https://vulnerability.circl.lu/sightings/feed 2026-08-05T18:05:19.609470+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3d9e6a3e-0b90-488a-abd6-c08214a3a567/export 2026-08-05T18:05:19.631942+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3d9e6a3e-0b90-488a-abd6-c08214a3a567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msdtwlu54i23", "content": "CVE-2026-58073 \u00b7 trending #5\n\nCurrently trending CVE - Hype Score: 11 - A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-58073", "creation_timestamp": "2026-08-05T15:32:15.759528Z"} 2026-08-05T15:32:15.759528+00:00 https://vulnerability.circl.lu/sighting/f47bcd0c-2415-4b90-a714-489048296dd6/export 2026-08-05T18:05:19.634236+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f47bcd0c-2415-4b90-a714-489048296dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching: https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-05T15:00:06.206363Z"} 2026-08-05T15:00:06.206363+00:00 https://vulnerability.circl.lu/sighting/225d8e5b-db6c-49a0-8c95-f8a7d2b33dc6/export 2026-08-05T18:05:19.634510+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "225d8e5b-db6c-49a0-8c95-f8a7d2b33dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p", "content": "\ud83d\udd17 CVE : CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, CVE-2026-64633, CVE-2026-64634", "creation_timestamp": "2026-08-05T13:05:27.662852Z"} 2026-08-05T13:05:27.662852+00:00 https://vulnerability.circl.lu/sighting/c84c5164-d104-4369-b172-c725875377c3/export 2026-08-05T18:05:19.634721+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "c84c5164-d104-4369-b172-c725875377c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1", "content": "", "creation_timestamp": "2026-08-05T12:45:06.550526Z"} 2026-08-05T12:45:06.550526+00:00 https://vulnerability.circl.lu/sighting/d5cbc9d7-3bc2-4e99-8271-cbf9f5444e40/export 2026-08-05T18:05:19.635762+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d5cbc9d7-3bc2-4e99-8271-cbf9f5444e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbmxoaj552z", "content": "CVE-2026-58073 - service provider console\nAn attacker can impersonate a managed agent in the Veeam Service Provider Console and steal its credentials without needing a login. This allows the attacker to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#veeam #CVE #infosec", "creation_timestamp": "2026-08-04T18:22:04.086636Z"} 2026-08-04T18:22:04.086636+00:00