https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 27 Sep 2026 16:32:12 +0000 https://vulnerability.circl.lu/sighting/62e3d1e0-1134-4421-ae60-7e7576710200/export {"uuid": "62e3d1e0-1134-4421-ae60-7e7576710200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76949", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr2jg22vq2w", "content": "CVE-2026-76949 - ash_authentication\nThe ash_authentication component used in your applications can be tricked into swapping a legitimate user\u2019s logged\u2011in session with the attacker\u2019s own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ashauthentication #teamalembic #Hex #CVE #infosec", "creation_timestamp": "2026-09-18T01:50:09.254810Z"} {"uuid": "62e3d1e0-1134-4421-ae60-7e7576710200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76949", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr2jg22vq2w", "content": "CVE-2026-76949 - ash_authentication\nThe ash_authentication component used in your applications can be tricked into swapping a legitimate user\u2019s logged\u2011in session with the attacker\u2019s own\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ashauthentication #teamalembic #Hex #CVE #infosec", "creation_timestamp": "2026-09-18T01:50:09.254810Z"} https://vulnerability.circl.lu/sighting/62e3d1e0-1134-4421-ae60-7e7576710200/export Fri, 18 Sep 2026 01:50:09 +0000 https://vulnerability.circl.lu/sighting/2b6156b0-b63d-48da-89f3-dba2d4c76b10/export {"uuid": "2b6156b0-b63d-48da-89f3-dba2d4c76b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76949", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvquth7w3r2b", "content": "\ud83d\udea8 CVE-2026-76949 \u2014 CVSS 9.1 CRITICAL\n\nAuthentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who c...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76949\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T00:08:35.123626Z"} {"uuid": "2b6156b0-b63d-48da-89f3-dba2d4c76b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76949", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvquth7w3r2b", "content": "\ud83d\udea8 CVE-2026-76949 \u2014 CVSS 9.1 CRITICAL\n\nAuthentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who c...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76949\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T00:08:35.123626Z"} https://vulnerability.circl.lu/sighting/2b6156b0-b63d-48da-89f3-dba2d4c76b10/export Fri, 18 Sep 2026 00:08:35 +0000 https://vulnerability.circl.lu/sighting/515e5a67-0a1e-434e-9c27-2f06b5f3be7d/export {"uuid": "515e5a67-0a1e-434e-9c27-2f06b5f3be7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/coiowlu2wk7hy", "content": "CVE-2026-76949 - Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement\nCVE ID : CVE-2026-76949\n \n Published : Sept. 17, 2026, 10:17 p.m. | 52\u00a0minutes ago\n \n Description : Authentication Bypass by Spoofing vulner...", "creation_timestamp": "2026-09-17T23:52:28.256826Z"} {"uuid": "515e5a67-0a1e-434e-9c27-2f06b5f3be7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/coiowlu2wk7hy", "content": "CVE-2026-76949 - Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement\nCVE ID : CVE-2026-76949\n \n Published : Sept. 17, 2026, 10:17 p.m. | 52\u00a0minutes ago\n \n Description : Authentication Bypass by Spoofing vulner...", "creation_timestamp": "2026-09-17T23:52:28.256826Z"} https://vulnerability.circl.lu/sighting/515e5a67-0a1e-434e-9c27-2f06b5f3be7d/export Thu, 17 Sep 2026 23:52:28 +0000 https://vulnerability.circl.lu/sighting/6cfbe8ae-86e5-416b-a098-975b22f735e9/export {"uuid": "6cfbe8ae-86e5-416b-a098-975b22f735e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7694", "type": "seen", "source": "https://t.me/shimiscyberworld/1155", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-03\n\n\ud83d\udcca 4 vulnerabilities detected today, 4 \ud83d\udd34 High\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2026-7694 (7.3) \u2014 Acrel Electrical ECEMS SQLi (CVE-2026-7694) Exposes\u2026\n \u2022 CVE-2026-7695 (7.3) \u2014 Acrel Electrical EEMS Platform Hit by High-Severity SQL\u2026\n \u2022 CVE-2026-7698 (7.3) \u2014 Tiandy Easy7 RCE: Unauthenticated OS Command Injection via\u2026\n \u2022 CVE-2026-7703 (7.3) \u2014 AV Stumpfl Pixera Two Media Server Websocket API Code\u2026\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:18.502717Z"} {"uuid": "6cfbe8ae-86e5-416b-a098-975b22f735e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7694", "type": "seen", "source": "https://t.me/shimiscyberworld/1155", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-03\n\n\ud83d\udcca 4 vulnerabilities detected today, 4 \ud83d\udd34 High\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2026-7694 (7.3) \u2014 Acrel Electrical ECEMS SQLi (CVE-2026-7694) Exposes\u2026\n \u2022 CVE-2026-7695 (7.3) \u2014 Acrel Electrical EEMS Platform Hit by High-Severity SQL\u2026\n \u2022 CVE-2026-7698 (7.3) \u2014 Tiandy Easy7 RCE: Unauthenticated OS Command Injection via\u2026\n \u2022 CVE-2026-7703 (7.3) \u2014 AV Stumpfl Pixera Two Media Server Websocket API Code\u2026\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:18.502717Z"} https://vulnerability.circl.lu/sighting/6cfbe8ae-86e5-416b-a098-975b22f735e9/export Sat, 12 Sep 2026 10:00:18 +0000 https://vulnerability.circl.lu/sighting/8f400c5f-8cd6-40a9-bd36-9ab40e7a9059/export {"uuid": "8f400c5f-8cd6-40a9-bd36-9ab40e7a9059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7yuhyg4o2p", "content": "CVE-2026-76943\nThe administrative interface on the Xiiaozet LK100Wt device does not properly verify who is accessing it. An attacker could skip the normal login steps and gain the ability to run commands as an administrator,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T13:40:05.465070Z"} {"uuid": "8f400c5f-8cd6-40a9-bd36-9ab40e7a9059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu7yuhyg4o2p", "content": "CVE-2026-76943\nThe administrative interface on the Xiiaozet LK100Wt device does not properly verify who is accessing it. An attacker could skip the normal login steps and gain the ability to run commands as an administrator,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T13:40:05.465070Z"} https://vulnerability.circl.lu/sighting/8f400c5f-8cd6-40a9-bd36-9ab40e7a9059/export Sat, 29 Aug 2026 13:40:05 +0000 https://vulnerability.circl.lu/sighting/8514fc7d-c7df-4e24-bf7f-46f721661b57/export {"uuid": "8514fc7d-c7df-4e24-bf7f-46f721661b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xirxzad2v", "content": "~Cisa~\nThree flaws enable unauthenticated access, authentication bypass, and command execution; update to 2.1.240.