https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 05 Aug 2026 05:45:11 +0000 https://vulnerability.circl.lu/sighting/1e04e259-81ce-404c-81cc-92db7a398974/export {"uuid": "1e04e259-81ce-404c-81cc-92db7a398974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschz5e2cv2s", "content": "CVE-2026-59638 - bouncycastle\nBouncy Castle for Java versions 1.85 and earlier, and Java LTS versions 2.73.12 and earlier, have a security setting enabled by default that could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #canonical #UbuntuPro1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:26:04.661275Z"} {"uuid": "1e04e259-81ce-404c-81cc-92db7a398974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschz5e2cv2s", "content": "CVE-2026-59638 - bouncycastle\nBouncy Castle for Java versions 1.85 and earlier, and Java LTS versions 2.73.12 and earlier, have a security setting enabled by default that could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #canonical #UbuntuPro1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:26:04.661275Z"} https://vulnerability.circl.lu/sighting/1e04e259-81ce-404c-81cc-92db7a398974/export Wed, 05 Aug 2026 02:26:04 +0000 https://vulnerability.circl.lu/sighting/6775a096-7656-43d9-a24c-f4db7e2ebdf6/export {"uuid": "6775a096-7656-43d9-a24c-f4db7e2ebdf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7f44jsss2l", "content": "CVE-2026-59638 - bouncycastle\nBouncy Castle for Java versions before 1.85, LTS before 2.73.12, and FIPS versions before 1.0.24, 2.0.24, and 2.1.24 have a security problem. This means that some\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-03T20:56:03.734604Z"} {"uuid": "6775a096-7656-43d9-a24c-f4db7e2ebdf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7f44jsss2l", "content": "CVE-2026-59638 - bouncycastle\nBouncy Castle for Java versions before 1.85, LTS before 2.73.12, and FIPS versions before 1.0.24, 2.0.24, and 2.1.24 have a security problem. This means that some\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-03T20:56:03.734604Z"} https://vulnerability.circl.lu/sighting/6775a096-7656-43d9-a24c-f4db7e2ebdf6/export Mon, 03 Aug 2026 20:56:03 +0000 https://vulnerability.circl.lu/sighting/80dbaeaa-9086-48ff-a129-a78fb33d0a91/export {"uuid": "80dbaeaa-9086-48ff-a129-a78fb33d0a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms6jtixsxk2u", "content": "CVE-2026-59638\nBouncy Castle for Java versions before 1.85, 2.73.12, and certain FIPS versions allow an attacker to bypass hostname verification, potentially leading to man-in-the-middle attacks. This is a security concern\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-03T12:48:03.826233Z"} {"uuid": "80dbaeaa-9086-48ff-a129-a78fb33d0a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms6jtixsxk2u", "content": "CVE-2026-59638\nBouncy Castle for Java versions before 1.85, 2.73.12, and certain FIPS versions allow an attacker to bypass hostname verification, potentially leading to man-in-the-middle attacks. This is a security concern\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-03T12:48:03.826233Z"} https://vulnerability.circl.lu/sighting/80dbaeaa-9086-48ff-a129-a78fb33d0a91/export Mon, 03 Aug 2026 12:48:03 +0000 https://vulnerability.circl.lu/sighting/400ad253-53ab-4fc1-b285-c905cb8e3d74/export {"uuid": "400ad253-53ab-4fc1-b285-c905cb8e3d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59638", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117028986804143783", "content": "CVE-2026-59638 (CRITICAL, CVSS 9.3) in BC-JAVA: Improper cert validation due to default CN-fallback can expose TLS connections to MITM. Affects <1.85, LTS <2.73.12. Patch status unknown \u2014 monitor vendor & consider disabling fallback. https://radar.offseq.com/threat/cve-2026-59638-cwe-297-improper-validation-of-certificate-with-host-mismatch-in-legion-of-the-bouncy-aa319f6f20b27a8a #OffSeq #CVE202659638 #infosec", "creation_timestamp": "2026-08-03T01:30:25.595860Z"} {"uuid": "400ad253-53ab-4fc1-b285-c905cb8e3d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59638", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117028986804143783", "content": "CVE-2026-59638 (CRITICAL, CVSS 9.3) in BC-JAVA: Improper cert validation due to default CN-fallback can expose TLS connections to MITM. Affects <1.85, LTS <2.73.12. Patch status unknown \u2014 monitor vendor & consider disabling fallback. https://radar.offseq.com/threat/cve-2026-59638-cwe-297-improper-validation-of-certificate-with-host-mismatch-in-legion-of-the-bouncy-aa319f6f20b27a8a #OffSeq #CVE202659638 #infosec", "creation_timestamp": "2026-08-03T01:30:25.595860Z"} https://vulnerability.circl.lu/sighting/400ad253-53ab-4fc1-b285-c905cb8e3d74/export Mon, 03 Aug 2026 01:30:25 +0000