https://vulnerability.circl.lu/sightings/feed 2026-08-26T18:47:47.881025+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f95db6e0-7340-4679-a55f-85470da6f489/export 2026-08-26T18:47:47.897180+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f95db6e0-7340-4679-a55f-85470da6f489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-23T00:00:46.782807Z"} 2026-08-23T00:00:46.782807+00:00 https://vulnerability.circl.lu/sighting/9d0c22ae-c3a2-4ff2-bc20-3f22cd15c37e/export 2026-08-26T18:47:47.898507+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9d0c22ae-c3a2-4ff2-bc20-3f22cd15c37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-23T00:00:45.846805Z"} 2026-08-23T00:00:45.846805+00:00 https://vulnerability.circl.lu/sighting/4b33a1cb-2c30-47ed-9a77-3201285c6824/export 2026-08-26T18:47:47.898622+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4b33a1cb-2c30-47ed-9a77-3201285c6824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-22T00:00:10.837661Z"} 2026-08-22T00:00:10.837661+00:00 https://vulnerability.circl.lu/sighting/ac00791f-6f7e-4668-9c89-4d95d1892b98/export 2026-08-26T18:47:47.898707+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ac00791f-6f7e-4668-9c89-4d95d1892b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-22T00:00:10.500072Z"} 2026-08-22T00:00:10.500072+00:00 https://vulnerability.circl.lu/sighting/6eece5d1-af66-4d35-9225-822ff9ddd443/export 2026-08-26T18:47:47.898779+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6eece5d1-af66-4d35-9225-822ff9ddd443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-21T23:00:07.252178Z"} 2026-08-21T23:00:07.252178+00:00 https://vulnerability.circl.lu/sighting/4341c60c-9f19-4a1e-b927-3bf0799ecc8e/export 2026-08-26T18:47:47.898850+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4341c60c-9f19-4a1e-b927-3bf0799ecc8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-21T23:00:06.847910Z"} 2026-08-21T23:00:06.847910+00:00 https://vulnerability.circl.lu/sighting/59250c60-9572-4316-b830-5c6020fe4fe2/export 2026-08-26T18:47:47.898921+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "59250c60-9572-4316-b830-5c6020fe4fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mthdd6fcux2o", "content": "CVE-2026-18577, an auth bypass in N-able $NABL N-central, is under active exploitation. Attackers breaching the platform IT providers use to remotely manage client networks can pivot into clients via N-central's own Take Control feature. Huntress traced one breach to nine client orgs.", "creation_timestamp": "2026-08-19T18:10:42.671564Z"} 2026-08-19T18:10:42.671564+00:00 https://vulnerability.circl.lu/sighting/4239921d-f461-4d9d-9c8c-8aaf2f5d8d76/export 2026-08-26T18:47:47.898988+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4239921d-f461-4d9d-9c8c-8aaf2f5d8d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/quasagroup.bsky.social/post/3mtdrugluwk2r", "content": "N-central exige un segundo parche: la primera correcci\u00f3n no bast\u00f3\nquasa.io/es/media/n-c...\nFuentes: Quasa Media, El aviso de seguridad de N-able, La ficha de CVE-2026-18577 en Rapid7, La investigaci\u00f3n actualizada de Huntress / Escritor: Slava Vasipenok", "creation_timestamp": "2026-08-18T08:20:17.493111Z"} 2026-08-18T08:20:17.493111+00:00 https://vulnerability.circl.lu/sighting/dea2879e-d364-4427-b35a-989fb049744d/export 2026-08-26T18:47:47.899051+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dea2879e-d364-4427-b35a-989fb049744d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msydby42sr2r", "content": "\ud83d\udce2 CVE-2026-18577 : Bypass d'authentification N-able N-central exploit\u00e9 activement\n\nCet article analyse CVE-2026-18577, une vuln\u00e9rabilit\u00e9 de bypass d'authentification affectant la plateforme de Remote Monitoring and Management (RMM)\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#NAbleNCentral #RMM #Cyberveille", "creation_timestamp": "2026-08-13T19:00:07.359589Z"} 2026-08-13T19:00:07.359589+00:00 https://vulnerability.circl.lu/sighting/abb80674-ffed-4d8b-91c2-9fcbc11fcdcb/export 2026-08-26T18:47:47.899128+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "abb80674-ffed-4d8b-91c2-9fcbc11fcdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-034", "content": "", "creation_timestamp": "2026-08-13T08:45:33.353585Z"} 2026-08-13T08:45:33.353585+00:00