https://vulnerability.circl.lu/sightings/feed 2026-09-12T14:36:41.128956+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7def8103-563e-4577-aad2-d3a1c74f726b/export 2026-09-12T14:36:41.156746+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7def8103-563e-4577-aad2-d3a1c74f726b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96531", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52824\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AzureADTrent\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 03:43:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and PoC of CVE-2026-52824: default APP_SECRET in the Kimai Docker image enabling unauthenticated login link forgery. Affects <= 2.57.0, fixed in 2.58.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:53.764519Z"} 2026-08-05T00:00:53.764519+00:00 https://vulnerability.circl.lu/sighting/5a7a6c27-90d5-458e-bfdb-d18a21cb39d6/export 2026-09-12T14:36:41.158633+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5a7a6c27-90d5-458e-bfdb-d18a21cb39d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "Telegram/r4YAq9sqiCZdls8-ldA7XAIZMKynCRrGuzy5h6EQSIOA624", "content": "", "creation_timestamp": "2026-08-05T00:00:47.592164Z"} 2026-08-05T00:00:47.592164+00:00 https://vulnerability.circl.lu/sighting/a215d76a-5432-495a-bf4b-8911993d0001/export 2026-09-12T14:36:41.158724+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a215d76a-5432-495a-bf4b-8911993d0001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "Telegram/r4YAq9sqiCZdls8-ldA7XAIZMKynCRrGuzy5h6EQSIOA624", "content": "", "creation_timestamp": "2026-08-04T10:00:05.457142Z"} 2026-08-04T10:00:05.457142+00:00 https://vulnerability.circl.lu/sighting/9c951923-2dc4-4d9b-9969-eb98e97e6713/export 2026-09-12T14:36:41.158790+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9c951923-2dc4-4d9b-9969-eb98e97e6713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://t.me/GithubRedTeam/96531", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52824\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AzureADTrent\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 03:43:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and PoC of CVE-2026-52824: default APP_SECRET in the Kimai Docker image enabling unauthenticated login link forgery. Affects <= 2.57.0, fixed in 2.58.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T05:00:03.775438Z"} 2026-08-04T05:00:03.775438+00:00 https://vulnerability.circl.lu/sighting/b5883f00-5b65-415c-88cc-e614353f3b20/export 2026-09-12T14:36:41.158859+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b5883f00-5b65-415c-88cc-e614353f3b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95796", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kimai-CVE-2026-49865-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cyeezy08\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 05:51:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) \u2014 Kimai time-tracking default APP_SECRET authentication bypass affecting versions \u2264 2.57.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T00:00:38.582363Z"} 2026-07-31T00:00:38.582363+00:00 https://vulnerability.circl.lu/sighting/3fde1198-a246-4434-9d4c-8e09ac2eb1a1/export 2026-09-12T14:36:41.158927+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3fde1198-a246-4434-9d4c-8e09ac2eb1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "Telegram/47AGWfAWFIwZKzQcl_sisfXazYjpo74QYaHVlY-riLjwoTE", "content": "", "creation_timestamp": "2026-07-31T00:00:29.570854Z"} 2026-07-31T00:00:29.570854+00:00 https://vulnerability.circl.lu/sighting/7887d726-3197-452e-a861-c635789d122d/export 2026-09-12T14:36:41.158990+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7887d726-3197-452e-a861-c635789d122d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "Telegram/47AGWfAWFIwZKzQcl_sisfXazYjpo74QYaHVlY-riLjwoTE", "content": "", "creation_timestamp": "2026-07-30T14:00:04.763878Z"} 2026-07-30T14:00:04.763878+00:00 https://vulnerability.circl.lu/sighting/f5d3f8e0-b2ad-4c31-967a-1f8efed3f278/export 2026-09-12T14:36:41.159053+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f5d3f8e0-b2ad-4c31-967a-1f8efed3f278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://t.me/GithubRedTeam/95796", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kimai-CVE-2026-49865-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cyeezy08\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 05:51:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) \u2014 Kimai time-tracking default APP_SECRET authentication bypass affecting versions \u2264 2.57.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T07:00:03.930339Z"} 2026-07-30T07:00:03.930339+00:00 https://vulnerability.circl.lu/sighting/a6782479-7e1e-4995-9d7a-69c7baaafa39/export 2026-09-12T14:36:41.159118+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a6782479-7e1e-4995-9d7a-69c7baaafa39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-24T00:00:08.906257Z"} 2026-07-24T00:00:08.906257+00:00 https://vulnerability.circl.lu/sighting/af43105a-5e03-43bb-8bd6-998ca3f0bf7c/export 2026-09-12T14:36:41.159179+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "af43105a-5e03-43bb-8bd6-998ca3f0bf7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-23T00:00:03.854592Z"} 2026-07-23T00:00:03.854592+00:00