https://vulnerability.circl.lu/sightings/feed 2026-08-06T19:20:27.972065+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ca9a42c5-2e04-4f69-a0d4-dc409d460390/export 2026-08-06T19:20:27.991387+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ca9a42c5-2e04-4f69-a0d4-dc409d460390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1728", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msftk7zf5n2t", "content": "WSO2 API Manager (4.0.0 \u2013 4.6.0) faces CRITICAL CVE-2026-1728 \u2014 improper privilege management lets low-priv tokens hit admin APIs. Restrict access, monitor tokens, check vendor updates. https://radar.offseq.com/threat/cve-2026-1728-cwe-269-improper-privilege-management-in-wso2-wso2-api-manager-fe...", "creation_timestamp": "2026-08-06T10:30:28.849911Z"} 2026-08-06T10:30:28.849911+00:00 https://vulnerability.circl.lu/sighting/7f0e6538-d2f6-4dbc-9a5b-c88d1ae23128/export 2026-08-06T19:20:27.994864+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7f0e6538-d2f6-4dbc-9a5b-c88d1ae23128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1728", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117048097240170332", "content": "CVE-2026-1728 | CRITICAL: WSO2 API Manager (v4.0.0 \u2013 4.6.0) has an improper privilege management flaw. Low-privileged user tokens can access admin REST APIs \u2014 possible admin account takeover. Patch status unknown. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-1728-cwe-269-improper-privilege-management-in-wso2-wso2-api-manager-fea4a27d18a06e70 #OffSeq #WSO2 #Vuln", "creation_timestamp": "2026-08-06T10:30:26.992462Z"} 2026-08-06T10:30:26.992462+00:00 https://vulnerability.circl.lu/sighting/e8476b31-9d91-47c6-86c8-118039c408e4/export 2026-08-06T19:20:27.995200+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e8476b31-9d91-47c6-86c8-118039c408e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1728", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msfopqzrcd2f", "content": "CVE-2026-1728\nLow-privilege user tokens can be used to access sensitive admin features in WSO2 products, potentially allowing an attacker to take control of the entire system. This requires the attacker to already have a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T09:04:04.926629Z"} 2026-08-06T09:04:04.926629+00:00 https://vulnerability.circl.lu/sighting/3510c168-ac54-4850-9313-a75afa411dc6/export 2026-08-06T19:20:27.995463+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3510c168-ac54-4850-9313-a75afa411dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dpb5ohyaumqjd", "content": "CVE-2026-1728 - Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeover\nCVE ID : CVE-2026-1728\n \n Published : Aug. 6, 2026, 7:33 a.m. | 47\u00a0minutes ago\n \n Description : Tokens issued to a low-privileged user are not sufficiently restri...", "creation_timestamp": "2026-08-06T08:28:33.662313Z"} 2026-08-06T08:28:33.662313+00:00