https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 18 Aug 2026 21:43:15 +0000 https://vulnerability.circl.lu/sighting/b2ab106b-4ca7-4a6d-8eb5-2df087fca179/export {"uuid": "b2ab106b-4ca7-4a6d-8eb5-2df087fca179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/serena666.bsky.social/post/3mtf4kbvv5w2m", "content": "MLflow SSRF (CVE-2026-64849) exploit for cloud creds in hours, bypassing prior fixes. You gotta hand it to 'em, the attackers don't waste time. Relentless", "creation_timestamp": "2026-08-18T21:04:07.220630Z"} {"uuid": "b2ab106b-4ca7-4a6d-8eb5-2df087fca179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/serena666.bsky.social/post/3mtf4kbvv5w2m", "content": "MLflow SSRF (CVE-2026-64849) exploit for cloud creds in hours, bypassing prior fixes. You gotta hand it to 'em, the attackers don't waste time. Relentless", "creation_timestamp": "2026-08-18T21:04:07.220630Z"} https://vulnerability.circl.lu/sighting/b2ab106b-4ca7-4a6d-8eb5-2df087fca179/export Tue, 18 Aug 2026 21:04:07 +0000 https://vulnerability.circl.lu/sighting/806e7724-54e4-465f-9fd7-b2c31783b86a/export {"uuid": "806e7724-54e4-465f-9fd7-b2c31783b86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtf2kobzid25", "content": "\ud83e\udd16 CVE-2026-64849 (CVSS 9.3): unauthenticated SSRF in MLflow (<3.15.0) exploited in the wild to exfiltrate cloud credentials. CVE-2026-25895 (CVSS 9.5): path traversal to RCE in FUXA SCADA/HMI, mass scanning.\nhttps://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.html", "creation_timestamp": "2026-08-18T20:28:31.184194Z"} {"uuid": "806e7724-54e4-465f-9fd7-b2c31783b86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtf2kobzid25", "content": "\ud83e\udd16 CVE-2026-64849 (CVSS 9.3): unauthenticated SSRF in MLflow (<3.15.0) exploited in the wild to exfiltrate cloud credentials. CVE-2026-25895 (CVSS 9.5): path traversal to RCE in FUXA SCADA/HMI, mass scanning.\nhttps://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.html", "creation_timestamp": "2026-08-18T20:28:31.184194Z"} https://vulnerability.circl.lu/sighting/806e7724-54e4-465f-9fd7-b2c31783b86a/export Tue, 18 Aug 2026 20:28:31 +0000 https://vulnerability.circl.lu/sighting/164232a2-5645-4bbc-b241-d5f074d31089/export {"uuid": "164232a2-5645-4bbc-b241-d5f074d31089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64849", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtezagljq22f", "content": "MLflow SSRF (CVE-2026-64849): exploited for cloud metadata credential theft hours after disclosure. Patch ML infra like production. #ThreatIntel #AIsecurity #CriticalInfrastructure https://threat-intelligence.redeyesecurity.com/blog/mlflow-ssrf-cve-2026-64849-cloud-credential-theft-2026", "creation_timestamp": "2026-08-18T20:04:54.484618Z"} {"uuid": "164232a2-5645-4bbc-b241-d5f074d31089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64849", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtezagljq22f", "content": "MLflow SSRF (CVE-2026-64849): exploited for cloud metadata credential theft hours after disclosure. Patch ML infra like production. #ThreatIntel #AIsecurity #CriticalInfrastructure https://threat-intelligence.redeyesecurity.com/blog/mlflow-ssrf-cve-2026-64849-cloud-credential-theft-2026", "creation_timestamp": "2026-08-18T20:04:54.484618Z"} https://vulnerability.circl.lu/sighting/164232a2-5645-4bbc-b241-d5f074d31089/export Tue, 18 Aug 2026 20:04:54 +0000 https://vulnerability.circl.lu/sighting/f67dcccd-eca9-496c-8444-d14d7c4e2f05/export {"uuid": "f67dcccd-eca9-496c-8444-d14d7c4e2f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtepb45z4h2z", "content": "Critical SSRF vulnerability in MLflow (CVE-2026-64849) actively exploited; upgrade to 3.15.0 immediately to prevent unauthorized access. #MLflow #SSRF #CyberSecurity #MachineLearning #DataSecurity thedailytechfeed.com/critical-mlf...", "creation_timestamp": "2026-08-18T17:06:19.867587Z"} {"uuid": "f67dcccd-eca9-496c-8444-d14d7c4e2f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtepb45z4h2z", "content": "Critical SSRF vulnerability in MLflow (CVE-2026-64849) actively exploited; upgrade to 3.15.0 immediately to prevent unauthorized access. #MLflow #SSRF #CyberSecurity #MachineLearning #DataSecurity thedailytechfeed.com/critical-mlf...", "creation_timestamp": "2026-08-18T17:06:19.867587Z"} https://vulnerability.circl.lu/sighting/f67dcccd-eca9-496c-8444-d14d7c4e2f05/export Tue, 18 Aug 2026 17:06:19 +0000 https://vulnerability.circl.lu/sighting/a96db69a-5b5e-43f5-bec4-14de5799de16/export {"uuid": "a96db69a-5b5e-43f5-bec4-14de5799de16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-64849.yaml", "content": "", "creation_timestamp": "2026-08-18T15:00:02.953728Z"} {"uuid": "a96db69a-5b5e-43f5-bec4-14de5799de16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-64849.yaml", "content": "", "creation_timestamp": "2026-08-18T15:00:02.953728Z"} https://vulnerability.circl.lu/sighting/a96db69a-5b5e-43f5-bec4-14de5799de16/export Tue, 18 Aug 2026 15:00:02 +0000 https://vulnerability.circl.lu/sighting/8815ce99-2acf-41c8-85e9-f1db2c130007/export {"uuid": "8815ce99-2acf-41c8-85e9-f1db2c130007", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f87cac0a-5a98-4700-aa40-a3228e809c87", "content": "", "creation_timestamp": "2026-08-18T14:00:28.751972Z"} {"uuid": "8815ce99-2acf-41c8-85e9-f1db2c130007", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f87cac0a-5a98-4700-aa40-a3228e809c87", "content": "", "creation_timestamp": "2026-08-18T14:00:28.751972Z"} https://vulnerability.circl.lu/sighting/8815ce99-2acf-41c8-85e9-f1db2c130007/export Tue, 18 Aug 2026 14:00:28 +0000 https://vulnerability.circl.lu/sighting/518fa0dc-791e-42b4-b19c-a151138bdd62/export {"uuid": "518fa0dc-791e-42b4-b19c-a151138bdd62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mtecwjbhrg2w", "content": "An unauthenticated SSRF vulnerability in MLflow, CVE-2026-64849, is already being exploited in the wild. \n\nWithin hours of CVE assignment, watchTowr Intel via Attacker Eye, our global honeypot network, observed attac\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2089685887420440637)", "creation_timestamp": "2026-08-18T13:25:38.929750Z"} {"uuid": "518fa0dc-791e-42b4-b19c-a151138bdd62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mtecwjbhrg2w", "content": "An unauthenticated SSRF vulnerability in MLflow, CVE-2026-64849, is already being exploited in the wild. \n\nWithin hours of CVE assignment, watchTowr Intel via Attacker Eye, our global honeypot network, observed attac\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2089685887420440637)", "creation_timestamp": "2026-08-18T13:25:38.929750Z"} https://vulnerability.circl.lu/sighting/518fa0dc-791e-42b4-b19c-a151138bdd62/export Tue, 18 Aug 2026 13:25:38 +0000 https://vulnerability.circl.lu/sighting/9caf4e78-1f45-41ce-85eb-838f7596cb38/export {"uuid": "9caf4e78-1f45-41ce-85eb-838f7596cb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mte7yorr6q2u", "content": "A public PoC for CVE-2026-64849, an unauthenticated MLflow SSRF (CVSS 9.3), is now live. watchTowr reports exploitation attempts. Patch to 3.15.0.\n\n#MLflow #CVE202664849 #SSRF #watchTowr #AISecurity #InfoSec", "creation_timestamp": "2026-08-18T12:33:10.966268Z"} {"uuid": "9caf4e78-1f45-41ce-85eb-838f7596cb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mte7yorr6q2u", "content": "A public PoC for CVE-2026-64849, an unauthenticated MLflow SSRF (CVSS 9.3), is now live. watchTowr reports exploitation attempts. Patch to 3.15.0.\n\n#MLflow #CVE202664849 #SSRF #watchTowr #AISecurity #InfoSec", "creation_timestamp": "2026-08-18T12:33:10.966268Z"} https://vulnerability.circl.lu/sighting/9caf4e78-1f45-41ce-85eb-838f7596cb38/export Tue, 18 Aug 2026 12:33:10 +0000 https://vulnerability.circl.lu/sighting/601906c6-868d-4da2-bda1-a735c74c72e7/export {"uuid": "601906c6-868d-4da2-bda1-a735c74c72e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtd2q5fa7e2z", "content": "Critical MLflow Hole, Because Modern AI Loves Falling Through Floors\nPANIC 84% | Lag 0.0h | CVE-2026-64849 is a critical 9.3 vulnerability affecting MLflow, an AI engineering platform used for\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-18T01:26:15.779024Z"} {"uuid": "601906c6-868d-4da2-bda1-a735c74c72e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtd2q5fa7e2z", "content": "Critical MLflow Hole, Because Modern AI Loves Falling Through Floors\nPANIC 84% | Lag 0.0h | CVE-2026-64849 is a critical 9.3 vulnerability affecting MLflow, an AI engineering platform used for\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-18T01:26:15.779024Z"} https://vulnerability.circl.lu/sighting/601906c6-868d-4da2-bda1-a735c74c72e7/export Tue, 18 Aug 2026 01:26:15 +0000 https://vulnerability.circl.lu/sighting/284e16f3-f63c-443a-82c5-c5532db8df86/export {"uuid": "284e16f3-f63c-443a-82c5-c5532db8df86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://gist.github.com/alon710/9d43dd3bb8cad3aff005a6b8be53e64d", "content": "# CVE-2026-64849: CVE-2026-64849: Server-Side Request Forgery (SSRF) in MLflow Webhooks via DNS Rebinding\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-64849\n\n## Summary\nCVE-2026-64849 is a critical Server-Side Request Forgery (SSRF) vulnerability affecting MLflow tracking servers prior to version 3.15.0. It allows unauthenticated remote attackers to bypass outbound request destination filters using DNS rebinding or HTTP redirects. This exposure risks compromising sensitive cloud infrastructure metadata and internal microservices.