https://vulnerability.circl.lu/sightings/feed 2026-10-01T07:43:40.796538+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ded780ac-7b0a-4a9e-927c-e91e1ae260dc/export 2026-10-01T07:43:40.826164+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ded780ac-7b0a-4a9e-927c-e91e1ae260dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59931", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq5wdv76q22", "content": "CVE-2026-59931 - PhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist\nCVE ID : CVE-2026-59931\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In ...", "creation_timestamp": "2026-07-28T19:37:38.264152Z"} 2026-07-28T19:37:38.264152+00:00 https://vulnerability.circl.lu/sighting/5390d3ae-d14f-4ea2-a89b-45e390bf3bd0/export 2026-10-01T07:43:40.828840+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5390d3ae-d14f-4ea2-a89b-45e390bf3bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq5egxnv72i", "content": "CVE-2026-59933 - PhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion\nCVE ID : CVE-2026-59933\n \n Published : July 28, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In version...", "creation_timestamp": "2026-07-28T19:27:37.133052Z"} 2026-07-28T19:27:37.133052+00:00 https://vulnerability.circl.lu/sighting/06623c64-7056-48f8-917e-67d3aea74327/export 2026-10-01T07:43:40.828935+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "06623c64-7056-48f8-917e-67d3aea74327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59931", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3udnieo2f", "content": "\ud83d\udfe0 CVE-2026-59931 - High (7.7)\n\nPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59931/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T19:00:43.848473Z"} 2026-07-28T19:00:43.848473+00:00 https://vulnerability.circl.lu/sighting/6ba6d957-4a2f-488a-bcd5-28b3e6922244/export 2026-10-01T07:43:40.829007+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6ba6d957-4a2f-488a-bcd5-28b3e6922244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrq3twcref2o", "content": "\ud83d\udfe0 CVE-2026-59933 - High (7.5)\n\nPhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59933/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T19:00:29.484049Z"} 2026-07-28T19:00:29.484049+00:00 https://vulnerability.circl.lu/sighting/804263ce-e9fa-48bc-8dea-636b91bcd412/export 2026-10-01T07:43:40.829074+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "804263ce-e9fa-48bc-8dea-636b91bcd412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59932", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrq2uso3v32e", "content": "CVE-2026-59932 - PhpSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion\nCVE ID : CVE-2026-59932\n \n Published : July 28, 2026, 5:59 p.m. | 41\u00a0minutes ago\n \n Description : PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. ...", "creation_timestamp": "2026-07-28T18:43:05.888195Z"} 2026-07-28T18:43:05.888195+00:00 https://vulnerability.circl.lu/sighting/9f44b300-ebc2-48ec-a32d-f7cd779f05da/export 2026-10-01T07:43:40.829141+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "9f44b300-ebc2-48ec-a32d-f7cd779f05da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59939", "type": "published-proof-of-concept", "source": "https://github.com/httplib2/httplib2/security/advisories/GHSA-j5g9-f88f-gfj3", "content": "", "creation_timestamp": "2026-07-24T16:35:19.185295Z"} 2026-07-24T16:35:19.185295+00:00 https://vulnerability.circl.lu/sighting/859c1e20-7e87-4f85-9bef-c8476156ba51/export 2026-10-01T07:43:40.829873+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "859c1e20-7e87-4f85-9bef-c8476156ba51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59931", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-6hq5-7373-42rg", "content": "", "creation_timestamp": "2026-07-23T16:35:09.711417Z"} 2026-07-23T16:35:09.711417+00:00 https://vulnerability.circl.lu/sighting/c3fe18e7-236d-4518-95c2-675407aa582c/export 2026-10-01T07:43:40.829947+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "c3fe18e7-236d-4518-95c2-675407aa582c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59932", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-2mrg-gjxq-2gvr", "content": "", "creation_timestamp": "2026-07-23T16:35:07.363749Z"} 2026-07-23T16:35:07.363749+00:00 https://vulnerability.circl.lu/sighting/61e40e8a-6961-4122-bfd1-b625a0f58a57/export 2026-10-01T07:43:40.830008+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "61e40e8a-6961-4122-bfd1-b625a0f58a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59933", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-xh5m-36r6-47m3", "content": "", "creation_timestamp": "2026-07-23T16:35:05.029196Z"} 2026-07-23T16:35:05.029196+00:00 https://vulnerability.circl.lu/sighting/7b7be676-3fa2-4542-83cf-3c4fc7d75833/export 2026-10-01T07:43:40.830068+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7b7be676-3fa2-4542-83cf-3c4fc7d75833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59933", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrd5tmlace2i", "content": "A malformed 1 KB spreadsheet can crash PHP apps that use PhpSpreadsheet, the standard library for reading Excel files (CVE-2026-59933).\n\nIt fires during file-type detection, so even .xlsx-only apps are exposed.\n\nNo code execution. Patch now.", "creation_timestamp": "2026-07-23T15:31:30.448626Z"} 2026-07-23T15:31:30.448626+00:00