https://vulnerability.circl.lu/sightings/feed 2026-07-17T11:53:54.032474+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d8b9710f-d727-434b-af61-d3b96d8330d3/export 2026-07-17T11:53:54.055391+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d8b9710f-d727-434b-af61-d3b96d8330d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55234", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116930726541479465", "content": "CVE-2026-55234 - Privilege Escalation in Wekan. Authenticated users can move cards, lists, or swimlanes to private boards they don't have access to. CVSS 8.5. No patch available. Restrict access immediately. #CVE #Wekan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-55234/", "creation_timestamp": "2026-07-16T17:01:32.184633Z"} 2026-07-16T17:01:32.184633+00:00 https://vulnerability.circl.lu/sighting/8749c44a-77da-4e3b-b6dc-94cd6c30f0fa/export 2026-07-17T11:53:54.058655+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8749c44a-77da-4e3b-b6dc-94cd6c30f0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55234", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqrplp6a6i2n", "content": "CVE-2026-55234 - Privilege Escalation in Wekan. Authenticated users can move cards, lists, or swimlanes to private boards they don't have access to. CVSS 8.5. No patch available. Restrict access immediately. #CVE #Wekan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55234/", "creation_timestamp": "2026-07-16T17:01:16.009041Z"} 2026-07-16T17:01:16.009041+00:00 https://vulnerability.circl.lu/sighting/6c5bcd8e-cb0b-4dd3-8e13-9f324994bd4a/export 2026-07-17T11:53:54.058797+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6c5bcd8e-cb0b-4dd3-8e13-9f324994bd4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55234", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpx7zhi4i2c", "content": "CVE-2026-55234 - Wekan: Broken access control: any authenticated user can move their Cards/Lists/Swimlanes into a private board they are not a member of (cross-board write via collection allow rule)\nCVE ID : CVE-2026-55234\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ...", "creation_timestamp": "2026-07-16T00:12:35.005653Z"} 2026-07-16T00:12:35.005653+00:00 https://vulnerability.circl.lu/sighting/74660194-0350-4fc1-969a-df8332f22d8d/export 2026-07-17T11:53:54.058911+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "74660194-0350-4fc1-969a-df8332f22d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55234", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpt7uvsqc26", "content": "\ud83d\udfe0 CVE-2026-55234 - High (8.5)\n\nWekan is open source kanban built with Meteor. Prior to 9.37, Wekan DDP update allow rules in ser...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55234/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T23:00:55.756458Z"} 2026-07-15T23:00:55.756458+00:00 https://vulnerability.circl.lu/sighting/f3207d13-2e3a-4ead-9cb6-68c65b796fb5/export 2026-07-17T11:53:54.059024+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f3207d13-2e3a-4ead-9cb6-68c65b796fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55233", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqldu6forr2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55233 \u0432 OpenResty: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/33D2997F-9C84-4146-A9FE-024940E49392", "creation_timestamp": "2026-07-14T04:15:20.132037Z"} 2026-07-14T04:15:20.132037+00:00 https://vulnerability.circl.lu/sighting/d3a50af2-4e2f-4431-9b9e-ac8302b94f8c/export 2026-07-17T11:53:54.059128+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d3a50af2-4e2f-4431-9b9e-ac8302b94f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55233", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqepthopzy2l", "content": "\ud83d\udfe0 CVE-2026-55233 - High (7.5)\n\nOpenResty is a high performance web platform. From 1.29.2.1 to before 1.29.2.5, an out-of-bounds ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55233/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T13:01:00.861948Z"} 2026-07-11T13:01:00.861948+00:00 https://vulnerability.circl.lu/sighting/26f44e31-c109-409d-a115-9ef96e9d0082/export 2026-07-17T11:53:54.059230+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "26f44e31-c109-409d-a115-9ef96e9d0082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55233", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqemoht72p2e", "content": "CVE-2026-55233 - DoS via OOB write in OpenResty PROXY protocol v2. CVSS 7.5. Workers crash when sending PROXY headers. Update to 1.29.2.5 immediately. #CVE #OpenResty #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55233/", "creation_timestamp": "2026-07-11T12:04:31.934043Z"} 2026-07-11T12:04:31.934043+00:00 https://vulnerability.circl.lu/sighting/03c4136e-5a9a-4494-9eda-b9b941ba044e/export 2026-07-17T11:53:54.059333+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "03c4136e-5a9a-4494-9eda-b9b941ba044e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5523", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqatqpmx5k27", "content": "Attackers can change any user account \u2014 including admins \u2014 without permission. Divi Form Builder CVE-2026-5523 (8.8/10). Versions up to 5.1.8 affected. No patch available yet. Disable the plugin now. Scan your WordPress site: pulse-wp.com\n#WordPress #CVE #CyberSecurity", "creation_timestamp": "2026-07-10T00:00:23.725057Z"} 2026-07-10T00:00:23.725057+00:00 https://vulnerability.circl.lu/sighting/dffa9842-3097-4a0e-81e1-4fe8b9a460ed/export 2026-07-17T11:53:54.059431+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dffa9842-3097-4a0e-81e1-4fe8b9a460ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5523", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7kvszdyh27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-5523 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Divi Form Builder: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress\n\n\n\nhttps://kripta.biz/posts/1B62AE62-1EEF-49DB-BE10-6A4A60088137", "creation_timestamp": "2026-07-09T11:49:32.100133Z"} 2026-07-09T11:49:32.100133+00:00 https://vulnerability.circl.lu/sighting/ae9c052c-3011-4eaa-b311-64cde263c9bc/export 2026-07-17T11:53:54.059520+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ae9c052c-3011-4eaa-b311-64cde263c9bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5523", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq76hzxyyb26", "content": "CVE-2026-5523 - Divi Form Builder\nCVE ID : CVE-2026-5523\n \n Published : July 9, 2026, 6:16 a.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to t...", "creation_timestamp": "2026-07-09T08:07:06.076158Z"} 2026-07-09T08:07:06.076158+00:00