\n\n## TL;DR\nA Time-of-Check to Time-of-Use (TOCTOU) vulnerability in MLflow webhooks allows unauthenticated remote attackers to bypass IP constraints and extract sensitive local or cloud metadata credentials.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 9.3\n- **Vulnerability Type**: Server-Side Request Forgery (SSRF)\n- **Exploit Status**: poc\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Tracking Server\n- **MLflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow to version 3.15.0 or later to enable socket-level validation.\n- Implement host-level firewall configurations to restrict outbound network requests to internal spaces.\n- Place MLflow behind an authentication gateway or configure local authentication to restrict access.\n\n**Remediation Steps:**\n1. Identify current MLflow running instances and check their versions using Python command.\n2. If the version is prior to 3.15.0, schedule an immediate package upgrade.\n3. Apply firewalls limiting egress to private and link-local IP addresses as a temporary workaround if an upgrade cannot be executed.\n4. Ensure environment configurations do not expose local proxies to the MLflow execution environment.\n\n## References\n\n- [GitHub Security Advisory GHSA-7gwp-5pfp-969j](https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j)\n- [GitHub Issue Discussion #24179](https://github.com/mlflow/mlflow/issues/24179)\n- [GitHub Fixing Pull Request #24258](https://github.com/mlflow/mlflow/pull/24258)\n- [GitHub Security Patch Commit](https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939)\n- [MLflow v3.15.0 Release Notes](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-64849) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T00:32:32.384543Z"} {"uuid": "284e16f3-f63c-443a-82c5-c5532db8df86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://gist.github.com/alon710/9d43dd3bb8cad3aff005a6b8be53e64d", "content": "# CVE-2026-64849: CVE-2026-64849: Server-Side Request Forgery (SSRF) in MLflow Webhooks via DNS Rebinding\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-64849\n\n## Summary\nCVE-2026-64849 is a critical Server-Side Request Forgery (SSRF) vulnerability affecting MLflow tracking servers prior to version 3.15.0. It allows unauthenticated remote attackers to bypass outbound request destination filters using DNS rebinding or HTTP redirects. This exposure risks compromising sensitive cloud infrastructure metadata and internal microservices.\n\n## TL;DR\nA Time-of-Check to Time-of-Use (TOCTOU) vulnerability in MLflow webhooks allows unauthenticated remote attackers to bypass IP constraints and extract sensitive local or cloud metadata credentials.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 9.3\n- **Vulnerability Type**: Server-Side Request Forgery (SSRF)\n- **Exploit Status**: poc\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Tracking Server\n- **MLflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow to version 3.15.0 or later to enable socket-level validation.\n- Implement host-level firewall configurations to restrict outbound network requests to internal spaces.\n- Place MLflow behind an authentication gateway or configure local authentication to restrict access.\n\n**Remediation Steps:**\n1. Identify current MLflow running instances and check their versions using Python command.\n2. If the version is prior to 3.15.0, schedule an immediate package upgrade.\n3. Apply firewalls limiting egress to private and link-local IP addresses as a temporary workaround if an upgrade cannot be executed.\n4. Ensure environment configurations do not expose local proxies to the MLflow execution environment.\n\n## References\n\n- [GitHub Security Advisory GHSA-7gwp-5pfp-969j](https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j)\n- [GitHub Issue Discussion #24179](https://github.com/mlflow/mlflow/issues/24179)\n- [GitHub Fixing Pull Request #24258](https://github.com/mlflow/mlflow/pull/24258)\n- [GitHub Security Patch Commit](https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939)\n- [MLflow v3.15.0 Release Notes](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-64849) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T00:32:32.384543Z"} https://vulnerability.circl.lu/sighting/284e16f3-f63c-443a-82c5-c5532db8df86/export Tue, 18 Aug 2026 00:32:32 +0000