https://vulnerability.circl.lu/sightings/feed 2026-07-20T23:44:36.329684+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6597d8d5-e384-4406-b1d8-6d58d2f81d2a/export 2026-07-20T23:44:36.352893+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6597d8d5-e384-4406-b1d8-6d58d2f81d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42143", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwje4owm2u", "content": "\ud83d\udfe0 CVE-2026-42143 - High (8.8)\n\nCoolify is an open-source and self-hostable tool for managing servers, applications, and database...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42143/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-07T06:01:21.327901Z"} 2026-07-07T06:01:21.327901+00:00 https://vulnerability.circl.lu/sighting/7553301f-5b9d-42e6-95fe-79695968b76b/export 2026-07-20T23:44:36.354152+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7553301f-5b9d-42e6-95fe-79695968b76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzsd4btb62y", "content": "CVE-2026-42145 - Coolify: File Upload Without Type or Size Validation in Database Backup Restore\nCVE ID : CVE-2026-42145\n \n Published : July 7, 2026, 3:03 a.m. | 44\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, applications...", "creation_timestamp": "2026-07-07T04:46:15.489689Z"} 2026-07-07T04:46:15.489689+00:00 https://vulnerability.circl.lu/sighting/95923044-423a-4ea6-9caf-84f626b21fa9/export 2026-07-20T23:44:36.354250+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "95923044-423a-4ea6-9caf-84f626b21fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzq464xi72a", "content": "CVE-2026-42143 - Coolify: OS Command Injection via Persistent Volume Names - Root RCE on Managed Servers\nCVE ID : CVE-2026-42143\n \n Published : July 7, 2026, 3:15 a.m. | 33\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, appl...", "creation_timestamp": "2026-07-07T04:06:35.756483Z"} 2026-07-07T04:06:35.756483+00:00 https://vulnerability.circl.lu/sighting/d0545d65-059e-470f-a086-0d2c1ef011b4/export 2026-07-20T23:44:36.354330+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d0545d65-059e-470f-a086-0d2c1ef011b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42147", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpqm2sbu2y", "content": "CVE-2026-42147 - Coolify: SSRF via S3 Storage Endpoint in testConnection()\nCVE ID : CVE-2026-42147\n \n Published : July 7, 2026, 3:13 a.m. | 34\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior...", "creation_timestamp": "2026-07-07T04:00:07.003636Z"} 2026-07-07T04:00:07.003636+00:00 https://vulnerability.circl.lu/sighting/3939d0e4-b8e2-47c9-a497-866de72c9711/export 2026-07-20T23:44:36.354406+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3939d0e4-b8e2-47c9-a497-866de72c9711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzdrvg3vk24", "content": "CVE-2026-42148 - Coolify: Command Injection via Unescaped Version String in Docker Build\nCVE ID : CVE-2026-42148\n \n Published : July 6, 2026, 10:16 p.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, application...", "creation_timestamp": "2026-07-07T00:26:11.596320Z"} 2026-07-07T00:26:11.596320+00:00 https://vulnerability.circl.lu/sighting/c496abe0-8fea-4fb0-967a-3cc7fa7dc1c5/export 2026-07-20T23:44:36.354478+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c496abe0-8fea-4fb0-967a-3cc7fa7dc1c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cpesil22k", "content": "CVE-2026-42140 - Server-Side Request Forgery (SSRF) in PlantUML Macro via 'server' parameter\nCVE ID : CVE-2026-42140\n \n Published : May 4, 2026, 5:37 p.m. | 43\u00a0minutes ago\n \n Description : PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior ...", "creation_timestamp": "2026-05-04T18:33:28.860086Z"} 2026-05-04T18:33:28.860086+00:00 https://vulnerability.circl.lu/sighting/76217da7-793e-4267-a289-dd2adf5c69b3/export 2026-07-20T23:44:36.354559+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "76217da7-793e-4267-a289-dd2adf5c69b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42141", "type": "seen", "source": "Telegram/yjUnQ6hKYXBxzaCr4Cr42UE0MHqi1VzU3UchLcz_NxtZwAY", "content": "", "creation_timestamp": "2026-04-30T09:00:04.000000Z"} 2026-04-30T09:00:04+00:00 https://vulnerability.circl.lu/sighting/99e7ee08-0889-46ac-aaca-978f0f3f8cef/export 2026-07-20T23:44:36.354628+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "99e7ee08-0889-46ac-aaca-978f0f3f8cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42141", "type": "seen", "source": "https://t.me/GithubRedTeam/82154", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42141-xibo-ssrf\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a H4zaz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-30 06:53:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSSRF vulnerability in Xibo CMS (CVE-2026-42141)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-30T07:02:37.000000Z"} 2026-04-30T07:02:37+00:00 https://vulnerability.circl.lu/sighting/8f90f8b6-3110-49fe-8995-3bbf1e0cefbf/export 2026-07-20T23:44:36.354708+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8f90f8b6-3110-49fe-8995-3bbf1e0cefbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42141", "type": "seen", "source": "Telegram/P5bUU6aFVi3_TImC6WDx24HeHf8RVUggO7fw0-2Q4WCtYm0", "content": "", "creation_timestamp": "2026-04-30T07:00:11.000000Z"} 2026-04-30T07:00:11+00:00 https://vulnerability.circl.lu/sighting/4081fd64-3944-4401-be35-269d6642c811/export 2026-07-20T23:44:36.354775+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4081fd64-3944-4401-be35-269d6642c811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4214", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhmfzsqvxo23", "content": "", "creation_timestamp": "2026-03-22T01:40:09.418085Z"} 2026-03-22T01:40:09.418085+00:00