https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 31 May 2026 16:17:04 +0000 https://vulnerability.circl.lu/sighting/5f07a5f1-2589-4cb6-9628-a4977201033d/export {"uuid": "5f07a5f1-2589-4cb6-9628-a4977201033d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41247", "type": "published-proof-of-concept", "source": "Telegram/wY3PGk1V7kusFG8GbDK0g0CtGhXXIm9U_sDC-frBku-7BiY", "content": "", "creation_timestamp": "2026-04-23T21:26:07.000000Z"} {"uuid": "5f07a5f1-2589-4cb6-9628-a4977201033d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41247", "type": "published-proof-of-concept", "source": "Telegram/wY3PGk1V7kusFG8GbDK0g0CtGhXXIm9U_sDC-frBku-7BiY", "content": "", "creation_timestamp": "2026-04-23T21:26:07.000000Z"} https://vulnerability.circl.lu/sighting/5f07a5f1-2589-4cb6-9628-a4977201033d/export Thu, 23 Apr 2026 21:26:07 +0000 https://vulnerability.circl.lu/sighting/fd468801-5c74-4407-a40a-093cd6d1fff2/export {"uuid": "fd468801-5c74-4407-a40a-093cd6d1fff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41246", "type": "published-proof-of-concept", "source": "Telegram/wY3PGk1V7kusFG8GbDK0g0CtGhXXIm9U_sDC-frBku-7BiY", "content": "", "creation_timestamp": "2026-04-23T21:26:07.000000Z"} {"uuid": "fd468801-5c74-4407-a40a-093cd6d1fff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41246", "type": "published-proof-of-concept", "source": "Telegram/wY3PGk1V7kusFG8GbDK0g0CtGhXXIm9U_sDC-frBku-7BiY", "content": "", "creation_timestamp": "2026-04-23T21:26:07.000000Z"} https://vulnerability.circl.lu/sighting/fd468801-5c74-4407-a40a-093cd6d1fff2/export Thu, 23 Apr 2026 21:26:07 +0000 https://vulnerability.circl.lu/sighting/eb9d2cd5-4f70-44f4-afe8-3da2c87b70d0/export {"uuid": "eb9d2cd5-4f70-44f4-afe8-3da2c87b70d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41248", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbjlxyitp2w", "content": "", "creation_timestamp": "2026-04-24T22:00:17.854673Z"} {"uuid": "eb9d2cd5-4f70-44f4-afe8-3da2c87b70d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41248", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbjlxyitp2w", "content": "", "creation_timestamp": "2026-04-24T22:00:17.854673Z"} https://vulnerability.circl.lu/sighting/eb9d2cd5-4f70-44f4-afe8-3da2c87b70d0/export Fri, 24 Apr 2026 22:00:17 +0000 https://vulnerability.circl.lu/sighting/01d24a17-ac07-49b0-aada-48fc44b20039/export {"uuid": "01d24a17-ac07-49b0-aada-48fc44b20039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41248", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mkbqdc3r752v", "content": "", "creation_timestamp": "2026-04-25T00:00:42.760571Z"} {"uuid": "01d24a17-ac07-49b0-aada-48fc44b20039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41248", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mkbqdc3r752v", "content": "", "creation_timestamp": "2026-04-25T00:00:42.760571Z"} https://vulnerability.circl.lu/sighting/01d24a17-ac07-49b0-aada-48fc44b20039/export Sat, 25 Apr 2026 00:00:42 +0000 https://vulnerability.circl.lu/sighting/15076dea-d50b-4b30-8559-acfe2c342b84/export {"uuid": "15076dea-d50b-4b30-8559-acfe2c342b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41248", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116462402932902110", "content": "", "creation_timestamp": "2026-04-25T00:00:46.878045Z"} {"uuid": "15076dea-d50b-4b30-8559-acfe2c342b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41248", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116462402932902110", "content": "", "creation_timestamp": "2026-04-25T00:00:46.878045Z"} https://vulnerability.circl.lu/sighting/15076dea-d50b-4b30-8559-acfe2c342b84/export