https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 02 Sep 2026 15:17:47 +0000 https://vulnerability.circl.lu/sighting/8c02ef6d-da10-4767-9407-34545080c330/export {"uuid": "8c02ef6d-da10-4767-9407-34545080c330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mujwsxkzri2t", "content": "CVE-2026-75604 - next.js\nIf you run a Next.js web app on a Windows server and use certain routing features, an attacker can trick the system into accessing files outside its safe area, exposing secret data and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nextjs #vercel #CVE #infosec", "creation_timestamp": "2026-09-02T12:30:04.966565Z"} {"uuid": "8c02ef6d-da10-4767-9407-34545080c330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mujwsxkzri2t", "content": "CVE-2026-75604 - next.js\nIf you run a Next.js web app on a Windows server and use certain routing features, an attacker can trick the system into accessing files outside its safe area, exposing secret data and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nextjs #vercel #CVE #infosec", "creation_timestamp": "2026-09-02T12:30:04.966565Z"} https://vulnerability.circl.lu/sighting/8c02ef6d-da10-4767-9407-34545080c330/export Wed, 02 Sep 2026 12:30:04 +0000 https://vulnerability.circl.lu/sighting/f510f956-0408-4614-b9d0-dc5ff528442a/export {"uuid": "f510f956-0408-4614-b9d0-dc5ff528442a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48675", "content": "CVE-2026-75604 Next.js Windows RCE \n*\nPoC", "creation_timestamp": "2026-09-02T06:00:05.299042Z"} {"uuid": "f510f956-0408-4614-b9d0-dc5ff528442a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48675", "content": "CVE-2026-75604 Next.js Windows RCE \n*\nPoC", "creation_timestamp": "2026-09-02T06:00:05.299042Z"} https://vulnerability.circl.lu/sighting/f510f956-0408-4614-b9d0-dc5ff528442a/export Wed, 02 Sep 2026 06:00:05 +0000 https://vulnerability.circl.lu/sighting/b70ef44f-64a3-4540-b048-74621ec579cd/export {"uuid": "b70ef44f-64a3-4540-b048-74621ec579cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muijoyhfph2z", "content": "\ud83d\udd34 CVE-2026-75604 - Critical (9)\n\nNext.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75604/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T23:02:33.816747Z"} {"uuid": "b70ef44f-64a3-4540-b048-74621ec579cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muijoyhfph2z", "content": "\ud83d\udd34 CVE-2026-75604 - Critical (9)\n\nNext.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75604/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T23:02:33.816747Z"} https://vulnerability.circl.lu/sighting/b70ef44f-64a3-4540-b048-74621ec579cd/export Tue, 01 Sep 2026 23:02:33 +0000 https://vulnerability.circl.lu/sighting/b3a83add-323c-4e7e-88c1-609feb40327d/export {"uuid": "b3a83add-323c-4e7e-88c1-609feb40327d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mufpoa26uu2c", "content": "~Checkpoint~\nAttacks hit airports, healthcare and government while actively exploited flaws enable remote code execution.\n-\nIOCs: CVE-2026-82078, CVE-2026-18885, CVE-2026-75604\n-\n#Ransomware #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-08-31T20:11:31.738877Z"} {"uuid": "b3a83add-323c-4e7e-88c1-609feb40327d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mufpoa26uu2c", "content": "~Checkpoint~\nAttacks hit airports, healthcare and government while actively exploited flaws enable remote code execution.\n-\nIOCs: CVE-2026-82078, CVE-2026-18885, CVE-2026-75604\n-\n#Ransomware #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-08-31T20:11:31.738877Z"} https://vulnerability.circl.lu/sighting/b3a83add-323c-4e7e-88c1-609feb40327d/export Mon, 31 Aug 2026 20:11:31 +0000 https://vulnerability.circl.lu/sighting/0b1efb63-2b85-4d19-8538-f0be6f0c139b/export {"uuid": "0b1efb63-2b85-4d19-8538-f0be6f0c139b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://www.acn.gov.it/portale/w/next.js-disponibili-poc-per-2-vulnerabilita", "content": "", "creation_timestamp": "2026-08-31T12:45:02.790538Z"} {"uuid": "0b1efb63-2b85-4d19-8538-f0be6f0c139b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://www.acn.gov.it/portale/w/next.js-disponibili-poc-per-2-vulnerabilita", "content": "", "creation_timestamp": "2026-08-31T12:45:02.790538Z"} https://vulnerability.circl.lu/sighting/0b1efb63-2b85-4d19-8538-f0be6f0c139b/export