https://vulnerability.circl.lu/sightings/feed 2026-07-20T16:12:09.850735+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5a365681-f4ca-41ae-ab4e-e08750ad9d4c/export 2026-07-20T16:12:09.870219+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5a365681-f4ca-41ae-ab4e-e08750ad9d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10130", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqy42pyao52x", "content": "\ud83d\udfe0 CVE-2026-10130 - High (8.2)\n\nQueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10130/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T06:00:24.332362Z"} 2026-07-19T06:00:24.332362+00:00 https://vulnerability.circl.lu/sighting/05b2fa82-827a-417b-b16c-172130166552/export 2026-07-20T16:12:09.873692+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "05b2fa82-827a-417b-b16c-172130166552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10130", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mqxu42y5w62f", "content": "QueryWeaver\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u65e2\u77e5\u306e\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u3067\u30b5\u30a4\u30f3\u30a2\u30c3\u30d7\u3057\u3001\u65e2\u5b58\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u30c8\u30fc\u30af\u30f3\u3092\u5165\u624b\u53ef\u80fd\u3002\nCVE-2026-10130 CVSS 8.2 | HIGH", "creation_timestamp": "2026-07-19T03:37:58.929234Z"} 2026-07-19T03:37:58.929234+00:00 https://vulnerability.circl.lu/sighting/29154a0b-8378-4538-890f-696cd62d7060/export 2026-07-20T16:12:09.873800+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "29154a0b-8378-4538-890f-696cd62d7060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10130", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqxgky57ku2x", "content": "CVE-2026-10130 - QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts\nCVE ID : CVE-2026-10130\n \n Published : July 18, 2026, 10:15 p.m. | 20\u00a0minutes ago\n \n Description : QueryWeaver contains an authentication bypass vulnerability that allows u...", "creation_timestamp": "2026-07-18T23:35:46.840845Z"} 2026-07-18T23:35:46.840845+00:00 https://vulnerability.circl.lu/sighting/c9d9ab4e-70d1-46bf-8a3b-852cf9ca288e/export 2026-07-20T16:12:09.873875+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c9d9ab4e-70d1-46bf-8a3b-852cf9ca288e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10130", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqxcw4d2h424", "content": "CVE-2026-10130: FalkorDB QueryWeaver (HIGH severity) lets unauthenticated actors gain session tokens for existing accounts via crafted signup requests. Audit signup/auth flows. https://radar.offseq.com/threat/cve-2026-10130-cwe-863-incorrect-authorization-in-falkordb-queryweaver-b58c3b7d941d0845 ...", "creation_timestamp": "2026-07-18T22:30:26.144533Z"} 2026-07-18T22:30:26.144533+00:00 https://vulnerability.circl.lu/sighting/77a35ef3-5e9a-4846-a461-4ef15ec6182b/export 2026-07-20T16:12:09.873943+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "77a35ef3-5e9a-4846-a461-4ef15ec6182b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10130", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116943344312678030", "content": "CVE-2026-10130 (HIGH, CVSS 8.2) in FalkorDB QueryWeaver: attackers can bypass authentication and obtain session tokens for existing accounts by submitting signup requests with known emails. Review signup flows. https://radar.offseq.com/threat/cve-2026-10130-cwe-863-incorrect-authorization-in-falkordb-queryweaver-b58c3b7d941d0845 #OffSeq #Vulnerability #FalkorDB #Infosec", "creation_timestamp": "2026-07-18T22:30:23.921614Z"} 2026-07-18T22:30:23.921614+00:00