Sat, 25 Apr 2026 00:00:46 +0000 https://vulnerability.circl.lu/sighting/fee2802e-be27-4ba1-b255-2aa59b1490a5/export {"uuid": "fee2802e-be27-4ba1-b255-2aa59b1490a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41248", "type": "seen", "source": "https://bsky.app/profile/hexmortem.bsky.social/post/3mkfpzex4n723", "content": "", "creation_timestamp": "2026-04-26T14:05:49.285505Z"} {"uuid": "fee2802e-be27-4ba1-b255-2aa59b1490a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41248", "type": "seen", "source": "https://bsky.app/profile/hexmortem.bsky.social/post/3mkfpzex4n723", "content": "", "creation_timestamp": "2026-04-26T14:05:49.285505Z"} https://vulnerability.circl.lu/sighting/fee2802e-be27-4ba1-b255-2aa59b1490a5/export Sun, 26 Apr 2026 14:05:49 +0000 https://vulnerability.circl.lu/sighting/6b18bf11-bb0e-4567-9cbe-af491febccbf/export {"uuid": "6b18bf11-bb0e-4567-9cbe-af491febccbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41242", "type": "published-proof-of-concept", "source": "Telegram/R85q5mAF-_-h3phwgiJ0Y2SWWwG84cWRlWRRB1ACIs5b5lM", "content": "", "creation_timestamp": "2026-04-26T21:00:04.000000Z"} {"uuid": "6b18bf11-bb0e-4567-9cbe-af491febccbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41242", "type": "published-proof-of-concept", "source": "Telegram/R85q5mAF-_-h3phwgiJ0Y2SWWwG84cWRlWRRB1ACIs5b5lM", "content": "", "creation_timestamp": "2026-04-26T21:00:04.000000Z"} https://vulnerability.circl.lu/sighting/6b18bf11-bb0e-4567-9cbe-af491febccbf/export Sun, 26 Apr 2026 21:00:04 +0000 https://vulnerability.circl.lu/sighting/bab627a3-371c-490d-88b9-230d0ebc8696/export {"uuid": "bab627a3-371c-490d-88b9-230d0ebc8696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41248", "type": "seen", "source": "https://bsky.app/profile/hexmortem.com/post/3mkrt3po63422", "content": "CVE-2026-41248 \u2014 Clerk middleware bypass.\n\nMiddleware tests the raw URL; framework router decodes before dispatch. /api/%61dmin/users \u2192 middleware reads \"%61dmin\", PASS. Handler reads \"admin\", runs unauthenticated.\n\nAffected: @clerk/shared \u2264 3.47.3 (nextjs/nuxt/astro). Fixed b0b6675bad.", "creation_timestamp": "2026-05-01T09:32:45.015685Z"} {"uuid": "bab627a3-371c-490d-88b9-230d0ebc8696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41248", "type": "seen", "source": "https://bsky.app/profile/hexmortem.com/post/3mkrt3po63422", "content": "CVE-2026-41248 \u2014 Clerk middleware bypass.\n\nMiddleware tests the raw URL; framework router decodes before dispatch. /api/%61dmin/users \u2192 middleware reads \"%61dmin\", PASS. Handler reads \"admin\", runs unauthenticated.\n\nAffected: @clerk/shared \u2264 3.47.3 (nextjs/nuxt/astro). Fixed b0b6675bad.", "creation_timestamp": "2026-05-01T09:32:45.015685Z"} https://vulnerability.circl.lu/sighting/bab627a3-371c-490d-88b9-230d0ebc8696/export Fri, 01 May 2026 09:32:45 +0000 https://vulnerability.circl.lu/sighting/080cea61-c9ca-4875-9c42-635f90f0a04d/export {"uuid": "080cea61-c9ca-4875-9c42-635f90f0a04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41241", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmthqixxht2m", "content": "\u30b9\u30d4\u30fc\u30ab\u30fc\u767b\u58c7\u3092\u78ba\u5b9f\u306b\u3059\u308b\u65b9\u6cd5\uff1a\u6587\u5b57\u901a\u308a\u30b7\u30b9\u30c6\u30e0\u3092\u30cf\u30c3\u30af\u3059\u308b\n\n\u3042\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u304c\u3001\u30c6\u30c3\u30af\u30ab\u30f3\u30d5\u30a1\u30ec\u30f3\u30b9\u306b\u30b9\u30d4\u30fc\u30ab\u30fc\u7533\u8acb\u3092\u78ba\u5b9f\u306b\u53d7\u7406\u3055\u305b\u308b\u4e07\u5168\u306e\u65b9\u6cd5\u3092\u898b\u3064\u3051\u305f\u3002\u305d\u306e\u30b7\u30b9\u30c6\u30e0\u81ea\u4f53\u3092\u30cf\u30c3\u30af\u3059\u308b\u3068\u3044\u3046\u3082\u306e\u3060\u3002CVE-2026-41241 \u306f\u3001\u30ab\u30f3\u30d5\u30a1\u30ec\u30f3\u30b9\u4e3b\u50ac\u8005\u304c\u30b9\u30d4\u30fc\u30ab\u30fc\u7533\u8acb\u3068\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u7ba1\u7406\u306b\u4f7f\u7528\u3059\u308b\u4eba\u6c17\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u30c4\u30fc\u30eb\u300cpretalx\u300d\u306b\u5b58\u5728\u3059\u308b\u3001\u4fdd\u5b58\u578b\u30af\u30ed\u30b9", "creation_timestamp": "2026-05-27T12:05:20.575499Z"} {"uuid": "080cea61-c9ca-4875-9c42-635f90f0a04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41241", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmthqixxht2m", "content": "\u30b9\u30d4\u30fc\u30ab\u30fc\u767b\u58c7\u3092\u78ba\u5b9f\u306b\u3059\u308b\u65b9\u6cd5\uff1a\u6587\u5b57\u901a\u308a\u30b7\u30b9\u30c6\u30e0\u3092\u30cf\u30c3\u30af\u3059\u308b\n\n\u3042\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u304c\u3001\u30c6\u30c3\u30af\u30ab\u30f3\u30d5\u30a1\u30ec\u30f3\u30b9\u306b\u30b9\u30d4\u30fc\u30ab\u30fc\u7533\u8acb\u3092\u78ba\u5b9f\u306b\u53d7\u7406\u3055\u305b\u308b\u4e07\u5168\u306e\u65b9\u6cd5\u3092\u898b\u3064\u3051\u305f\u3002\u305d\u306e\u30b7\u30b9\u30c6\u30e0\u81ea\u4f53\u3092\u30cf\u30c3\u30af\u3059\u308b\u3068\u3044\u3046\u3082\u306e\u3060\u3002CVE-2026-41241 \u306f\u3001\u30ab\u30f3\u30d5\u30a1\u30ec\u30f3\u30b9\u4e3b\u50ac\u8005\u304c\u30b9\u30d4\u30fc\u30ab\u30fc\u7533\u8acb\u3068\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u7ba1\u7406\u306b\u4f7f\u7528\u3059\u308b\u4eba\u6c17\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u30c4\u30fc\u30eb\u300cpretalx\u300d\u306b\u5b58\u5728\u3059\u308b\u3001\u4fdd\u5b58\u578b\u30af\u30ed\u30b9", "creation_timestamp": "2026-05-27T12:05:20.575499Z"} https://vulnerability.circl.lu/sighting/080cea61-c9ca-4875-9c42-635f90f0a04d/export Wed, 27 May 2026 12:05:20 +0000 https://vulnerability.circl.lu/sighting/b0324ea1-e203-4583-b2c5-9328af2a5232/export {"uuid": "b0324ea1-e203-4583-b2c5-9328af2a5232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41241", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmutv6zlc32d", "content": "CVE-2026-41241 in Pretalx exposed a stored XSS flaw that let registered speakers run JavaScript in organizers' browsers during submission searches. Patched in 2026.1.0. #Pretalx #CVE202641241 #XSS", "creation_timestamp": "2026-05-28T01:15:23.388934Z"} {"uuid": "b0324ea1-e203-4583-b2c5-9328af2a5232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41241", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmutv6zlc32d", "content": "CVE-2026-41241 in Pretalx exposed a stored XSS flaw that let registered speakers run JavaScript in organizers' browsers during submission searches. Patched in 2026.1.0. #Pretalx #CVE202641241 #XSS", "creation_timestamp": "2026-05-28T01:15:23.388934Z"} https://vulnerability.circl.lu/sighting/b0324ea1-e203-4583-b2c5-9328af2a5232/export Thu, 28 May 2026 01:15:23 +0000