https://vulnerability.circl.lu/sightings/feed 2026-07-17T09:22:34.240058+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d8b9710f-d727-434b-af61-d3b96d8330d3/export 2026-07-17T09:22:34.261852+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d8b9710f-d727-434b-af61-d3b96d8330d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55234", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116930726541479465", "content": "CVE-2026-55234 - Privilege Escalation in Wekan. Authenticated users can move cards, lists, or swimlanes to private boards they don't have access to. CVSS 8.5. No patch available. Restrict access immediately. #CVE #Wekan #infosec\nhttps://www.valtersit.com/cve/CVE-2026-55234/", "creation_timestamp": "2026-07-16T17:01:32.184633Z"} 2026-07-16T17:01:32.184633+00:00 https://vulnerability.circl.lu/sighting/8749c44a-77da-4e3b-b6dc-94cd6c30f0fa/export 2026-07-17T09:22:34.266341+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8749c44a-77da-4e3b-b6dc-94cd6c30f0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55234", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqrplp6a6i2n", "content": "CVE-2026-55234 - Privilege Escalation in Wekan. Authenticated users can move cards, lists, or swimlanes to private boards they don't have access to. CVSS 8.5. No patch available. Restrict access immediately. #CVE #Wekan #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55234/", "creation_timestamp": "2026-07-16T17:01:16.009041Z"} 2026-07-16T17:01:16.009041+00:00 https://vulnerability.circl.lu/sighting/6c5bcd8e-cb0b-4dd3-8e13-9f324994bd4a/export 2026-07-17T09:22:34.266718+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6c5bcd8e-cb0b-4dd3-8e13-9f324994bd4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55234", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpx7zhi4i2c", "content": "CVE-2026-55234 - Wekan: Broken access control: any authenticated user can move their Cards/Lists/Swimlanes into a private board they are not a member of (cross-board write via collection allow rule)\nCVE ID : CVE-2026-55234\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ...", "creation_timestamp": "2026-07-16T00:12:35.005653Z"} 2026-07-16T00:12:35.005653+00:00 https://vulnerability.circl.lu/sighting/74660194-0350-4fc1-969a-df8332f22d8d/export 2026-07-17T09:22:34.266998+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "74660194-0350-4fc1-969a-df8332f22d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55234", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpt7uvsqc26", "content": "\ud83d\udfe0 CVE-2026-55234 - High (8.5)\n\nWekan is open source kanban built with Meteor. Prior to 9.37, Wekan DDP update allow rules in ser...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55234/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T23:00:55.756458Z"} 2026-07-15T23:00:55.756458+00:00