Mon, 31 Aug 2026 12:45:02 +0000 https://vulnerability.circl.lu/sighting/002af1a0-790d-424a-b39d-9bb930ddd3d7/export {"uuid": "002af1a0-790d-424a-b39d-9bb930ddd3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "content": "", "creation_timestamp": "2026-08-31T00:00:40.225506Z"} {"uuid": "002af1a0-790d-424a-b39d-9bb930ddd3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "content": "", "creation_timestamp": "2026-08-31T00:00:40.225506Z"} https://vulnerability.circl.lu/sighting/002af1a0-790d-424a-b39d-9bb930ddd3d7/export Mon, 31 Aug 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/66ce6669-51a2-4f7b-b1f4-a2cd91e8cd1d/export {"uuid": "66ce6669-51a2-4f7b-b1f4-a2cd91e8cd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "content": "", "creation_timestamp": "2026-08-30T00:00:27.726077Z"} {"uuid": "66ce6669-51a2-4f7b-b1f4-a2cd91e8cd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "content": "", "creation_timestamp": "2026-08-30T00:00:27.726077Z"} https://vulnerability.circl.lu/sighting/66ce6669-51a2-4f7b-b1f4-a2cd91e8cd1d/export Sun, 30 Aug 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/543eac21-29b2-420b-bf7e-54178d68c73a/export {"uuid": "543eac21-29b2-420b-bf7e-54178d68c73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "content": "", "creation_timestamp": "2026-08-29T23:00:20.812516Z"} {"uuid": "543eac21-29b2-420b-bf7e-54178d68c73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "content": "", "creation_timestamp": "2026-08-29T23:00:20.812516Z"} https://vulnerability.circl.lu/sighting/543eac21-29b2-420b-bf7e-54178d68c73a/export Sat, 29 Aug 2026 23:00:20 +0000 https://vulnerability.circl.lu/sighting/f0805f68-5553-4f75-9222-99daa079c168/export {"uuid": "f0805f68-5553-4f75-9222-99daa079c168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/117178773943525377", "content": "Next.js patched two critical flaws that let an unauthenticated attacker run code on the server.\nApps on Vercel are already fixed. Self-hosted deployments are not.\nUpdate to 15.5.24 or 16.3.3 now. (CVE-2026-75604)\nhttps://suriq.io/blog/nextjs-critical-flaws-self-hosted-rce\n#CVE #CloudSecurity #infosec #cybersecurity", "creation_timestamp": "2026-08-29T16:16:16.344597Z"} {"uuid": "f0805f68-5553-4f75-9222-99daa079c168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/117178773943525377", "content": "Next.js patched two critical flaws that let an unauthenticated attacker run code on the server.\nApps on Vercel are already fixed. Self-hosted deployments are not.\nUpdate to 15.5.24 or 16.3.3 now. (CVE-2026-75604)\nhttps://suriq.io/blog/nextjs-critical-flaws-self-hosted-rce\n#CVE #CloudSecurity #infosec #cybersecurity", "creation_timestamp": "2026-08-29T16:16:16.344597Z"} https://vulnerability.circl.lu/sighting/f0805f68-5553-4f75-9222-99daa079c168/export Sat, 29 Aug 2026 16:16:16 +0000 https://vulnerability.circl.lu/sighting/c8bf4bb2-9a33-4a1e-8a07-ed08fd0a4477/export {"uuid": "c8bf4bb2-9a33-4a1e-8a07-ed08fd0a4477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mu7ukyfmsb2e", "content": "Next.js patched two critical flaws that let an unauthenticated attacker run code on the server.\n\nApps on Vercel are already fixed. Self-hosted deployments are not.\n\nUpdate to 15.5.24 or 16.3.3 now. (CVE-2026-75604)", "creation_timestamp": "2026-08-29T12:23:13.069191Z"} {"uuid": "c8bf4bb2-9a33-4a1e-8a07-ed08fd0a4477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mu7ukyfmsb2e", "content": "Next.js patched two critical flaws that let an unauthenticated attacker run code on the server.\n\nApps on Vercel are already fixed. Self-hosted deployments are not.\n\nUpdate to 15.5.24 or 16.3.3 now. (CVE-2026-75604)", "creation_timestamp": "2026-08-29T12:23:13.069191Z"} https://vulnerability.circl.lu/sighting/c8bf4bb2-9a33-4a1e-8a07-ed08fd0a4477/export Sat, 29 Aug 2026 12:23:13 +0000