https://vulnerability.circl.lu/sightings/feed 2026-10-10T23:51:54.683227+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d8c39fd3-a2f4-4ec4-af4c-fd256ceb7bfd/export 2026-10-10T23:51:54.709082+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d8c39fd3-a2f4-4ec4-af4c-fd256ceb7bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100532", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfrcv3l3l27", "content": "\ud83d\udfe0 CVE-2026-100532 - High (8.1)\n\n@openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through the generic chan...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100532/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T07:31:22.054526Z"} 2026-09-26T07:31:22.054526+00:00 https://vulnerability.circl.lu/sighting/079f6c36-86c8-4502-8a6e-d49ccd25ec47/export 2026-10-10T23:51:54.711231+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "079f6c36-86c8-4502-8a6e-d49ccd25ec47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100535", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfrcgp3qd27", "content": "\ud83d\udfe0 CVE-2026-100535 - High (7.5)\n\nOpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose the originating...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100535/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T07:31:07.078557Z"} 2026-09-26T07:31:07.078557+00:00 https://vulnerability.circl.lu/sighting/e3f9e5d8-9c79-4ce5-9ced-32f28cb91cf2/export 2026-10-10T23:51:54.711338+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e3f9e5d8-9c79-4ce5-9ced-32f28cb91cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100530", "type": "seen", "source": "https://gist.github.com/ichintu/649a1fe76b80e5c473482da09368e350", "content": "On September 26, 2026, two high-severity vulnerabilities were disclosed: **CVE-2026-100530** affects OpenClaw (pre-2026.8.1), allowing approved commands to bypass directory context and execute against unreviewed files (Severity: 8.5), while **CVE-2026-100520** impacts Laranode (pre-1.2.1), enabling authenticated users to exploit path traversal in file uploads to deploy cross-tenant code (Severity: 8.8). Both require immediate patching.", "creation_timestamp": "2026-09-26T04:00:21.000000Z"} 2026-09-26T04:00:21+00:00 https://vulnerability.circl.lu/sighting/69e3efe9-d1ee-40d1-a443-d14cefcf6635/export 2026-10-10T23:51:54.711416+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "69e3efe9-d1ee-40d1-a443-d14cefcf6635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10053", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mtvmnkb6vh2b", "content": "569,000 emails. One Telegram channel. Zero hype.\n\nGolf Canada breach.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-10053-gitlab-rce-via-package-registry-path-traversal-poc/\n\nby Yazoul AI #InfoSec #DataBreach", "creation_timestamp": "2026-08-25T10:34:51.092807Z"} 2026-08-25T10:34:51.092807+00:00 https://vulnerability.circl.lu/sighting/019c5dfe-4dee-4aec-b047-b89f770eb8d6/export 2026-10-10T23:51:54.711493+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "019c5dfe-4dee-4aec-b047-b89f770eb8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "published-proof-of-concept", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "content": "", "creation_timestamp": "2026-08-25T00:00:09.647784Z"} 2026-08-25T00:00:09.647784+00:00 https://vulnerability.circl.lu/sighting/19bb50ca-ba5a-4f10-9bd8-a9a5376ee442/export 2026-10-10T23:51:54.711578+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "19bb50ca-ba5a-4f10-9bd8-a9a5376ee442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "published-proof-of-concept", "source": "Telegram/WmTYVBgmVan3mzvjl6-Xk0siaOAEpVUjrVkE0CKXWUqRTfo", "content": "", "creation_timestamp": "2026-08-25T00:00:07.985341Z"} 2026-08-25T00:00:07.985341+00:00 https://vulnerability.circl.lu/sighting/468b4aaf-6dab-438b-9268-c49c9c55b6f7/export 2026-10-10T23:51:54.711648+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "468b4aaf-6dab-438b-9268-c49c9c55b6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "Telegram/WmTYVBgmVan3mzvjl6-Xk0siaOAEpVUjrVkE0CKXWUqRTfo", "content": "", "creation_timestamp": "2026-08-24T21:00:05.894614Z"} 2026-08-24T21:00:05.894614+00:00 https://vulnerability.circl.lu/sighting/03c94015-a29f-4ff2-9172-1a32f6c3b0fb/export 2026-10-10T23:51:54.711715+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "03c94015-a29f-4ff2-9172-1a32f6c3b0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "content": "", "creation_timestamp": "2026-08-24T21:00:04.448910Z"} 2026-08-24T21:00:04.448910+00:00 https://vulnerability.circl.lu/sighting/057906ca-f99d-4503-b54a-2e8383412b0f/export 2026-10-10T23:51:54.711783+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "057906ca-f99d-4503-b54a-2e8383412b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtr5r2fkma23", "content": "A logged-in GitLab user can abuse the package registry to write files across a self-managed server (CVE-2026-10053, CVSS 8.5).\n\nA public test lab just proved the flaw is real.\n\nFix: update self-managed GitLab to 19.2.2, 19.1.4, or 19.0.6.", "creation_timestamp": "2026-08-23T15:57:44.411268Z"} 2026-08-23T15:57:44.411268+00:00 https://vulnerability.circl.lu/sighting/8d164673-b7aa-4c7d-9ab0-c6c5f0799e41/export 2026-10-10T23:51:54.711856+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8d164673-b7aa-4c7d-9ab0-c6c5f0799e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtqtjmvt5u2h", "content": "GitLab CE/EE\uff08\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\uff09\u3067\u3001\u30d1\u30c3\u30b1\u30fc\u30b8\u30ec\u30b8\u30b9\u30c8\u30ea\u306e\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u304c\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-10053 CVSS 8.5 | HIGH", "creation_timestamp": "2026-08-23T12:54:37.202707Z"} 2026-08-23T12:54:37.202707+00:00