https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 09 Jul 2026 19:21:01 +0000 https://vulnerability.circl.lu/sighting/03459ebe-6c8d-4287-ae61-bbcb4ae2f0c7/export {"uuid": "03459ebe-6c8d-4287-ae61-bbcb4ae2f0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60104", "type": "seen", "source": "https://www.acn.gov.it/portale/w/bitwarden-poc-pubblico-per-lo-sfruttamento-di-una-nuova-vulnerabilita", "content": "Disponibile un Proof of Concept (PoC) per la vulnerabilit\u00e0 identificata tramite la CVE-2026-60104 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in Bitwarden Server, noto software open source di gestione delle password. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato, appartenente alla stessa organizzazione e in presenza di specifiche condizioni, di eludere dei meccanismi di sicurezza e di accedere ad informazioni riservate sui sistemi target.", "creation_timestamp": "2026-07-09T16:00:46.270100Z"} {"uuid": "03459ebe-6c8d-4287-ae61-bbcb4ae2f0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60104", "type": "seen", "source": "https://www.acn.gov.it/portale/w/bitwarden-poc-pubblico-per-lo-sfruttamento-di-una-nuova-vulnerabilita", "content": "Disponibile un Proof of Concept (PoC) per la vulnerabilit\u00e0 identificata tramite la CVE-2026-60104 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in Bitwarden Server, noto software open source di gestione delle password. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato, appartenente alla stessa organizzazione e in presenza di specifiche condizioni, di eludere dei meccanismi di sicurezza e di accedere ad informazioni riservate sui sistemi target.", "creation_timestamp": "2026-07-09T16:00:46.270100Z"} https://vulnerability.circl.lu/sighting/03459ebe-6c8d-4287-ae61-bbcb4ae2f0c7/export Thu, 09 Jul 2026 16:00:46 +0000 https://vulnerability.circl.lu/sighting/49b5daa5-589b-4e43-88e8-36e18daf8e49/export {"uuid": "49b5daa5-589b-4e43-88e8-36e18daf8e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60104", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq6a547swj2z", "content": "CVE-2026-60104 - server\nIf you're using an older version of Bitwarden Server, a malicious user with limited privileges could gain access to another user's encrypted data and take control of their account.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#server #bitwarden #CVE #infosec", "creation_timestamp": "2026-07-08T23:04:05.419307Z"} {"uuid": "49b5daa5-589b-4e43-88e8-36e18daf8e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60104", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq6a547swj2z", "content": "CVE-2026-60104 - server\nIf you're using an older version of Bitwarden Server, a malicious user with limited privileges could gain access to another user's encrypted data and take control of their account.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#server #bitwarden #CVE #infosec", "creation_timestamp": "2026-07-08T23:04:05.419307Z"} https://vulnerability.circl.lu/sighting/49b5daa5-589b-4e43-88e8-36e18daf8e49/export Wed, 08 Jul 2026 23:04:05 +0000 https://vulnerability.circl.lu/sighting/ce2bdd5d-c0fb-4a25-8bc7-7042e1bdd017/export {"uuid": "ce2bdd5d-c0fb-4a25-8bc7-7042e1bdd017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq65arfuib24", "content": "CVE-2026-60104 - Bitwarden Server\nCVE ID : CVE-2026-60104\n \n Published : July 8, 2026, 8:17 p.m. | 58\u00a0minutes ago\n \n Description : Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin-request body belongs to the authenticated caller, a...", "creation_timestamp": "2026-07-08T22:12:26.904523Z"} {"uuid": "ce2bdd5d-c0fb-4a25-8bc7-7042e1bdd017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq65arfuib24", "content": "CVE-2026-60104 - Bitwarden Server\nCVE ID : CVE-2026-60104\n \n Published : July 8, 2026, 8:17 p.m. | 58\u00a0minutes ago\n \n Description : Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin-request body belongs to the authenticated caller, a...", "creation_timestamp": "2026-07-08T22:12:26.904523Z"} https://vulnerability.circl.lu/sighting/ce2bdd5d-c0fb-4a25-8bc7-7042e1bdd017/export Wed, 08 Jul 2026 22:12:26 +0000