https://vulnerability.circl.lu/sightings/feed 2026-08-30T02:19:36.570993+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/cef773e8-6b7d-4756-a01d-d6c7dc72fa40/export 2026-08-30T02:19:36.605783+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cef773e8-6b7d-4756-a01d-d6c7dc72fa40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59270", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117168404346872818", "content": "wat\nhttps://spring.io/security/cve-2026-59270\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces.\nAn attacker who could reach the LDAP listener port could authenticate using the well-known administrative bind DN, and then read or modify entries in the in-memory directory.", "creation_timestamp": "2026-08-27T16:26:07.541643Z"} 2026-08-27T16:26:07.541643+00:00 https://vulnerability.circl.lu/sighting/0cfc22a2-92e6-447a-ae62-b712b8a777f3/export 2026-08-30T02:19:36.610051+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0cfc22a2-92e6-447a-ae62-b712b8a777f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2qo56isw25", "content": "CVE-2026-59270 - spring security\nThe built\u2011in LDAP service in Spring Security automatically creates an admin account and makes it reachable from any network address. This can let anyone on the network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#springsecurity #spring #CVE #infosec", "creation_timestamp": "2026-08-27T11:30:04.798531Z"} 2026-08-27T11:30:04.798531+00:00 https://vulnerability.circl.lu/sighting/3f953c26-20a6-45f7-bd9c-27c1b19d1d98/export 2026-08-30T02:19:36.610211+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3f953c26-20a6-45f7-bd9c-27c1b19d1d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2fdded362p", "content": "\ud83d\udea8 CVE-2026-59270 \u2014 CVSS 9.4 CRITICAL\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-59270\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T08:07:10.676759Z"} 2026-08-27T08:07:10.676759+00:00 https://vulnerability.circl.lu/sighting/56a1d215-d80c-4471-8d09-cd22f66ded56/export 2026-08-30T02:19:36.610289+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "56a1d215-d80c-4471-8d09-cd22f66ded56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2bmivlm522", "content": "\ud83d\udd34 CVE-2026-59270 - Critical (9.4)\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59270/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T07:00:44.127956Z"} 2026-08-27T07:00:44.127956+00:00 https://vulnerability.circl.lu/sighting/4b0517ee-3253-4dd2-9681-5c23270bf040/export 2026-08-30T02:19:36.610363+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4b0517ee-3253-4dd2-9681-5c23270bf040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5kitdocbckhlp", "content": "CVE-2026-59270 - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces\nCVE ID : CVE-2026-59270\n \n Published : Aug. 27, 2026, 6:17 a.m. | 18\u00a0minutes ago\n \n Description : Spring Security's embedded UnboundID LDAP serve...", "creation_timestamp": "2026-08-27T06:51:14.424048Z"} 2026-08-27T06:51:14.424048+00:00 https://vulnerability.circl.lu/sighting/bc235a39-4fc5-4c2b-80d1-e7a2b96f3e3b/export 2026-08-30T02:19:36.610434+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bc235a39-4fc5-4c2b-80d1-e7a2b96f3e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtletiqouz2p", "content": "Spring Security CVE-2026-59270 lets attackers get full admin over LDAP without login. #SpringSecurity #LDAP #Vulnerability #CVESecurity #Cybersecurity #DevSecOps https://thedailytechfeed.com/critical-spring-security-flaw-opens-ldap-servers-to-admin-takeover/", "creation_timestamp": "2026-08-21T08:48:24.049196Z"} 2026-08-21T08:48:24.049196+00:00 https://vulnerability.circl.lu/sighting/cf2a38d5-279c-4a72-b906-09f2e6d236b9/export 2026-08-30T02:19:36.610501+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cf2a38d5-279c-4a72-b906-09f2e6d236b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkonlidy62q", "content": "Four Spring Security vulnerabilities were disclosed, led by CVE-2026-59270 (CVSS 9.4). Attackers can read or modify entries in the in-memory directory.\n\n#SpringSecurity #CVE202659270 #LDAP #WebAuthn #DPoP #AppSec", "creation_timestamp": "2026-08-21T02:11:25.821898Z"} 2026-08-21T02:11:25.821898+00:00