\n-\nIOCs: CVE-2026-78239, CVE-2026-76943, CVE-2026-78037\n-\n#CVE #ICS #ThreatIntel", "creation_timestamp": "2026-08-29T13:15:39.969701Z"} {"uuid": "8514fc7d-c7df-4e24-bf7f-46f721661b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xirxzad2v", "content": "~Cisa~\nThree flaws enable unauthenticated access, authentication bypass, and command execution; update to 2.1.240.\n-\nIOCs: CVE-2026-78239, CVE-2026-76943, CVE-2026-78037\n-\n#CVE #ICS #ThreatIntel", "creation_timestamp": "2026-08-29T13:15:39.969701Z"} https://vulnerability.circl.lu/sighting/8514fc7d-c7df-4e24-bf7f-46f721661b57/export Sat, 29 Aug 2026 13:15:39 +0000 https://vulnerability.circl.lu/sighting/704b3c4c-5edd-472f-99b7-709117e6fbce/export {"uuid": "704b3c4c-5edd-472f-99b7-709117e6fbce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76945", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4saylscr2t", "content": "\ud83d\udfe0 CVE-2026-76945 - High (7.5)\n\nThe affected Ebyte device relies on client-managed authentication tokens\n without sufficient serv...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76945/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-28T07:03:51.081486Z"} {"uuid": "704b3c4c-5edd-472f-99b7-709117e6fbce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76945", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4saylscr2t", "content": "\ud83d\udfe0 CVE-2026-76945 - High (7.5)\n\nThe affected Ebyte device relies on client-managed authentication tokens\n without sufficient serv...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76945/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-28T07:03:51.081486Z"} https://vulnerability.circl.lu/sighting/704b3c4c-5edd-472f-99b7-709117e6fbce/export Fri, 28 Aug 2026 07:03:51 +0000 https://vulnerability.circl.lu/sighting/74dd9922-ad90-4d2c-aa2a-f8d564a05af6/export {"uuid": "74dd9922-ad90-4d2c-aa2a-f8d564a05af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4or2cz6w27", "content": "\ud83d\udd34 CVE-2026-76943 - Critical (9.8)\n\nXiiaozet LK100Wt contains an authentication weakness within an \nadministrative service that may a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76943/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-28T06:01:19.026879Z"} {"uuid": "74dd9922-ad90-4d2c-aa2a-f8d564a05af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4or2cz6w27", "content": "\ud83d\udd34 CVE-2026-76943 - Critical (9.8)\n\nXiiaozet LK100Wt contains an authentication weakness within an \nadministrative service that may a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76943/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-28T06:01:19.026879Z"} https://vulnerability.circl.lu/sighting/74dd9922-ad90-4d2c-aa2a-f8d564a05af6/export Fri, 28 Aug 2026 06:01:19 +0000 https://vulnerability.circl.lu/sighting/d0952c16-3ad4-4c8c-b1dd-408e0ba8119c/export {"uuid": "d0952c16-3ad4-4c8c-b1dd-408e0ba8119c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4br44ew72f", "content": "\ud83d\udea8 CVE-2026-76943 \u2014 CVSS 9.3 CRITICAL\n\nXiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an att...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76943\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T02:08:37.049259Z"} {"uuid": "d0952c16-3ad4-4c8c-b1dd-408e0ba8119c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76943", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4br44ew72f", "content": "\ud83d\udea8 CVE-2026-76943 \u2014 CVSS 9.3 CRITICAL\n\nXiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an att...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76943\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T02:08:37.049259Z"} https://vulnerability.circl.lu/sighting/d0952c16-3ad4-4c8c-b1dd-408e0ba8119c/export Fri, 28 Aug 2026 02:08:37 +0000 https://vulnerability.circl.lu/sighting/3947a09c-949d-4135-817b-0fce422180c5/export {"uuid": "3947a09c-949d-4135-817b-0fce422180c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76940", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4bdixola26", "content": "\ud83d\udfe0 CVE-2026-76940 - High (7.5)\n\nThe affected Ebyte device does not restrict repeated authentication \nattempts through rate limiti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76940/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-28T02:01:01.565520Z"} {"uuid": "3947a09c-949d-4135-817b-0fce422180c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76940", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4bdixola26", "content": "\ud83d\udfe0 CVE-2026-76940 - High (7.5)\n\nThe affected Ebyte device does not restrict repeated authentication \nattempts through rate limiti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76940/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-28T02:01:01.565520Z"} https://vulnerability.circl.lu/sighting/3947a09c-949d-4135-817b-0fce422180c5/export Fri, 28 Aug 2026 02:01:01 +0000