https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 21 Aug 2026 06:16:45 +0000 https://vulnerability.circl.lu/sighting/21e294ff-9569-4c09-acfc-2e68611bb027/export {"uuid": "21e294ff-9569-4c09-acfc-2e68611bb027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtktm63u3t25", "content": "CVE-2026-76850\nLMDeploy reads messages from other machines and automatically turns them into executable instructions without first checking the source. An attacker who can supply those messages could cause the LMDeploy\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-21T03:40:04.128811Z"} {"uuid": "21e294ff-9569-4c09-acfc-2e68611bb027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtktm63u3t25", "content": "CVE-2026-76850\nLMDeploy reads messages from other machines and automatically turns them into executable instructions without first checking the source. An attacker who can supply those messages could cause the LMDeploy\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-21T03:40:04.128811Z"} https://vulnerability.circl.lu/sighting/21e294ff-9569-4c09-acfc-2e68611bb027/export Fri, 21 Aug 2026 03:40:04 +0000 https://vulnerability.circl.lu/sighting/1ab3a273-ee41-473b-813f-6d115a082716/export {"uuid": "1ab3a273-ee41-473b-813f-6d115a082716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrtfv6f2p", "content": "Daily IT Security Digest \u2014 2026-08-20\nAI/ML infrastructure deployments. (Source: [OFFSEQ Radar](https://radar.offseq.com/threat/cve-2026-76850-internlm-lmdeploy-rce/), [Mastodon](https://infosec.exchange/@offseq/117125246166620239))\n\n## 6. ServiceNow RCE CVE-2026-6875 Exploited to Bypass Sandbox", "creation_timestamp": "2026-08-20T05:03:09.198099Z"} {"uuid": "1ab3a273-ee41-473b-813f-6d115a082716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrtfv6f2p", "content": "Daily IT Security Digest \u2014 2026-08-20\nAI/ML infrastructure deployments. (Source: [OFFSEQ Radar](https://radar.offseq.com/threat/cve-2026-76850-internlm-lmdeploy-rce/), [Mastodon](https://infosec.exchange/@offseq/117125246166620239))\n\n## 6. ServiceNow RCE CVE-2026-6875 Exploited to Bypass Sandbox", "creation_timestamp": "2026-08-20T05:03:09.198099Z"} https://vulnerability.circl.lu/sighting/1ab3a273-ee41-473b-813f-6d115a082716/export Thu, 20 Aug 2026 05:03:09 +0000 https://vulnerability.circl.lu/sighting/5a2ca255-9fd4-4a3a-8659-d1a545650412/export {"uuid": "5a2ca255-9fd4-4a3a-8659-d1a545650412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrsumdt2f", "content": "Daily IT Security Digest \u2014 2026-08-20\nRadar](https://radar.offseq.com/threat/hackers-exploit-geoserver-sqli-zero-day-rce/), [Mastodon](https://infosec.exchange/@offseq/117092687906166890))\n\n## 5. InternetLM lmdeploy RCE via Pickle Deserialization \u2014 CVE-2026-76850\n\nA critical remote code execution", "creation_timestamp": "2026-08-20T05:03:08.555308Z"} {"uuid": "5a2ca255-9fd4-4a3a-8659-d1a545650412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrsumdt2f", "content": "Daily IT Security Digest \u2014 2026-08-20\nRadar](https://radar.offseq.com/threat/hackers-exploit-geoserver-sqli-zero-day-rce/), [Mastodon](https://infosec.exchange/@offseq/117092687906166890))\n\n## 5. InternetLM lmdeploy RCE via Pickle Deserialization \u2014 CVE-2026-76850\n\nA critical remote code execution", "creation_timestamp": "2026-08-20T05:03:08.555308Z"} https://vulnerability.circl.lu/sighting/5a2ca255-9fd4-4a3a-8659-d1a545650412/export Thu, 20 Aug 2026 05:03:08 +0000 https://vulnerability.circl.lu/sighting/82f84e8d-3b1b-44f8-980e-3a30c399ea78/export {"uuid": "82f84e8d-3b1b-44f8-980e-3a30c399ea78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtibhmda3t2c", "content": "CVE-2026-76850 - lmdeploy\nLMDeploy's disaggregated serving feature allows a malicious peer to inject code that can be executed by the server, potentially leading to unauthorized access or data tampering.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lmdeploy #internlm #CVE #infosec", "creation_timestamp": "2026-08-20T03:10:04.096849Z"} {"uuid": "82f84e8d-3b1b-44f8-980e-3a30c399ea78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtibhmda3t2c", "content": "CVE-2026-76850 - lmdeploy\nLMDeploy's disaggregated serving feature allows a malicious peer to inject code that can be executed by the server, potentially leading to unauthorized access or data tampering.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lmdeploy #internlm #CVE #infosec", "creation_timestamp": "2026-08-20T03:10:04.096849Z"} https://vulnerability.circl.lu/sighting/82f84e8d-3b1b-44f8-980e-3a30c399ea78/export Thu, 20 Aug 2026 03:10:04 +0000 https://vulnerability.circl.lu/sighting/c89c16ac-1a62-40b0-b913-7ac7df626cc8/export {"uuid": "c89c16ac-1a62-40b0-b913-7ac7df626cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mti3vinry42x", "content": "InternLM lmdeploy (0.9.2 \u2013 <0.16.0) CRITICAL vuln: Untrusted pickle deserialization allows remote code execution if disaggregated serving is enabled. Enable API keys or disable the feature. