https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 04 Aug 2026 22:29:38 +0000 https://vulnerability.circl.lu/sighting/3a8acded-8c02-417e-8278-462aa2cd8a1d/export {"uuid": "3a8acded-8c02-417e-8278-462aa2cd8a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117022971447141232", "content": "CVE-2026-67336: better-auth <1.6.11 uses insecure crypto defaults in oidcProvider & mcp, advertising 'none' algo & accepting plain PKCE. Exploitation can lead to unsigned tokens & code interception. Severity: CRITICAL. Patch to 1.6.11+ https://radar.offseq.com/threat/better-auth-versions-before-1611-contain-insecure-cryptographic-defaults-in-the-oidcprovider-and-mcp-eb22076a221f3a81 #OffSeq #CVE202667336 #OAuth #Security", "creation_timestamp": "2026-08-02T00:00:37.529213Z"} {"uuid": "3a8acded-8c02-417e-8278-462aa2cd8a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117022971447141232", "content": "CVE-2026-67336: better-auth <1.6.11 uses insecure crypto defaults in oidcProvider & mcp, advertising 'none' algo & accepting plain PKCE. Exploitation can lead to unsigned tokens & code interception. Severity: CRITICAL. Patch to 1.6.11+ https://radar.offseq.com/threat/better-auth-versions-before-1611-contain-insecure-cryptographic-defaults-in-the-oidcprovider-and-mcp-eb22076a221f3a81 #OffSeq #CVE202667336 #OAuth #Security", "creation_timestamp": "2026-08-02T00:00:37.529213Z"} https://vulnerability.circl.lu/sighting/3a8acded-8c02-417e-8278-462aa2cd8a1d/export Sun, 02 Aug 2026 00:00:37 +0000 https://vulnerability.circl.lu/sighting/e166d5b3-f9fd-44ad-a7fd-d3d4838fe1c7/export {"uuid": "e166d5b3-f9fd-44ad-a7fd-d3d4838fe1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2lyo7cei25", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67336:better-auth 1.6.11 \u4e4b\u524d\u7248\u672c\u7684\u52a0\u5bc6\u6f0f\u6d1e\u98ce\u9669\u4e0e\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/DEB17FF7-B423-414C-85F8-2437A2F4045F", "creation_timestamp": "2026-08-01T23:16:05.667017Z"} {"uuid": "e166d5b3-f9fd-44ad-a7fd-d3d4838fe1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2lyo7cei25", "content": "\u6df1\u5ea6\u89e3\u6790 CVE-2026-67336:better-auth 1.6.11 \u4e4b\u524d\u7248\u672c\u7684\u52a0\u5bc6\u6f0f\u6d1e\u98ce\u9669\u4e0e\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/DEB17FF7-B423-414C-85F8-2437A2F4045F", "creation_timestamp": "2026-08-01T23:16:05.667017Z"} https://vulnerability.circl.lu/sighting/e166d5b3-f9fd-44ad-a7fd-d3d4838fe1c7/export Sat, 01 Aug 2026 23:16:05 +0000 https://vulnerability.circl.lu/sighting/82491452-c0fb-4eb5-8f5b-3bae1581a80a/export {"uuid": "82491452-c0fb-4eb5-8f5b-3bae1581a80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lyfqpxo2j", "content": "\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Better-Auth: \u05de\u05d4 \u05db\u05dc \u05de\u05e4\u05ea\u05d7 \u05d5\u05de\u05e9\u05ea\u05de\u05e9 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea \u05e2\u05dc CVE-2026-67336\n\n\n\nhttps://khesef.xyz/posts/6959956F-D7E7-4A35-B7C8-FAE22DC94DA5", "creation_timestamp": "2026-08-01T23:15:56.765309Z"} {"uuid": "82491452-c0fb-4eb5-8f5b-3bae1581a80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lyfqpxo2j", "content": "\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-Better-Auth: \u05de\u05d4 \u05db\u05dc \u05de\u05e4\u05ea\u05d7 \u05d5\u05de\u05e9\u05ea\u05de\u05e9 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea \u05e2\u05dc CVE-2026-67336\n\n\n\nhttps://khesef.xyz/posts/6959956F-D7E7-4A35-B7C8-FAE22DC94DA5", "creation_timestamp": "2026-08-01T23:15:56.765309Z"} https://vulnerability.circl.lu/sighting/82491452-c0fb-4eb5-8f5b-3bae1581a80a/export Sat, 01 Aug 2026 23:15:56 +0000 https://vulnerability.circl.lu/sighting/f3ed9b53-0300-45f2-aecf-7abea04dede0/export {"uuid": "f3ed9b53-0300-45f2-aecf-7abea04dede0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lycvlav2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67336 \u0432 better-auth: \u043a\u0430\u043a \u0441\u043b\u0430\u0431\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/59CC029A-9EE3-4AA2-BC0E-C78ADE698516", "creation_timestamp": "2026-08-01T23:15:53.830727Z"} {"uuid": "f3ed9b53-0300-45f2-aecf-7abea04dede0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lycvlav2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67336 \u0432 better-auth: \u043a\u0430\u043a \u0441\u043b\u0430\u0431\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/59CC029A-9EE3-4AA2-BC0E-C78ADE698516", "creation_timestamp": "2026-08-01T23:15:53.830727Z"} https://vulnerability.circl.lu/sighting/f3ed9b53-0300-45f2-aecf-7abea04dede0/export