https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 29 Jul 2026 04:07:14 +0000 https://vulnerability.circl.lu/sighting/1859518d-0fa0-4999-a9f1-a3a98029c120/export {"uuid": "1859518d-0fa0-4999-a9f1-a3a98029c120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrf5ib67b32h", "content": "SUNNET Corporate Training Mgmt System v10.3 has a CRITICAL flaw: admins can upload ZIPs with executable files, enabling command execution. No patch \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-...", "creation_timestamp": "2026-07-24T10:30:29.058622Z"} {"uuid": "1859518d-0fa0-4999-a9f1-a3a98029c120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrf5ib67b32h", "content": "SUNNET Corporate Training Mgmt System v10.3 has a CRITICAL flaw: admins can upload ZIPs with executable files, enabling command execution. No patch \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-...", "creation_timestamp": "2026-07-24T10:30:29.058622Z"} https://vulnerability.circl.lu/sighting/1859518d-0fa0-4999-a9f1-a3a98029c120/export Fri, 24 Jul 2026 10:30:29 +0000 https://vulnerability.circl.lu/sighting/1b01df98-001d-43f2-8a85-d38ae0db64fe/export {"uuid": "1b01df98-001d-43f2-8a85-d38ae0db64fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116974487217978733", "content": "CVE-2026-24727 (CRITICAL, CVSS 9.3): SUNNET Corporate Training Mgmt System v10.3 allows admins to upload ZIP files with executable code, enabling server command execution. No patch yet \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sunnet-technology-co-ltd-fe23deeb060f5b6d #OffSeq #CVE202624727 #infosec \ud83d\udee1\ufe0f", "creation_timestamp": "2026-07-24T10:30:26.874854Z"} {"uuid": "1b01df98-001d-43f2-8a85-d38ae0db64fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116974487217978733", "content": "CVE-2026-24727 (CRITICAL, CVSS 9.3): SUNNET Corporate Training Mgmt System v10.3 allows admins to upload ZIP files with executable code, enabling server command execution. No patch yet \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sunnet-technology-co-ltd-fe23deeb060f5b6d #OffSeq #CVE202624727 #infosec \ud83d\udee1\ufe0f", "creation_timestamp": "2026-07-24T10:30:26.874854Z"} https://vulnerability.circl.lu/sighting/1b01df98-001d-43f2-8a85-d38ae0db64fe/export Fri, 24 Jul 2026 10:30:26 +0000 https://vulnerability.circl.lu/sighting/136da823-6d4f-4831-96c1-bed0ec2f3bee/export {"uuid": "136da823-6d4f-4831-96c1-bed0ec2f3bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24727", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrezyphgeo24", "content": "CVE-2026-24727 - corporate training management system\nAn attacker with admin privileges can upload malicious files, potentially allowing them to execute arbitrary commands on the system. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sunnet #CVE #infosec", "creation_timestamp": "2026-07-24T09:28:05.006603Z"} {"uuid": "136da823-6d4f-4831-96c1-bed0ec2f3bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24727", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrezyphgeo24", "content": "CVE-2026-24727 - corporate training management system\nAn attacker with admin privileges can upload malicious files, potentially allowing them to execute arbitrary commands on the system. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sunnet #CVE #infosec", "creation_timestamp": "2026-07-24T09:28:05.006603Z"} https://vulnerability.circl.lu/sighting/136da823-6d4f-4831-96c1-bed0ec2f3bee/export Fri, 24 Jul 2026 09:28:05 +0000