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fd...", "creation_timestamp": "2026-08-20T01:30:27.737253Z"} {"uuid": "c89c16ac-1a62-40b0-b913-7ac7df626cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mti3vinry42x", "content": "InternLM lmdeploy (0.9.2 \u2013 <0.16.0) CRITICAL vuln: Untrusted pickle deserialization allows remote code execution if disaggregated serving is enabled. Enable API keys or disable the feature. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fd...", "creation_timestamp": "2026-08-20T01:30:27.737253Z"} https://vulnerability.circl.lu/sighting/c89c16ac-1a62-40b0-b913-7ac7df626cc8/export Thu, 20 Aug 2026 01:30:27 +0000 https://vulnerability.circl.lu/sighting/d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664/export {"uuid": "d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125246166620239", "content": "CVE-2026-76850 (CRITICAL): InternLM lmdeploy <0.16.0 vulnerable to remote code execution via untrusted pickle deserialization on ZeroMQ endpoints. Enable API keys or disable disaggregated serving to mitigate. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fdd1d6177df51 #OffSeq #Infosec #Vuln #CVE202676850", "creation_timestamp": "2026-08-20T01:30:26.298765Z"} {"uuid": "d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125246166620239", "content": "CVE-2026-76850 (CRITICAL): InternLM lmdeploy <0.16.0 vulnerable to remote code execution via untrusted pickle deserialization on ZeroMQ endpoints. Enable API keys or disable disaggregated serving to mitigate. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fdd1d6177df51 #OffSeq #Infosec #Vuln #CVE202676850", "creation_timestamp": "2026-08-20T01:30:26.298765Z"} https://vulnerability.circl.lu/sighting/d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664/export Thu, 20 Aug 2026 01:30:26 +0000 https://vulnerability.circl.lu/sighting/d8e7590e-d01b-48ec-98fb-1378fe759004/export {"uuid": "d8e7590e-d01b-48ec-98fb-1378fe759004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfyxigq25", "content": "\ud83d\udea8 CVE-2026-76850 \u2014 CVSS 9.3 CRITICAL\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmd...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76850\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:12.370811Z"} {"uuid": "d8e7590e-d01b-48ec-98fb-1378fe759004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfyxigq25", "content": "\ud83d\udea8 CVE-2026-76850 \u2014 CVSS 9.3 CRITICAL\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmd...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76850\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:12.370811Z"} https://vulnerability.circl.lu/sighting/d8e7590e-d01b-48ec-98fb-1378fe759004/export Thu, 20 Aug 2026 00:10:12 +0000 https://vulnerability.circl.lu/sighting/cc7a005b-128b-4e1d-8f46-a559be82cdd5/export {"uuid": "cc7a005b-128b-4e1d-8f46-a559be82cdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r", "content": "\ud83d\udd34 CVE-2026-76850 - Critical (9.8)\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv corout...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:35.359390Z"} {"uuid": "cc7a005b-128b-4e1d-8f46-a559be82cdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r", "content": "\ud83d\udd34 CVE-2026-76850 - Critical (9.8)\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv corout...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:35.359390Z"} https://vulnerability.circl.lu/sighting/cc7a005b-128b-4e1d-8f46-a559be82cdd5/export Wed, 19 Aug 2026 23:00:35 +0000 https://vulnerability.circl.lu/sighting/68025dda-9bf0-4f4b-9760-317d1077fc88/export {"uuid": "68025dda-9bf0-4f4b-9760-317d1077fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx", "content": "CVE-2026-76850 - LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector\nCVE ID : CVE-2026-76850\n \n Published : Aug. 19, 2026, 10:17 p.m. | 14\u00a0minutes ago\n \n Description : LMDeploy deserializes disaggregated-serving peer mes...", "creation_timestamp": "2026-08-19T22:56:46.323082Z"} {"uuid": "68025dda-9bf0-4f4b-9760-317d1077fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx", "content": "CVE-2026-76850 - LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector\nCVE ID : CVE-2026-76850\n \n Published : Aug. 19, 2026, 10:17 p.m. | 14\u00a0minutes ago\n \n Description : LMDeploy deserializes disaggregated-serving peer mes...", "creation_timestamp": "2026-08-19T22:56:46.323082Z"} https://vulnerability.circl.lu/sighting/68025dda-9bf0-4f4b-9760-317d1077fc88/export Wed, 19 Aug 2026 22:56:46 +0000