https://vulnerability.circl.lu/sightings/feed 2026-09-18T08:53:45.699979+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8b8d0b62-a6bd-4789-bcb4-b4cf8fb21879/export 2026-09-18T08:53:45.713523+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8b8d0b62-a6bd-4789-bcb4-b4cf8fb21879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67100", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvrqumzmep2f", "content": "CVE-2026-67100 - hcl bigfix service management\nThe HCL BigFix Service Management product can be tricked by a signed\u2011in user to run its own database commands and to view personal information from other companies. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hcl #CVE #infosec", "creation_timestamp": "2026-09-18T08:30:07.573807Z"} 2026-09-18T08:30:07.573807+00:00 https://vulnerability.circl.lu/sighting/3c564492-f85b-4939-9bf7-d245a3b3b4bf/export 2026-09-18T08:53:45.714953+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3c564492-f85b-4939-9bf7-d245a3b3b4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67101", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvrqukkm2x2j", "content": "CVE-2026-67101 - hcl bigfix service management\nThe search feature in HCL BigFix Service Management lets a remote user cause the server to reach internal network resources that are not exposed to the Internet. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hcl #CVE #infosec", "creation_timestamp": "2026-09-18T08:30:05.246731Z"} 2026-09-18T08:30:05.246731+00:00 https://vulnerability.circl.lu/sighting/45560114-8563-468b-b485-f93787e70358/export 2026-09-18T08:53:45.715101+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "45560114-8563-468b-b485-f93787e70358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "Telegram/_BkbNhDHFRzkVF5tbtY3Kddn9VxORT3FDboj5Rtp-tRAsvg", "content": "", "creation_timestamp": "2026-09-18T04:00:07.053564Z"} 2026-09-18T04:00:07.053564+00:00 https://vulnerability.circl.lu/sighting/c02ad5b9-2332-479b-afb1-f84fdf8ac2fc/export 2026-09-18T08:53:45.715270+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c02ad5b9-2332-479b-afb1-f84fdf8ac2fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "seen", "source": "Telegram/Ur2Bn3bfhoLALRYtf_QQeiLvx6zF_jjvHXFzOmQHfaPkXXY", "content": "", "creation_timestamp": "2026-09-18T04:00:06.863724Z"} 2026-09-18T04:00:06.863724+00:00 https://vulnerability.circl.lu/sighting/6870addc-b33a-400a-8678-3174b2478a7a/export 2026-09-18T08:53:45.715360+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6870addc-b33a-400a-8678-3174b2478a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102546", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67401\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 06:59:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-67401 \u2014 cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T00:00:09.174125Z"} 2026-09-18T00:00:09.174125+00:00 https://vulnerability.circl.lu/sighting/25c035cf-0b7b-4876-af0c-801df3fba78c/export 2026-09-18T08:53:45.715449+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "25c035cf-0b7b-4876-af0c-801df3fba78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67593", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvpft54odt2e", "content": "\ud83d\udccc CVE-2026-67593 - A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection au... https://www.cyberhub.blog/cves/CVE-2026-67593", "creation_timestamp": "2026-09-17T10:07:07.817684Z"} 2026-09-17T10:07:07.817684+00:00 https://vulnerability.circl.lu/sighting/aacad4d6-aab0-4fbc-994f-540b8433ed07/export 2026-09-18T08:53:45.715536+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "aacad4d6-aab0-4fbc-994f-540b8433ed07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67401", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102546", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67401\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 06:59:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-67401 \u2014 cPanel/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-17T09:00:03.711293Z"} 2026-09-17T09:00:03.711293+00:00 https://vulnerability.circl.lu/sighting/7eb98d31-dfea-402a-a6f9-86586aeaa5c1/export 2026-09-18T08:53:45.715633+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7eb98d31-dfea-402a-a6f9-86586aeaa5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67636", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvn7g3c5wp2w", "content": "\ud83d\udccc CVE-2026-67636 - Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-67636", "creation_timestamp": "2026-09-16T13:07:06.874217Z"} 2026-09-16T13:07:06.874217+00:00 https://vulnerability.circl.lu/sighting/9e8317c8-4607-4218-a9d9-3ca13605bea6/export 2026-09-18T08:53:45.715713+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9e8317c8-4607-4218-a9d9-3ca13605bea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67368", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvn5qhiczj24", "content": "\ud83d\udccc CVE-2026-67368 - Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-67368", "creation_timestamp": "2026-09-16T12:37:07.973337Z"} 2026-09-16T12:37:07.973337+00:00 https://vulnerability.circl.lu/sighting/bd6cbc49-bae6-4401-b2ed-00b9c3c3c70c/export 2026-09-18T08:53:45.715791+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bd6cbc49-bae6-4401-b2ed-00b9c3c3c70c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67631", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvn42rrpxp2w", "content": "\ud83d\udccc CVE-2026-67631 - Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-67631", "creation_timestamp": "2026-09-16T12:07:08.081990Z"} 2026-09-16T12:07:08.081990+00:00