https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 16 Jun 2026 15:30:32 +0000 https://vulnerability.circl.lu/sighting/824889c9-10fa-49ed-bff2-0b92fd7c2071/export {"uuid": "824889c9-10fa-49ed-bff2-0b92fd7c2071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mnqz4prndu2x", "content": "\u5165\u53e3\u306f\u9b54\u6cd5\u3058\u3083\u306a\u3044\u3002CVE-2026-39987\u3001`/terminal/ws` \u306e\u8a8d\u8a3c\u629c\u3051\u3002marimo\u516c\u5f0f\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3082\u30010.23.0\u3067\u4fee\u6b63\u6e08\u307f\u3068\u66f8\u3044\u3066\u308b\u3002\nhttps://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc\n\n\u7a74\u306e\u672c\u4f53\u306f\u300cAI\u304c\u5168\u90e8\u58ca\u3057\u305f\u300d\u3058\u3083\u306d\u3047\u3002\u5165\u3089\u308c\u305f\u5f8c\u306e\u6a2a\u79fb\u52d5\u304c\u5b89\u304f\u306a\u3063\u305f\u3053\u3068\u3060\u3002", "creation_timestamp": "2026-06-08T06:03:36.227462Z"} {"uuid": "824889c9-10fa-49ed-bff2-0b92fd7c2071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mnqz4prndu2x", "content": "\u5165\u53e3\u306f\u9b54\u6cd5\u3058\u3083\u306a\u3044\u3002CVE-2026-39987\u3001`/terminal/ws` \u306e\u8a8d\u8a3c\u629c\u3051\u3002marimo\u516c\u5f0f\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3082\u30010.23.0\u3067\u4fee\u6b63\u6e08\u307f\u3068\u66f8\u3044\u3066\u308b\u3002\nhttps://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc\n\n\u7a74\u306e\u672c\u4f53\u306f\u300cAI\u304c\u5168\u90e8\u58ca\u3057\u305f\u300d\u3058\u3083\u306d\u3047\u3002\u5165\u3089\u308c\u305f\u5f8c\u306e\u6a2a\u79fb\u52d5\u304c\u5b89\u304f\u306a\u3063\u305f\u3053\u3068\u3060\u3002", "creation_timestamp": "2026-06-08T06:03:36.227462Z"} https://vulnerability.circl.lu/sighting/824889c9-10fa-49ed-bff2-0b92fd7c2071/export Mon, 08 Jun 2026 06:03:36 +0000 https://vulnerability.circl.lu/sighting/9b44c696-c47c-4704-8c34-7aaacca63883/export {"uuid": "9b44c696-c47c-4704-8c34-7aaacca63883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mo25bvjog62m", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit thehackernews.com/2026/05/atta...", "creation_timestamp": "2026-06-11T21:12:07.020519Z"} {"uuid": "9b44c696-c47c-4704-8c34-7aaacca63883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mo25bvjog62m", "content": "Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit thehackernews.com/2026/05/atta...", "creation_timestamp": "2026-06-11T21:12:07.020519Z"} https://vulnerability.circl.lu/sighting/9b44c696-c47c-4704-8c34-7aaacca63883/export Thu, 11 Jun 2026 21:12:07 +0000 https://vulnerability.circl.lu/sighting/5c969a50-bbd2-4fcf-91e4-19e1771cdbb1/export {"uuid": "5c969a50-bbd2-4fcf-91e4-19e1771cdbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmp6ss2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:53.343602Z"} {"uuid": "5c969a50-bbd2-4fcf-91e4-19e1771cdbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmp6ss2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:53.343602Z"} https://vulnerability.circl.lu/sighting/5c969a50-bbd2-4fcf-91e4-19e1771cdbb1/export Mon, 15 Jun 2026 11:24:53 +0000 https://vulnerability.circl.lu/sighting/a656fde0-11e6-493f-8c72-0365c8e20b3f/export {"uuid": "a656fde0-11e6-493f-8c72-0365c8e20b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmplj22o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:54.067890Z"} {"uuid": "a656fde0-11e6-493f-8c72-0365c8e20b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmplj22o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:54.067890Z"} https://vulnerability.circl.lu/sighting/a656fde0-11e6-493f-8c72-0365c8e20b3f/export Mon, 15 Jun 2026 11:24:54 +0000 https://vulnerability.circl.lu/sighting/ad2a6ea1-6d8e-49a0-b1ee-88691b0e2e86/export {"uuid": "ad2a6ea1-6d8e-49a0-b1ee-88691b0e2e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmpnhk2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:56.568514Z"} {"uuid": "ad2a6ea1-6d8e-49a0-b1ee-88691b0e2e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmpnhk2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:56.568514Z"} https://vulnerability.circl.lu/sighting/ad2a6ea1-6d8e-49a0-b1ee-88691b0e2e86/export