https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 03 Aug 2026 15:30:35 +0000 https://vulnerability.circl.lu/sighting/3458a0cf-5439-4c70-b940-255a9453924c/export {"uuid": "3458a0cf-5439-4c70-b940-255a9453924c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46485", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpnlvlhdp2m", "content": "CVE-2026-46485 - Dash: Users can write to config despire permissions (OIDC tested)\nCVE ID : CVE-2026-46485\n \n Published : July 15, 2026, 7:17 p.m. | 17\u00a0minutes ago\n \n Description : Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can al...", "creation_timestamp": "2026-07-15T21:20:15.897820Z"} {"uuid": "3458a0cf-5439-4c70-b940-255a9453924c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46485", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpnlvlhdp2m", "content": "CVE-2026-46485 - Dash: Users can write to config despire permissions (OIDC tested)\nCVE ID : CVE-2026-46485\n \n Published : July 15, 2026, 7:17 p.m. | 17\u00a0minutes ago\n \n Description : Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can al...", "creation_timestamp": "2026-07-15T21:20:15.897820Z"} https://vulnerability.circl.lu/sighting/3458a0cf-5439-4c70-b940-255a9453924c/export Wed, 15 Jul 2026 21:20:15 +0000 https://vulnerability.circl.lu/sighting/45859fbb-aa12-49a5-b07e-1d0ce4596cf5/export {"uuid": "45859fbb-aa12-49a5-b07e-1d0ce4596cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46485", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpj5fzol22x", "content": "\ud83d\udfe0 CVE-2026-46485 - High (8.2)\n\nDashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can all...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46485/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T20:00:35.434223Z"} {"uuid": "45859fbb-aa12-49a5-b07e-1d0ce4596cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46485", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpj5fzol22x", "content": "\ud83d\udfe0 CVE-2026-46485 - High (8.2)\n\nDashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can all...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46485/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T20:00:35.434223Z"} https://vulnerability.circl.lu/sighting/45859fbb-aa12-49a5-b07e-1d0ce4596cf5/export Wed, 15 Jul 2026 20:00:35 +0000 https://vulnerability.circl.lu/sighting/5478aad9-5982-499f-9176-1a41f5a2b16e/export {"uuid": "5478aad9-5982-499f-9176-1a41f5a2b16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46488", "type": "published-proof-of-concept", "source": "https://github.com/motioneye-project/motioneye/security/advisories/GHSA-r3cw-c95m-wfh9", "content": "", "creation_timestamp": "2026-06-20T16:48:06.000000Z"} {"uuid": "5478aad9-5982-499f-9176-1a41f5a2b16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46488", "type": "published-proof-of-concept", "source": "https://github.com/motioneye-project/motioneye/security/advisories/GHSA-r3cw-c95m-wfh9", "content": "", "creation_timestamp": "2026-06-20T16:48:06.000000Z"} https://vulnerability.circl.lu/sighting/5478aad9-5982-499f-9176-1a41f5a2b16e/export Sat, 20 Jun 2026 16:48:06 +0000 https://vulnerability.circl.lu/sighting/8bfd2d8c-8ec7-4e4b-9714-47cfcc2c5b41/export {"uuid": "8bfd2d8c-8ec7-4e4b-9714-47cfcc2c5b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46489", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3igphqc2o", "content": "\ud83d\udfe0 CVE-2026-46489 - High (8.1)\n\nSolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo uplo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46489/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T01:01:13.322729Z"} {"uuid": "8bfd2d8c-8ec7-4e4b-9714-47cfcc2c5b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46489", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3igphqc2o", "content": "\ud83d\udfe0 CVE-2026-46489 - High (8.1)\n\nSolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo uplo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46489/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T01:01:13.322729Z"} https://vulnerability.circl.lu/sighting/8bfd2d8c-8ec7-4e4b-9714-47cfcc2c5b41/export Mon, 15 Jun 2026 01:01:13 +0000 https://vulnerability.circl.lu/sighting/983861e3-7f66-489b-8eea-f0ec2f35d8c2/export {"uuid": "983861e3-7f66-489b-8eea-f0ec2f35d8c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2ak5zje723", "content": "CVE-2026-46489 - SolidInvoice: Unrestricted file upload with no MIME validation allows stored XSS via malicious SVG logo\nCVE ID : CVE-2026-46489\n \n Published : June 11, 2026, 8:16 p.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : SolidInvoice is an open-source invoicing platform. ...", "creation_timestamp": "2026-06-11T22:10:28.963940Z"} {"uuid": "983861e3-7f66-489b-8eea-f0ec2f35d8c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2ak5zje723", "content": "CVE-2026-46489 - SolidInvoice: Unrestricted file upload with no MIME validation allows stored XSS via malicious SVG logo\nCVE ID : CVE-2026-46489\n \n Published : June 11, 2026, 8:16 p.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : SolidInvoice is an open-source invoicing platform. ...", "creation_timestamp": "2026-06-11T22:10:28.963940Z"} https://vulnerability.circl.lu/sighting/983861e3-7f66-489b-8eea-f0ec2f35d8c2/export Thu, 11 Jun 2026 22:10:28 +0000 https://vulnerability.circl.lu/sighting/4ff2020f-80e0-40dd-8a74-13e44beb6bb5/export {"uuid": "4ff2020f-80e0-40dd-8a74-13e44beb6bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46484", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnsoloid3q27", "content": "\ud83d\udfe0 CVE-2026-46484 - High (8.1)\n\nHeadplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, H...