https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 15 Jul 2026 17:10:38 +0000 https://vulnerability.circl.lu/sighting/d5009650-9ae3-4f12-93e1-ceac58abb7bb/export {"uuid": "d5009650-9ae3-4f12-93e1-ceac58abb7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61457", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5niv7ff2i", "content": "CVE-2026-61457 - Grav before 1.0.3 Remote Code Execution via File Upload Extension Bypass\nCVE ID : CVE-2026-61457\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 contains a file uplo...", "creation_timestamp": "2026-07-15T16:34:49.951002Z"} {"uuid": "d5009650-9ae3-4f12-93e1-ceac58abb7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61457", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5niv7ff2i", "content": "CVE-2026-61457 - Grav before 1.0.3 Remote Code Execution via File Upload Extension Bypass\nCVE ID : CVE-2026-61457\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 contains a file uplo...", "creation_timestamp": "2026-07-15T16:34:49.951002Z"} https://vulnerability.circl.lu/sighting/d5009650-9ae3-4f12-93e1-ceac58abb7bb/export Wed, 15 Jul 2026 16:34:49 +0000 https://vulnerability.circl.lu/sighting/2e327291-d461-4f37-a212-a58ac96911a2/export {"uuid": "2e327291-d461-4f37-a212-a58ac96911a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61451", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp4sg2vjg2n", "content": "CVE-2026-61451 - Grav before 1.0.4 Password Reset Token Poisoning via admin_base_url\nCVE ID : CVE-2026-61451\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of t...", "creation_timestamp": "2026-07-15T16:19:40.981607Z"} {"uuid": "2e327291-d461-4f37-a212-a58ac96911a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61451", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp4sg2vjg2n", "content": "CVE-2026-61451 - Grav before 1.0.4 Password Reset Token Poisoning via admin_base_url\nCVE ID : CVE-2026-61451\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of t...", "creation_timestamp": "2026-07-15T16:19:40.981607Z"} https://vulnerability.circl.lu/sighting/2e327291-d461-4f37-a212-a58ac96911a2/export Wed, 15 Jul 2026 16:19:40 +0000 https://vulnerability.circl.lu/sighting/dac7beb1-ca1a-42f8-ab46-363d441de16f/export {"uuid": "dac7beb1-ca1a-42f8-ab46-363d441de16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61451", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqoqcmrt352o", "content": "CVE-2026-61451 - grav\nGrav users are at risk of account takeover if an attacker sends a fake password reset email with a link to a server they control. This can happen if an attacker sends a malicious request\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-07-15T12:36:06.006386Z"} {"uuid": "dac7beb1-ca1a-42f8-ab46-363d441de16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61451", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqoqcmrt352o", "content": "CVE-2026-61451 - grav\nGrav users are at risk of account takeover if an attacker sends a fake password reset email with a link to a server they control. This can happen if an attacker sends a malicious request\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-07-15T12:36:06.006386Z"} https://vulnerability.circl.lu/sighting/dac7beb1-ca1a-42f8-ab46-363d441de16f/export Wed, 15 Jul 2026 12:36:06 +0000 https://vulnerability.circl.lu/sighting/887451bd-a222-4c13-8079-6f14c263f3f3/export {"uuid": "887451bd-a222-4c13-8079-6f14c263f3f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrqbq6nf2g", "content": "CVE-2026-61458 - PasswordPusher\nCVE ID : CVE-2026-61458\n \n Published : July 13, 2026, 9:30 p.m. | 22\u00a0minutes ago\n \n Description : PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and ...", "creation_timestamp": "2026-07-13T22:50:59.138212Z"} {"uuid": "887451bd-a222-4c13-8079-6f14c263f3f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrqbq6nf2g", "content": "CVE-2026-61458 - PasswordPusher\nCVE ID : CVE-2026-61458\n \n Published : July 13, 2026, 9:30 p.m. | 22\u00a0minutes ago\n \n Description : PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and ...", "creation_timestamp": "2026-07-13T22:50:59.138212Z"} https://vulnerability.circl.lu/sighting/887451bd-a222-4c13-8079-6f14c263f3f3/export Mon, 13 Jul 2026 22:50:59 +0000 https://vulnerability.circl.lu/sighting/2f3ad00b-203b-4159-8f31-09bea148c7db/export {"uuid": "2f3ad00b-203b-4159-8f31-09bea148c7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61454", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqklrnwpiy27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61454 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Grav Admin2: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7FD025B3-B2F6-4712-9BF6-4509393879B1", "creation_timestamp": "2026-07-13T21:04:23.048210Z"} {"uuid": "2f3ad00b-203b-4159-8f31-09bea148c7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61454", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqklrnwpiy27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61454 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Grav Admin2: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7FD025B3-B2F6-4712-9BF6-4509393879B1", "creation_timestamp": "2026-07-13T21:04:23.048210Z"} https://vulnerability.circl.lu/sighting/2f3ad00b-203b-4159-8f31-09bea148c7db/export Mon, 13 Jul 2026 21:04:23 +0000 