https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 13 Sep 2026 21:39:32 +0000 https://vulnerability.circl.lu/sighting/1fe8db31-5a63-4930-b88d-fdb142833455/export {"uuid": "1fe8db31-5a63-4930-b88d-fdb142833455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86258", "type": "seen", "source": "https://gist.github.com/ichintu/fe47c9308dfcae2743b09006cdd52579", "content": "This daily cyber threat intelligence digest highlights three key updates: a real-world case where granting an AI agent API key access resulted in a $100 billing loss, underscoring emerging AI security and financial risks; **CVE-2026-86258**, a HIGH-severity path traversal flaw in nbviewer (\u22641.0.1) that allows unauthorized access to files outside its configured root directory; and **CVE-2026-18480**, a HIGH-severity account takeover vulnerability in the SureCart WordPress plugin (<4.6.3) that enables low-privileged users to hijack admin accounts, manipulate data, and expose sensitive information.", "creation_timestamp": "2026-09-06T16:01:40.931767Z"} {"uuid": "1fe8db31-5a63-4930-b88d-fdb142833455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86258", "type": "seen", "source": "https://gist.github.com/ichintu/fe47c9308dfcae2743b09006cdd52579", "content": "This daily cyber threat intelligence digest highlights three key updates: a real-world case where granting an AI agent API key access resulted in a $100 billing loss, underscoring emerging AI security and financial risks; **CVE-2026-86258**, a HIGH-severity path traversal flaw in nbviewer (\u22641.0.1) that allows unauthorized access to files outside its configured root directory; and **CVE-2026-18480**, a HIGH-severity account takeover vulnerability in the SureCart WordPress plugin (<4.6.3) that enables low-privileged users to hijack admin accounts, manipulate data, and expose sensitive information.", "creation_timestamp": "2026-09-06T16:01:40.931767Z"} https://vulnerability.circl.lu/sighting/1fe8db31-5a63-4930-b88d-fdb142833455/export Sun, 06 Sep 2026 16:01:40 +0000 https://vulnerability.circl.lu/sighting/087047e8-6ce4-492d-b74a-dbac90f97feb/export {"uuid": "087047e8-6ce4-492d-b74a-dbac90f97feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muu6tdc6pg2f", "content": "CVE-2026-86259 - openmaic\nOlder versions of OpenMAIC do not properly check URLs when they are run in test or development mode. This lets anyone on the network send specially crafted requests that reach the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openmaic #thumaic #CVE #infosec", "creation_timestamp": "2026-09-06T14:20:04.678897Z"} {"uuid": "087047e8-6ce4-492d-b74a-dbac90f97feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muu6tdc6pg2f", "content": "CVE-2026-86259 - openmaic\nOlder versions of OpenMAIC do not properly check URLs when they are run in test or development mode. This lets anyone on the network send specially crafted requests that reach the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openmaic #thumaic #CVE #infosec", "creation_timestamp": "2026-09-06T14:20:04.678897Z"} https://vulnerability.circl.lu/sighting/087047e8-6ce4-492d-b74a-dbac90f97feb/export Sun, 06 Sep 2026 14:20:04 +0000 https://vulnerability.circl.lu/sighting/5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d/export {"uuid": "5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muu5qfieq42p", "content": "\ud83d\udfe0 CVE-2026-86259 - High (7.5)\n\nOpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86259/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T14:00:48.525293Z"} {"uuid": "5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muu5qfieq42p", "content": "\ud83d\udfe0 CVE-2026-86259 - High (7.5)\n\nOpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86259/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T14:00:48.525293Z"} https://vulnerability.circl.lu/sighting/5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d/export Sun, 06 Sep 2026 14:00:48 +0000 https://vulnerability.circl.lu/sighting/084aad2a-8d84-48d5-807b-d68aeb674332/export {"uuid": "084aad2a-8d84-48d5-807b-d68aeb674332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86258", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aslqkh7y6oslj", "content": "CVE-2026-86258 - nbviewer through 1.0.1 Path Traversal via LocalFileHandler\nCVE ID : CVE-2026-86258\n \n Published : Sept. 6, 2026, 12:37 p.m. | 51\u00a0minutes ago\n \n Description : nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can_show() that use...", "creation_timestamp": "2026-09-06T13:41:28.393853Z"} {"uuid": "084aad2a-8d84-48d5-807b-d68aeb674332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86258", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aslqkh7y6oslj", "content": "CVE-2026-86258 - nbviewer through 1.0.1 Path Traversal via LocalFileHandler\nCVE ID : CVE-2026-86258\n \n Published : Sept. 6, 2026, 12:37 p.m. | 51\u00a0minutes ago\n \n Description : nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can_show() that use...", "creation_timestamp": "2026-09-06T13:41:28.393853Z"} https://vulnerability.circl.lu/sighting/084aad2a-8d84-48d5-807b-d68aeb674332/export Sun, 06 Sep 2026 13:41:28 +0000 https://vulnerability.circl.lu/sighting/5485f081-4ae9-4bed-a15a-8ccffe61759f/export {"uuid": "5485f081-4ae9-4bed-a15a-8ccffe61759f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86257", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dn3x4lc6hk6rx", "content": "CVE-2026-86257 - wger before 2.6 CSV Formula Injection via member export\nCVE ID : CVE-2026-86257\n \n Published : Sept. 6, 2026, 12:17 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export en...", "creation_timestamp": "2026-09-06T13:35:28.929767Z"} {"uuid": "5485f081-4ae9-4bed-a15a-8ccffe61759f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86257", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dn3x4lc6hk6rx", "content": "CVE-2026-86257 - wger before 2.6 CSV Formula Injection via member export\nCVE ID : CVE-2026-86257\n \n Published : Sept. 6, 2026, 12:17 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export en...", "creation_timestamp": "2026-09-06T13:35:28.929767Z"} https://vulnerability.circl.lu/sighting/5485f081-4ae9-4bed-a15a-8ccffe61759f/export Sun, 06 Sep 2026 13:35:28 +0000 https://vulnerability.circl.lu/sighting/49370c04-c06b-4d8a-8fb9-c29a2263e6b6/export {"uuid": "49370c04-c06b-4d8a-8fb9-c29a2263e6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86250", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muu2ejj6ip2m", "content": "\ud83d\udfe0 CVE-2026-86250 - High (7.5)\n\nh3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cooki...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86250/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T13:00:13.606787Z"} {"uuid": "49370c04-c06b-4d8a-8fb9-c29a2263e6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86250", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muu2ejj6ip2m", "content": "\ud83d\udfe0 CVE-2026-86250 - High (7.5)\n\nh3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cooki...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86250/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T13:00:13.606787Z"} https://vulnerability.circl.lu/sighting/49370c04-c06b-4d8a-8fb9-c29a2263e6b6/export Sun, 06 Sep 2026 13:00:13 +0000