https://vulnerability.circl.lu/sightings/feed 2026-10-06T02:13:36.534104+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/65f1a0b2-6174-4789-9c4b-26c2eba2cff8/export 2026-10-06T02:13:36.562272+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "65f1a0b2-6174-4789-9c4b-26c2eba2cff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105223", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tfm7su62l", "content": "\ud83d\udea8 CVE-2026-105223 \u2014 CVSS 9.1 CRITICAL\n\nmaclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105223\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:13.754098Z"} 2026-10-05T02:07:13.754098+00:00 https://vulnerability.circl.lu/sighting/09632ca1-3f28-4c97-9a0e-6afd769fd128/export 2026-10-06T02:13:36.564675+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "09632ca1-3f28-4c97-9a0e-6afd769fd128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105223", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx3rdsgai32w", "content": "maclof kubernetes-client v0.17.0 \u2013 0.31.x hit by CRITICAL vuln: TLS cert checks bypassed, enabling API server impersonation & token theft. Avoid affected versions or enforce proper certs until patch lands. https://radar.offseq.com/threat/cve-2026-105223-improper-certificate-validation-in-maclof-k...", "creation_timestamp": "2026-10-05T01:30:26.596652Z"} 2026-10-05T01:30:26.596652+00:00 https://vulnerability.circl.lu/sighting/3df78593-280e-4957-8f66-e38c8ed9e3e6/export 2026-10-06T02:13:36.564808+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3df78593-280e-4957-8f66-e38c8ed9e3e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105223", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117385712345555544", "content": "CVE-2026-105223 (CRITICAL, CVSS 9.1): maclof kubernetes-client v0.17.0 \u2013 0.31.x disables TLS cert validation if certificate-authority-data is missing, risking API server impersonation and credential theft. Check configs & vendor advisories. https://radar.offseq.com/threat/cve-2026-105223-improper-certificate-validation-in-maclof-kubernetes-client-8fb4f3aba9271610 #OffSeq #kubernetes #security", "creation_timestamp": "2026-10-05T01:30:24.357081Z"} 2026-10-05T01:30:24.357081+00:00