https://vulnerability.circl.lu/sighting/4407b088-cac2-41a8-830e-d8cb851d3ec0/export {"uuid": "4407b088-cac2-41a8-830e-d8cb851d3ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61454", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqk7woclfu2l", "content": "CVE-2026-61692 - Rejected reason: ** REJECT ** DO NOT USE THIS CAND\nCVE ID : CVE-2026-61692\n \n Published : July 13, 2026, 4:16 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61454. Reason: Thi...", "creation_timestamp": "2026-07-13T17:32:26.273373Z"} {"uuid": "4407b088-cac2-41a8-830e-d8cb851d3ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61454", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqk7woclfu2l", "content": "CVE-2026-61692 - Rejected reason: ** REJECT ** DO NOT USE THIS CAND\nCVE ID : CVE-2026-61692\n \n Published : July 13, 2026, 4:16 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61454. Reason: Thi...", "creation_timestamp": "2026-07-13T17:32:26.273373Z"} https://vulnerability.circl.lu/sighting/4407b088-cac2-41a8-830e-d8cb851d3ec0/export Mon, 13 Jul 2026 17:32:26 +0000 https://vulnerability.circl.lu/sighting/900c5000-e98d-497b-aba6-f6ad18896b84/export {"uuid": "900c5000-e98d-497b-aba6-f6ad18896b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61454", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqf2azlsnp27", "content": "CVE-2026-61454 - Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__\nCVE ID : CVE-2026-61454\n \n Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript va...", "creation_timestamp": "2026-07-11T16:07:32.523759Z"} {"uuid": "900c5000-e98d-497b-aba6-f6ad18896b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61454", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqf2azlsnp27", "content": "CVE-2026-61454 - Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__\nCVE ID : CVE-2026-61454\n \n Published : July 11, 2026, 2:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : The Grav Admin2 plugin (getgrav/grav-plugin-admin2) before 2.0.4 embeds a global JavaScript va...", "creation_timestamp": "2026-07-11T16:07:32.523759Z"} https://vulnerability.circl.lu/sighting/900c5000-e98d-497b-aba6-f6ad18896b84/export Sat, 11 Jul 2026 16:07:32 +0000 https://vulnerability.circl.lu/sighting/1212fcc8-2039-455f-a44d-3d5dd6de672d/export {"uuid": "1212fcc8-2039-455f-a44d-3d5dd6de672d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61454", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqeuzo3gme2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61454 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Grav Admin2: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1A231E2E-E2F8-444F-BD76-19695F5408DE", "creation_timestamp": "2026-07-11T14:33:56.937871Z"} {"uuid": "1212fcc8-2039-455f-a44d-3d5dd6de672d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61454", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqeuzo3gme2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61454 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Grav Admin2: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1A231E2E-E2F8-444F-BD76-19695F5408DE", "creation_timestamp": "2026-07-11T14:33:56.937871Z"} https://vulnerability.circl.lu/sighting/1212fcc8-2039-455f-a44d-3d5dd6de672d/export Sat, 11 Jul 2026 14:33:56 +0000 https://vulnerability.circl.lu/sighting/53ddc920-89b3-461e-8d0d-e1476b070a85/export {"uuid": "53ddc920-89b3-461e-8d0d-e1476b070a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61459", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhyumjyg2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61459 \u0432 MCP Server Kubernetes: \u0443\u0433\u0440\u043e\u0437\u0430 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4E7BF85B-25FE-4A57-84D5-B7DB9DD2E13A", "creation_timestamp": "2026-07-11T01:08:12.716665Z"} {"uuid": "53ddc920-89b3-461e-8d0d-e1476b070a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61459", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhyumjyg2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61459 \u0432 MCP Server Kubernetes: \u0443\u0433\u0440\u043e\u0437\u0430 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4E7BF85B-25FE-4A57-84D5-B7DB9DD2E13A", "creation_timestamp": "2026-07-11T01:08:12.716665Z"} https://vulnerability.circl.lu/sighting/53ddc920-89b3-461e-8d0d-e1476b070a85/export Sat, 11 Jul 2026 01:08:12 +0000 https://vulnerability.circl.lu/sighting/4675cb02-8f96-4b70-bdcf-351eca3fcaaf/export {"uuid": "4675cb02-8f96-4b70-bdcf-351eca3fcaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61455", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcmfmqcr2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61455 \u0432 Grav: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\n\nhttps://kripta.biz/posts/927A94DB-4C3D-4646-B8D6-246ABA4AB568", "creation_timestamp": "2026-07-10T23:31:44.754189Z"} {"uuid": "4675cb02-8f96-4b70-bdcf-351eca3fcaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61455", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdcmfmqcr2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61455 \u0432 Grav: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\n\nhttps://kripta.biz/posts/927A94DB-4C3D-4646-B8D6-246ABA4AB568", "creation_timestamp": "2026-07-10T23:31:44.754189Z"} https://vulnerability.circl.lu/sighting/4675cb02-8f96-4b70-bdcf-351eca3fcaaf/export Fri, 10 Jul 2026 23:31:44 +0000