https://vulnerability.circl.lu/sightings/feed 2026-08-11T09:31:56.189186+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/92eebe40-dcee-4c64-884f-ccc1d0042ec5/export 2026-08-11T09:31:56.213083+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "92eebe40-dcee-4c64-884f-ccc1d0042ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-53576.yaml", "content": "", "creation_timestamp": "2026-08-10T00:00:06.913812Z"} 2026-08-10T00:00:06.913812+00:00 https://vulnerability.circl.lu/sighting/a3c0f8b2-07e9-43ed-b1b5-139e615aa3af/export 2026-08-11T09:31:56.214947+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a3c0f8b2-07e9-43ed-b1b5-139e615aa3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-53576.yaml", "content": "", "creation_timestamp": "2026-08-09T00:02:14.177505Z"} 2026-08-09T00:02:14.177505+00:00 https://vulnerability.circl.lu/sighting/e10b6140-779a-4811-823d-6d7e339b1da4/export 2026-08-11T09:31:56.215120+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e10b6140-779a-4811-823d-6d7e339b1da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-53576.yaml", "content": "", "creation_timestamp": "2026-08-08T00:02:13.653026Z"} 2026-08-08T00:02:13.653026+00:00 https://vulnerability.circl.lu/sighting/d6f45db6-2cce-47f3-9bea-39d9318fd9c1/export 2026-08-11T09:31:56.215251+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d6f45db6-2cce-47f3-9bea-39d9318fd9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-53576.yaml", "content": "", "creation_timestamp": "2026-08-07T00:00:03.989460Z"} 2026-08-07T00:00:03.989460+00:00 https://vulnerability.circl.lu/sighting/e2645d64-c471-42a0-aa72-0f22df7022f1/export 2026-08-11T09:31:56.215376+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e2645d64-c471-42a0-aa72-0f22df7022f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-53576.yaml", "content": "", "creation_timestamp": "2026-08-06T09:00:05.962202Z"} 2026-08-06T09:00:05.962202+00:00 https://vulnerability.circl.lu/sighting/ba16dc18-84bc-44fc-b176-04b88fb52b37/export 2026-08-11T09:31:56.215502+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ba16dc18-84bc-44fc-b176-04b88fb52b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96122", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53576\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TamatahYT\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-01 08:29:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKestra Unauthenticated RCE Exploit (CVE-2026-53576)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-02T00:00:54.963972Z"} 2026-08-02T00:00:54.963972+00:00 https://vulnerability.circl.lu/sighting/937ceef0-9684-4178-8e8b-521f94eabf91/export 2026-08-11T09:31:56.215637+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "937ceef0-9684-4178-8e8b-521f94eabf91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "published-proof-of-concept", "source": "Telegram/XmVvH6UtN7-gCe9ILrkWYtW7P9LJK3s3Bp7zoYIg-DtLmu8", "content": "", "creation_timestamp": "2026-08-02T00:00:41.221300Z"} 2026-08-02T00:00:41.221300+00:00 https://vulnerability.circl.lu/sighting/90595e38-b98a-480a-9c03-574dcb029264/export 2026-08-11T09:31:56.215757+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "90595e38-b98a-480a-9c03-574dcb029264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "seen", "source": "Telegram/XmVvH6UtN7-gCe9ILrkWYtW7P9LJK3s3Bp7zoYIg-DtLmu8", "content": "", "creation_timestamp": "2026-08-01T16:00:04.065583Z"} 2026-08-01T16:00:04.065583+00:00 https://vulnerability.circl.lu/sighting/feefbc08-0df0-4463-b12f-d77032829a76/export 2026-08-11T09:31:56.215875+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "feefbc08-0df0-4463-b12f-d77032829a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "seen", "source": "https://t.me/GithubRedTeam/96122", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53576\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TamatahYT\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-01 08:29:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKestra Unauthenticated RCE Exploit (CVE-2026-53576)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-01T11:00:03.543538Z"} 2026-08-01T11:00:03.543538+00:00 https://vulnerability.circl.lu/sighting/b43805ab-0ac8-49e8-9970-1093778902b8/export 2026-08-11T09:31:56.216000+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b43805ab-0ac8-49e8-9970-1093778902b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53573", "type": "seen", "source": "https://gist.github.com/alon710/32cccaf1dfa9c1c40b850f71e29f1c0f", "content": "# CVE-2026-53573: CVE-2026-53573: Open Redirect Bypass in GeoNetwork OAuth2/OIDC and Keycloak Login Filters\n\n> **CVSS Score:** 4.8\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-53573\n\n## Summary\nAn open redirect vulnerability exists in core-geonetwork from versions 3.12.0 until 4.2.16 and 4.4.11 due to unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter. An attacker can construct a protocol-relative URL to bypass local redirection checks and redirect authenticated users to malicious external domains.\n\n## TL;DR\nGeoNetwork post-login and post-logout filters fail to prevent protocol-relative redirects, allowing attackers to bypass validation using double-slash syntax and redirect users to external phishing sites.\n\n## Technical Details\n\n- **CWE ID**: CWE-601\n- **Attack Vector**: Network\n- **CVSS Score**: 4.8\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- GeoNetwork core-geonetwork\n- **core-geonetwork**: >= 3.12.0, <= 3.12.12 (Fixed in: `4.2.16`)\n- **core-geonetwork**: >= 4.0.0-alpha.1, <= 4.0.6 (Fixed in: `4.2.16`)\n- **core-geonetwork**: >= 4.2.0, < 4.2.16 (Fixed in: `4.2.16`)\n- **core-geonetwork**: >= 4.4.0, < 4.4.11 (Fixed in: `4.4.11`)\n\n## Mitigation\n\n- Implement centralized redirect validation using RedirectUtil to prevent double-slash bypasses.\n- Deploy Web Application Firewall (WAF) rules to drop requests with protocol-relative URL parameters.\n- Enforce strict Content Security Policies (CSP) to restrict navigation and form targets.\n\n**Remediation Steps:**\n1. Upgrade GeoNetwork deployment to version 4.2.16, 4.4.11, or later.\n2. Verify that custom authentication filters rely on RedirectUtil for redirection validation.\n3. Inspect configuration XML files to ensure GeonetworkSavedRequestAwareAuthenticationSuccessHandler is configured.\n\n## References\n\n- [Official GitHub Advisory](https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-pjp7-q6wp-97qx)\n- [National Vulnerability Database Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-53573)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-53573)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-53573) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T02:31:13.506220Z"} 2026-08-01T02:31:13.506220+00:00