Sat, 01 Aug 2026 23:15:53 +0000 https://vulnerability.circl.lu/sighting/8dd2db1e-4e03-4518-becf-987ac215ab9a/export {"uuid": "8dd2db1e-4e03-4518-becf-987ac215ab9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2hq24uci2c", "content": "CVE-2026-67336: \u05d7\u05e9\u05d9\u05e4\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05e7\u05e8\u05d9\u05e4\u05d8\u05d5\u05d2\u05e8\u05e4\u05d9\u05ea \u05d4\u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-better-auth \u05d5\u05d4\u05e9\u05dc\u05db\u05d5\u05ea\u05d9\u05d4 \u05e2\u05dc \u05d0\u05d1\u05d8\u05d7\u05ea \u05de\u05e2\u05e8\u05db\u05d5\u05ea OAuth\n\n\n\nhttps://khesef.xyz/posts/55C59A3C-FE33-410D-BE83-5E13FF1BE3B4", "creation_timestamp": "2026-08-01T21:59:41.436795Z"} {"uuid": "8dd2db1e-4e03-4518-becf-987ac215ab9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2hq24uci2c", "content": "CVE-2026-67336: \u05d7\u05e9\u05d9\u05e4\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05e7\u05e8\u05d9\u05e4\u05d8\u05d5\u05d2\u05e8\u05e4\u05d9\u05ea \u05d4\u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-better-auth \u05d5\u05d4\u05e9\u05dc\u05db\u05d5\u05ea\u05d9\u05d4 \u05e2\u05dc \u05d0\u05d1\u05d8\u05d7\u05ea \u05de\u05e2\u05e8\u05db\u05d5\u05ea OAuth\n\n\n\nhttps://khesef.xyz/posts/55C59A3C-FE33-410D-BE83-5E13FF1BE3B4", "creation_timestamp": "2026-08-01T21:59:41.436795Z"} https://vulnerability.circl.lu/sighting/8dd2db1e-4e03-4518-becf-987ac215ab9a/export Sat, 01 Aug 2026 21:59:41 +0000 https://vulnerability.circl.lu/sighting/bc0c363d-ffe9-4853-9b75-ccb2018a36a4/export {"uuid": "bc0c363d-ffe9-4853-9b75-ccb2018a36a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2hphbbqr2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67336 \u0432 better-auth: \u043a\u0430\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 OAuth 2.0 \u0438 OpenID Connect\n\n\n\nhttps://kripta.biz/posts/4E0C312D-4299-4591-BE0A-8E7A39674D92", "creation_timestamp": "2026-08-01T21:59:21.356996Z"} {"uuid": "bc0c363d-ffe9-4853-9b75-ccb2018a36a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2hphbbqr2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67336 \u0432 better-auth: \u043a\u0430\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 OAuth 2.0 \u0438 OpenID Connect\n\n\n\nhttps://kripta.biz/posts/4E0C312D-4299-4591-BE0A-8E7A39674D92", "creation_timestamp": "2026-08-01T21:59:21.356996Z"} https://vulnerability.circl.lu/sighting/bc0c363d-ffe9-4853-9b75-ccb2018a36a4/export Sat, 01 Aug 2026 21:59:21 +0000 https://vulnerability.circl.lu/sighting/84dbf111-3d4c-498c-bda1-ebb3d04909a7/export {"uuid": "84dbf111-3d4c-498c-bda1-ebb3d04909a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2c2flwuo23", "content": "CVE-2026-67336 - better-auth\nVersions of better-auth before 1.6.11 have default settings that make it easier for attackers to intercept sensitive information. This affects the oidcProvider and mcp plugins, which\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#betterauth #CVE #infosec", "creation_timestamp": "2026-08-01T20:18:06.527886Z"} {"uuid": "84dbf111-3d4c-498c-bda1-ebb3d04909a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2c2flwuo23", "content": "CVE-2026-67336 - better-auth\nVersions of better-auth before 1.6.11 have default settings that make it easier for attackers to intercept sensitive information. This affects the oidcProvider and mcp plugins, which\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#betterauth #CVE #infosec", "creation_timestamp": "2026-08-01T20:18:06.527886Z"} https://vulnerability.circl.lu/sighting/84dbf111-3d4c-498c-bda1-ebb3d04909a7/export Sat, 01 Aug 2026 20:18:06 +0000 https://vulnerability.circl.lu/sighting/05bddbc2-b597-4ebf-bf4e-e3b007aa2aba/export {"uuid": "05bddbc2-b597-4ebf-bf4e-e3b007aa2aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqemwqfs2l", "content": "\ud83d\udfe0 CVE-2026-67336 - High (8.7)\n\nbetter-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67336/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:01:42.565388Z"} {"uuid": "05bddbc2-b597-4ebf-bf4e-e3b007aa2aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67336", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqemwqfs2l", "content": "\ud83d\udfe0 CVE-2026-67336 - High (8.7)\n\nbetter-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67336/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:01:42.565388Z"} https://vulnerability.circl.lu/sighting/05bddbc2-b597-4ebf-bf4e-e3b007aa2aba/export Sat, 01 Aug 2026 15:01:42 +0000