https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 20 Sep 2026 06:34:03 +0000 https://vulnerability.circl.lu/sighting/d99f6679-dbce-4097-94a2-68fdce9d371c/export {"uuid": "d99f6679-dbce-4097-94a2-68fdce9d371c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93985", "type": "seen", "source": "https://gist.github.com/ichintu/5841827a4cd9286d1b1bda016e23c9f0", "content": "This daily cyber threat intelligence digest highlights four key developments: (1) identity visibility remains foundational to modern security, despite increasing complexities in cloud and multicloud environments; (2) significant technical and operational hurdles continue to complicate out-of-band patching of compromised Operational Technology (OT) devices; (3) researchers leveraged Anthropic\u2019s Claude Opus 5 to chain vulnerabilities and breach OpenAI employee accounts (CVE-2026-32882, Sept 19, 2026); and (4) a critical RCE vulnerability (CVE-2026-93985, Sept 19, 2026) in OpenPanel\u2019s JavaScript runtime enables sandbox escapes for arbitrary code execution. Together, these updates underscore emerging threats in identity management, OT security, AI-assisted exploitation, and critical software flaws.", "creation_timestamp": "2026-09-19T16:01:30.183330Z"} {"uuid": "d99f6679-dbce-4097-94a2-68fdce9d371c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93985", "type": "seen", "source": "https://gist.github.com/ichintu/5841827a4cd9286d1b1bda016e23c9f0", "content": "This daily cyber threat intelligence digest highlights four key developments: (1) identity visibility remains foundational to modern security, despite increasing complexities in cloud and multicloud environments; (2) significant technical and operational hurdles continue to complicate out-of-band patching of compromised Operational Technology (OT) devices; (3) researchers leveraged Anthropic\u2019s Claude Opus 5 to chain vulnerabilities and breach OpenAI employee accounts (CVE-2026-32882, Sept 19, 2026); and (4) a critical RCE vulnerability (CVE-2026-93985, Sept 19, 2026) in OpenPanel\u2019s JavaScript runtime enables sandbox escapes for arbitrary code execution. Together, these updates underscore emerging threats in identity management, OT security, AI-assisted exploitation, and critical software flaws.", "creation_timestamp": "2026-09-19T16:01:30.183330Z"} https://vulnerability.circl.lu/sighting/d99f6679-dbce-4097-94a2-68fdce9d371c/export Sat, 19 Sep 2026 16:01:30 +0000 https://vulnerability.circl.lu/sighting/e4f6700d-e80a-4223-b112-678f7313933c/export {"uuid": "e4f6700d-e80a-4223-b112-678f7313933c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93985", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvuu64qiri2y", "content": "\ud83d\udea8 CVE-2026-93985 \u2014 CVSS 9.4 CRITICAL\n\nOpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webh...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93985\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T14:07:06.892005Z"} {"uuid": "e4f6700d-e80a-4223-b112-678f7313933c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93985", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvuu64qiri2y", "content": "\ud83d\udea8 CVE-2026-93985 \u2014 CVSS 9.4 CRITICAL\n\nOpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webh...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93985\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T14:07:06.892005Z"} https://vulnerability.circl.lu/sighting/e4f6700d-e80a-4223-b112-678f7313933c/export Sat, 19 Sep 2026 14:07:06 +0000 https://vulnerability.circl.lu/sighting/a516fce9-04a6-41e3-85b6-19aba414c346/export {"uuid": "a516fce9-04a6-41e3-85b6-19aba414c346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93985", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvutze5mba2r", "content": "\ud83d\udd34 CVE-2026-93985 - Critical (9.9)\n\nOpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaS...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93985/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T14:04:27.882106Z"} {"uuid": "a516fce9-04a6-41e3-85b6-19aba414c346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93985", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvutze5mba2r", "content": "\ud83d\udd34 CVE-2026-93985 - Critical (9.9)\n\nOpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaS...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93985/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T14:04:27.882106Z"} https://vulnerability.circl.lu/sighting/a516fce9-04a6-41e3-85b6-19aba414c346/export Sat, 19 Sep 2026 14:04:27 +0000 https://vulnerability.circl.lu/sighting/c89db4f8-ddcd-485f-ab39-b51ed2f492ee/export {"uuid": "c89db4f8-ddcd-485f-ab39-b51ed2f492ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93985", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/iapumflcjyc34", "content": "CVE-2026-93985 - OpenPanel js-runtime JavaScript Template Sandbox Escape RCE\nCVE ID : CVE-2026-93985\n \n Published : Sept. 19, 2026, 12:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the ...", "creation_timestamp": "2026-09-19T13:52:35.113152Z"} {"uuid": "c89db4f8-ddcd-485f-ab39-b51ed2f492ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93985", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/iapumflcjyc34", "content": "CVE-2026-93985 - OpenPanel js-runtime JavaScript Template Sandbox Escape RCE\nCVE ID : CVE-2026-93985\n \n Published : Sept. 19, 2026, 12:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the ...", "creation_timestamp": "2026-09-19T13:52:35.113152Z"} https://vulnerability.circl.lu/sighting/c89db4f8-ddcd-485f-ab39-b51ed2f492ee/export Sat, 19 Sep 2026 13:52:35 +0000 https://vulnerability.circl.lu/sighting/4b484b3e-bf8d-4914-af0a-1b9429558cfa/export {"uuid": "4b484b3e-bf8d-4914-af0a-1b9429558cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93985", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvus4jrdzm24", "content": "Openpanel-dev openpanel hit by CRITICAL (CVSS 9.4) code injection (CVE-2026-93985). Attackers with project write access can execute arbitrary code. Restrict access & monitor templates. https://radar.offseq.com/threat/cve-2026-93985-improper-control-of-generation-of-code-code-injection-in-openpane...", "creation_timestamp": "2026-09-19T13:30:26.578018Z"} {"uuid": "4b484b3e-bf8d-4914-af0a-1b9429558cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93985", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvus4jrdzm24", "content": "Openpanel-dev openpanel hit by CRITICAL (CVSS 9.4) code injection (CVE-2026-93985). Attackers with project write access can execute arbitrary code. Restrict access & monitor templates. https://radar.offseq.com/threat/cve-2026-93985-improper-control-of-generation-of-code-code-injection-in-openpane...", "creation_timestamp": "2026-09-19T13:30:26.578018Z"} https://vulnerability.circl.lu/sighting/4b484b3e-bf8d-4914-af0a-1b9429558cfa/export Sat, 19 Sep 2026 13:30:26 +0000 https://vulnerability.circl.lu/sighting/a1f699bf-74d7-42ad-8ea9-9c83fae5f2e7/export {"uuid": "a1f699bf-74d7-42ad-8ea9-9c83fae5f2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93985", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117297946535057847", "content": "CVE-2026-93985 (CVSS 9.4) in Openpanel-dev openpanel v0: Critical code injection via JS webhook template validator. Attackers with project write access can run arbitrary code in the worker process. Limit permissions & monitor. https://radar.offseq.com/threat/cve-2026-93985-improper-control-of-generation-of-code-code-injection-in-openpanel-dev-openpanel-f8ef9daa74899f8b #OffSeq #Vuln #AppSec", "creation_timestamp": "2026-09-19T13:30:24.305038Z"} {"uuid": "a1f699bf-74d7-42ad-8ea9-9c83fae5f2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93985", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117297946535057847", "content": "CVE-2026-93985 (CVSS 9.4) in Openpanel-dev openpanel v0: Critical code injection via JS webhook template validator. Attackers with project write access can run arbitrary code in the worker process. Limit permissions & monitor. https://radar.offseq.com/threat/cve-2026-93985-improper-control-of-generation-of-code-code-injection-in-openpanel-dev-openpanel-f8ef9daa74899f8b #OffSeq #Vuln #AppSec", "creation_timestamp": "2026-09-19T13:30:24.305038Z"} https://vulnerability.circl.lu/sighting/a1f699bf-74d7-42ad-8ea9-9c83fae5f2e7/export Sat, 19 Sep 2026 13:30:24 +0000 https://vulnerability.circl.lu/sighting/31429a0f-7638-4c9a-a37a-6761bd768337/export {"uuid": "31429a0f-7638-4c9a-a37a-6761bd768337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93985", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvuqgcvztz2y", "content": "CVE-2026-93985 - openpanel\nOpenPanel's JavaScript template feature does not properly stop attackers from reaching the system's underlying code engine. If someone can edit project settings, they could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openpanel #openpaneldev #CVE #infosec", "creation_timestamp": "2026-09-19T13:00:06.720120Z"} {"uuid": "31429a0f-7638-4c9a-a37a-6761bd768337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93985", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvuqgcvztz2y", "content": "CVE-2026-93985 - openpanel\nOpenPanel's JavaScript template feature does not properly stop attackers from reaching the system's underlying code engine. If someone can edit project settings, they could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openpanel #openpaneldev #CVE #infosec", "creation_timestamp": "2026-09-19T13:00:06.720120Z"} https://vulnerability.circl.lu/sighting/31429a0f-7638-4c9a-a37a-6761bd768337/export Sat, 19 Sep 2026 13:00:06 +0000