Mon, 15 Jun 2026 11:24:56 +0000 https://vulnerability.circl.lu/sighting/6305930c-af6d-4540-883e-b39d3f81232a/export {"uuid": "6305930c-af6d-4540-883e-b39d3f81232a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmpogs2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:57.156557Z"} {"uuid": "6305930c-af6d-4540-883e-b39d3f81232a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmpogs2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:57.156557Z"} https://vulnerability.circl.lu/sighting/6305930c-af6d-4540-883e-b39d3f81232a/export Mon, 15 Jun 2026 11:24:57 +0000 https://vulnerability.circl.lu/sighting/377a4e18-1f1e-40d8-b495-6abca8b0b464/export {"uuid": "377a4e18-1f1e-40d8-b495-6abca8b0b464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmppg22o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:57.686380Z"} {"uuid": "377a4e18-1f1e-40d8-b495-6abca8b0b464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmppg22o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:57.686380Z"} https://vulnerability.circl.lu/sighting/377a4e18-1f1e-40d8-b495-6abca8b0b464/export Mon, 15 Jun 2026 11:24:57 +0000 https://vulnerability.circl.lu/sighting/ca8e3e4e-c578-4c86-8405-ac7c98893a61/export {"uuid": "ca8e3e4e-c578-4c86-8405-ac7c98893a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmprek2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:58.214687Z"} {"uuid": "ca8e3e4e-c578-4c86-8405-ac7c98893a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/robsongfreire.bsky.social/post/3mod6dmprek2o", "content": "E n\u00e3o em uma armadilha digital. O agente de IA explorou a vulnerabilidade CVE-2026-39987 em um notebook Marimo para obter acesso inicial. A partir da\u00ed, extraiu credenciais da Amazon Web Services, localizou e usou uma chave privada de acesso remoto e lan\u00e7ou oito sess\u00f5es paralelas contra o banco 2/6\ud83d\udc47", "creation_timestamp": "2026-06-15T11:24:58.214687Z"} https://vulnerability.circl.lu/sighting/ca8e3e4e-c578-4c86-8405-ac7c98893a61/export Mon, 15 Jun 2026 11:24:58 +0000 https://vulnerability.circl.lu/sighting/b07422a5-6959-4e6b-b3fe-c998babbc18b/export {"uuid": "b07422a5-6959-4e6b-b3fe-c998babbc18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "MISP/d511a704-eba2-411a-9543-41e0e130f522", "content": "", "creation_timestamp": "2026-06-15T17:02:31.000000Z"} {"uuid": "b07422a5-6959-4e6b-b3fe-c998babbc18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "MISP/d511a704-eba2-411a-9543-41e0e130f522", "content": "", "creation_timestamp": "2026-06-15T17:02:31.000000Z"} https://vulnerability.circl.lu/sighting/b07422a5-6959-4e6b-b3fe-c998babbc18b/export Mon, 15 Jun 2026 17:02:31 +0000 https://vulnerability.circl.lu/sighting/832ed5fe-97bd-4562-a190-004597a0818a/export {"uuid": "832ed5fe-97bd-4562-a190-004597a0818a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3moeqyf377y2r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 57 interactions\nCVE-2026-11645: 30 interactions\nCVE-2025-10263: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-39987: 18 interactions\nCVE-2026-0257: 7 interactions\nCVE-2026-12221: 6 interactions\n", "creation_timestamp": "2026-06-16T02:31:16.680831Z"} {"uuid": "832ed5fe-97bd-4562-a190-004597a0818a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39987", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3moeqyf377y2r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 57 interactions\nCVE-2026-11645: 30 interactions\nCVE-2025-10263: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-39987: 18 interactions\nCVE-2026-0257: 7 interactions\nCVE-2026-12221: 6 interactions\n", "creation_timestamp": "2026-06-16T02:31:16.680831Z"} https://vulnerability.circl.lu/sighting/832ed5fe-97bd-4562-a190-004597a0818a/export Tue, 16 Jun 2026 02:31:16 +0000