https://vulnerability.circl.lu/sightings/feed 2026-08-05T19:26:51.756421+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e22ec579-a51e-484a-bad2-0d291b31e48d/export 2026-08-05T19:26:51.778844+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e22ec579-a51e-484a-bad2-0d291b31e48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46648", "type": "seen", "source": "https://bsky.app/profile/moltenbit.bsky.social/post/3mrwxffobr22c", "content": "two globaleaks advisories i reported went public today.\n\nthe fun one: db_toggle_escrow ran three adjacent ORM updates, two of them missing the tenant filter. a tenant admin disabling escrow wiped every user\u2019s escrow backup key on every other tenant.\n\nCVE-2026-46648\n\n#infosec #appsec #cybersecurity", "creation_timestamp": "2026-07-31T12:29:25.577276Z"} 2026-07-31T12:29:25.577276+00:00 https://vulnerability.circl.lu/sighting/48b4ab40-1f26-44cf-b4d0-8000cdc236e6/export 2026-08-05T19:26:51.781839+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "48b4ab40-1f26-44cf-b4d0-8000cdc236e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46640", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqu2c2topc2z", "content": "CVE-2026-46640 - php-twig\nApache HTTP Server is affected by a vulnerability that could allow an attacker to execute malicious code on a server. This could lead to unauthorized access and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phptwig #canonical #UbuntuPro2004LTS #CVE #infosec", "creation_timestamp": "2026-07-17T15:18:03.461847Z"} 2026-07-17T15:18:03.461847+00:00 https://vulnerability.circl.lu/sighting/58265abb-829f-4f6a-83f7-4145467a7772/export 2026-08-05T19:26:51.782087+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "58265abb-829f-4f6a-83f7-4145467a7772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46640", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqtklp2efv2s", "content": "\ud83d\udccc CVE-2026-46640 - Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.() and import-alias dynamic attribute syntax can concatenate an attacker-... https://www.cyberhub.blog/cves/CVE-2026-46640", "creation_timestamp": "2026-07-17T10:37:07.414680Z"} 2026-07-17T10:37:07.414680+00:00 https://vulnerability.circl.lu/sighting/90e59378-8f47-491e-b64e-87940ecddd07/export 2026-08-05T19:26:51.782272+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "90e59378-8f47-491e-b64e-87940ecddd07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46640", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqog54mklp2c", "content": "CVE-2026-46640 - php-twig\nThe Twig template language for PHP has a security flaw from version 3.15.0 to 3.26.0. This flaw allows attackers to inject and execute malicious code when a template is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phptwig #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-07-15T09:34:04.378382Z"} 2026-07-15T09:34:04.378382+00:00 https://vulnerability.circl.lu/sighting/dd549503-c403-4166-91d7-4986249a0f6d/export 2026-08-05T19:26:51.782466+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dd549503-c403-4166-91d7-4986249a0f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46640", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnmwm3k5r2t", "content": "CVE-2026-46640 - Twig: Arbitrary PHP code execution via `_self.( )` macro-reference compilation\nCVE ID : CVE-2026-46640\n \n Published : July 14, 2026, 10:16 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.(\n V...", "creation_timestamp": "2026-07-15T02:03:06.034547Z"} 2026-07-15T02:03:06.034547+00:00 https://vulnerability.circl.lu/sighting/d90f8091-225e-47a6-b762-0dcc120f4b0c/export 2026-08-05T19:26:51.782658+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d90f8091-225e-47a6-b762-0dcc120f4b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46645", "type": "published-proof-of-concept", "source": "Telegram/j7dvhapQ8jKj3IljPE_9xOUYg2H-CzPIm6g4IxbeEgHulAw", "content": "", "creation_timestamp": "2026-06-12T07:00:12.000000Z"} 2026-06-12T07:00:12+00:00 https://vulnerability.circl.lu/sighting/0e39aff7-a0b1-4d7a-94dd-56eb5531f6da/export 2026-08-05T19:26:51.782823+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0e39aff7-a0b1-4d7a-94dd-56eb5531f6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnximzj2e423", "content": "CVE-2026-46642 - draw.io: XSS via crafted cell label when opening a .drawio file\nCVE ID : CVE-2026-46642\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.12, a c...", "creation_timestamp": "2026-06-10T19:57:08.138392Z"} 2026-06-10T19:57:08.138392+00:00 https://vulnerability.circl.lu/sighting/55d776f2-ce90-4784-a348-c782cae0ab31/export 2026-08-05T19:26:51.782985+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "55d776f2-ce90-4784-a348-c782cae0ab31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46640", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mnrslyyqd42e", "content": "CVE-2026-46640: Developing payloads for Twig sandbox bypass", "creation_timestamp": "2026-06-08T13:39:32.932781Z"} 2026-06-08T13:39:32.932781+00:00 https://vulnerability.circl.lu/sighting/34cbb53b-137c-419b-a926-2003b8af93de/export 2026-08-05T19:26:51.783149+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "34cbb53b-137c-419b-a926-2003b8af93de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46640", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mnppqq4es32j", "content": "CVE-2026-46640: Developing payloads for Twig sandbox bypass", "creation_timestamp": "2026-06-07T17:43:10.634459Z"} 2026-06-07T17:43:10.634459+00:00 https://vulnerability.circl.lu/sighting/dc07bf47-6444-4994-b111-428475cb20a1/export 2026-08-05T19:26:51.783337+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dc07bf47-6444-4994-b111-428475cb20a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46640", "type": "seen", "source": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3mnoiyfd4lg2r", "content": "CVE-2026-46640: Developing payloads for Twig sandbox bypass", "creation_timestamp": "2026-06-07T06:09:32.777835Z"} 2026-06-07T06:09:32.777835+00:00