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46484/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-08T22:00:27.527789Z"} {"uuid": "4ff2020f-80e0-40dd-8a74-13e44beb6bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46484", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnsoloid3q27", "content": "\ud83d\udfe0 CVE-2026-46484 - High (8.1)\n\nHeadplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, H...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46484/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-08T22:00:27.527789Z"} https://vulnerability.circl.lu/sighting/4ff2020f-80e0-40dd-8a74-13e44beb6bb5/export Mon, 08 Jun 2026 22:00:27 +0000 https://vulnerability.circl.lu/sighting/04772d45-9c24-4717-a8fb-4f1ab24cd225/export {"uuid": "04772d45-9c24-4717-a8fb-4f1ab24cd225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46484", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnsmi5uyf52i", "content": "CVE-2026-46484 - Headplane: Path Traversal + RBAC Bypass in renameNode allows authenticated OIDC users to expire or rename any node/user\nCVE ID : CVE-2026-46484\n \n Published : June 8, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : Headplane is a feature-complete Web UI for ...", "creation_timestamp": "2026-06-08T21:24:13.111887Z"} {"uuid": "04772d45-9c24-4717-a8fb-4f1ab24cd225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46484", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnsmi5uyf52i", "content": "CVE-2026-46484 - Headplane: Path Traversal + RBAC Bypass in renameNode allows authenticated OIDC users to expire or rename any node/user\nCVE ID : CVE-2026-46484\n \n Published : June 8, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : Headplane is a feature-complete Web UI for ...", "creation_timestamp": "2026-06-08T21:24:13.111887Z"} https://vulnerability.circl.lu/sighting/04772d45-9c24-4717-a8fb-4f1ab24cd225/export Mon, 08 Jun 2026 21:24:13 +0000 https://vulnerability.circl.lu/sighting/9a9a4ac5-1315-4883-9372-9715a65f512e/export {"uuid": "9a9a4ac5-1315-4883-9372-9715a65f512e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46486", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnslnc7g4f2a", "content": "CVE-2026-46486 - Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing\nCVE ID : CVE-2026-46486\n \n Published : June 8, 2026, 7:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : MVT (Mobile Verification Toolkit) helps with co...", "creation_timestamp": "2026-06-08T21:07:39.859542Z"} {"uuid": "9a9a4ac5-1315-4883-9372-9715a65f512e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46486", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnslnc7g4f2a", "content": "CVE-2026-46486 - Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing\nCVE ID : CVE-2026-46486\n \n Published : June 8, 2026, 7:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : MVT (Mobile Verification Toolkit) helps with co...", "creation_timestamp": "2026-06-08T21:07:39.859542Z"} https://vulnerability.circl.lu/sighting/9a9a4ac5-1315-4883-9372-9715a65f512e/export Mon, 08 Jun 2026 21:07:39 +0000 https://vulnerability.circl.lu/sighting/c3f4b572-e654-4050-8ccf-cfd4a922d04e/export {"uuid": "c3f4b572-e654-4050-8ccf-cfd4a922d04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46481", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnshblm7jb2r", "content": "CVE-2026-46481 - OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users\nCVE ID : CVE-2026-46481\n \n Published : June 8, 2026, 5:16 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : OpenMetadata is a unified metadata platform. Prior to...", "creation_timestamp": "2026-06-08T19:49:31.699600Z"} {"uuid": "c3f4b572-e654-4050-8ccf-cfd4a922d04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46481", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnshblm7jb2r", "content": "CVE-2026-46481 - OpenMetadata: TEST_CONNECTION workflow leaks ingestion-bot JWT and database password to regular users\nCVE ID : CVE-2026-46481\n \n Published : June 8, 2026, 5:16 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : OpenMetadata is a unified metadata platform. Prior to...", "creation_timestamp": "2026-06-08T19:49:31.699600Z"} https://vulnerability.circl.lu/sighting/c3f4b572-e654-4050-8ccf-cfd4a922d04e/export Mon, 08 Jun 2026 19:49:31 +0000 https://vulnerability.circl.lu/sighting/a18d0fcb-33b5-4695-82f7-ba8ae8a94677/export {"uuid": "a18d0fcb-33b5-4695-82f7-ba8ae8a94677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns634lsdt2a", "content": "CVE-2026-46480 - Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover\nCVE ID : CVE-2026-46480\n \n Published : June 8, 2026, 4:16 p.m. | 17\u00a0minutes ago\n \n Description : Flowise is a drag & drop user interface to build a customized large ...", "creation_timestamp": "2026-06-08T17:04:50.929081Z"} {"uuid": "a18d0fcb-33b5-4695-82f7-ba8ae8a94677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns634lsdt2a", "content": "CVE-2026-46480 - Flowise: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover\nCVE ID : CVE-2026-46480\n \n Published : June 8, 2026, 4:16 p.m. | 17\u00a0minutes ago\n \n Description : Flowise is a drag & drop user interface to build a customized large ...", "creation_timestamp": "2026-06-08T17:04:50.929081Z"} https://vulnerability.circl.lu/sighting/a18d0fcb-33b5-4695-82f7-ba8ae8a94677/export Mon, 08 Jun 2026 17:04:50 +0000