https://vulnerability.circl.lu/sightings/feed 2026-07-02T16:29:10.779573+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a2eeba95-9d72-4cfd-93a2-fa88a1a3349c/export 2026-07-02T16:29:10.797241+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a2eeba95-9d72-4cfd-93a2-fa88a1a3349c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50549", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "content": "Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore.\n\nCato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3", "creation_timestamp": "2026-07-02T01:00:45.767561Z"} 2026-07-02T01:00:45.767561+00:00 https://vulnerability.circl.lu/sighting/905fd6cd-c14b-4297-ad02-01fa9387fee6/export 2026-07-02T16:29:10.802053+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "905fd6cd-c14b-4297-ad02-01fa9387fee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "content": "Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore.\n\nCato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3", "creation_timestamp": "2026-07-02T01:00:45.709253Z"} 2026-07-02T01:00:45.709253+00:00 https://vulnerability.circl.lu/sighting/928e5f6a-8cd3-455b-a5c6-38da0672083d/export 2026-07-02T16:29:10.802291+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "928e5f6a-8cd3-455b-a5c6-38da0672083d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50549", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "content": "Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore.\n\nCato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3", "creation_timestamp": "2026-07-01T19:00:56.294422Z"} 2026-07-01T19:00:56.294422+00:00 https://vulnerability.circl.lu/sighting/92afac53-4c82-403c-82f4-a94fc502f3de/export 2026-07-02T16:29:10.802462+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "92afac53-4c82-403c-82f4-a94fc502f3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "content": "Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor's safety sandbox and run any command on a developer's computer. There is no click to fall for and no approval box to ignore.\n\nCato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549, both rated 9.8 out of 10 (or 9.3", "creation_timestamp": "2026-07-01T19:00:56.233889Z"} 2026-07-01T19:00:56.233889+00:00 https://vulnerability.circl.lu/sighting/c6e64647-47c8-4b78-a989-e5a56e947cd1/export 2026-07-02T16:29:10.802713+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c6e64647-47c8-4b78-a989-e5a56e947cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpm2pf23vm2u", "content": "\ud83e\udd16 CVE-2026-50548/50549 (CVSS 9.8): Prompt injection in Cursor AI editor allows sandbox escape and arbitrary command execution via a crafted prompt. Dubbed \"DuneSlide\" by Cato AI Labs.\nhttps://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.html", "creation_timestamp": "2026-07-01T17:39:00.830596Z"} 2026-07-01T17:39:00.830596+00:00 https://vulnerability.circl.lu/sighting/b62e5d71-e0c3-4a7f-9da1-439dbbfdf9f8/export 2026-07-02T16:29:10.802891+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b62e5d71-e0c3-4a7f-9da1-439dbbfdf9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50549", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpc2fwtsnn2g", "content": "\ud83d\udccc CVE-2026-50549 - Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default. Before a Write, the ... https://www.cyberhub.blog/cves/CVE-2026-50549", "creation_timestamp": "2026-06-27T18:07:06.797902Z"} 2026-06-27T18:07:06.797902+00:00 https://vulnerability.circl.lu/sighting/51389a47-63ce-47a1-8b98-a230fe164865/export 2026-07-02T16:29:10.803047+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "51389a47-63ce-47a1-8b98-a230fe164865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpbyqcckd52g", "content": "\ud83d\udccc CVE-2026-50548 - Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs agent terminal commands in a sandbox by default, and the sandbox gran... https://www.cyberhub.blog/cves/CVE-2026-50548", "creation_timestamp": "2026-06-27T17:37:06.843828Z"} 2026-06-27T17:37:06.843828+00:00 https://vulnerability.circl.lu/sighting/fc4f588b-dafc-413e-b4d2-3680a491175a/export 2026-07-02T16:29:10.803201+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fc4f588b-dafc-413e-b4d2-3680a491175a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50548", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5saapazc2a", "content": "CVE-2026-50548 - Cursor Desktop sandbox escape via agent-controlled working directory\nCVE ID : CVE-2026-50548\n \n Published : June 25, 2026, 6:47 p.m. | 6\u00a0hours, 23\u00a0minutes ago\n \n Description : Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor runs age...", "creation_timestamp": "2026-06-26T01:30:06.844638Z"} 2026-06-26T01:30:06.844638+00:00 https://vulnerability.circl.lu/sighting/beb86783-bd02-4b9e-9adf-c6b01ea38ef1/export 2026-07-02T16:29:10.803376+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "beb86783-bd02-4b9e-9adf-c6b01ea38ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50549", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5s4fr4f42x", "content": "CVE-2026-50549 - Cursor Desktop sandbox escape via symlink and failed path canonicalization\nCVE ID : CVE-2026-50549\n \n Published : June 25, 2026, 6:47 p.m. | 6\u00a0hours, 23\u00a0minutes ago\n \n Description : Cursor is a code editor built for programming with AI. Prior to 3.0, Cursor ru...", "creation_timestamp": "2026-06-26T01:27:58.306903Z"} 2026-06-26T01:27:58.306903+00:00 https://vulnerability.circl.lu/sighting/41665066-62c8-4954-82b5-64925c46d925/export 2026-07-02T16:29:10.803541+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "41665066-62c8-4954-82b5-64925c46d925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50545", "type": "seen", "source": "https://bsky.app/profile/attrition.org/post/3mog7m2jsis2z", "content": "@f5labs.bsky.social re: www.f5.com/labs/article... Are you using \"AI\" to do these? e.g. \"Threat Details and IOCs\" and \"CVE-2026-35273, CVE-2026-46695, CVE-2026-46703, CVE-2026-48558, CVE-2026-50545\" has nothing to do with the section above, and those CVEs are largely not for the software listed.", "creation_timestamp": "2026-06-16T16:25:31.611613Z"} 2026-06-16T16:25:31.611613+00:00