "CVE-2026-48021 in med-united epa4all (<2026-05-20): CRITICAL TLS cert validation flaw lets attackers decrypt/modify patient records & tokens. Upgrade to 2026-05-20+ ASAP. Details: https://radar.offseq.com/threat/cve-2026-48021-cwe-295-improper-certificate-validation-in-med-united-epa4all-26e8e441c1a877ee #OffSeq #HealthcareSecurity #Vuln #CVE202648021", "creation_timestamp": "2026-07-25T03:00:27.432595Z"} {"uuid": "8bca82f6-8c08-4a08-8711-5c00e55b5209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48021", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116978380017178575", "content": "CVE-2026-48021 in med-united epa4all (<2026-05-20): CRITICAL TLS cert validation flaw lets attackers decrypt/modify patient records & tokens. Upgrade to 2026-05-20+ ASAP. Details: https://radar.offseq.com/threat/cve-2026-48021-cwe-295-improper-certificate-validation-in-med-united-epa4all-26e8e441c1a877ee #OffSeq #HealthcareSecurity #Vuln #CVE202648021", "creation_timestamp": "2026-07-25T03:00:27.432595Z"} https://vulnerability.circl.lu/sighting/8bca82f6-8c08-4a08-8711-5c00e55b5209/export Sat, 25 Jul 2026 03:00:27 +0000 https://vulnerability.circl.lu/sighting/057ad97c-261b-4b93-918d-d773c37472f3/export {"uuid": "057ad97c-261b-4b93-918d-d773c37472f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5dtc5uh2a", "content": "\ud83d\udd34 CVE-2026-48021 - Critical (9.1)\n\nIn epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48021/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T20:00:39.481865Z"} {"uuid": "057ad97c-261b-4b93-918d-d773c37472f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5dtc5uh2a", "content": "\ud83d\udd34 CVE-2026-48021 - Critical (9.1)\n\nIn epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48021/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T20:00:39.481865Z"} https://vulnerability.circl.lu/sighting/057ad97c-261b-4b93-918d-d773c37472f3/export Fri, 24 Jul 2026 20:00:39 +0000 https://vulnerability.circl.lu/sighting/f9704441-3bfd-4bc6-843b-2d973924bd95/export {"uuid": "f9704441-3bfd-4bc6-843b-2d973924bd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg3jmp2rf2y", "content": "CVE-2026-48021 - epa4all\nA previous version of epa4all allowed an attacker to intercept sensitive data and modify it. This happened because the software didn't properly check the identity of the server it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#epa4all #medunited #CVE #infosec", "creation_timestamp": "2026-07-24T19:28:05.943964Z"} {"uuid": "f9704441-3bfd-4bc6-843b-2d973924bd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48021", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg3jmp2rf2y", "content": "CVE-2026-48021 - epa4all\nA previous version of epa4all allowed an attacker to intercept sensitive data and modify it. This happened because the software didn't properly check the identity of the server it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#epa4all #medunited #CVE #infosec", "creation_timestamp": "2026-07-24T19:28:05.943964Z"} https://vulnerability.circl.lu/sighting/f9704441-3bfd-4bc6-843b-2d973924bd95/export Fri, 24 Jul 2026 19:28:05 +0000