https://vulnerability.circl.lu/sightings/feed 2026-09-16T23:07:39.478065+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/980463c4-b496-489e-b24c-737b00ab5e7d/export 2026-09-16T23:07:39.508867+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "980463c4-b496-489e-b24c-737b00ab5e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7514", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-25", "content": "", "creation_timestamp": "2026-09-14T07:46:10.154538Z"} 2026-09-14T07:46:10.154538+00:00 https://vulnerability.circl.lu/sighting/58ea9338-e5a8-4d1e-892b-eeeb0243678b/export 2026-09-16T23:07:39.512687+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "58ea9338-e5a8-4d1e-892b-eeeb0243678b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7514", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260914", "content": "", "creation_timestamp": "2026-09-14T07:45:14.773258Z"} 2026-09-14T07:45:14.773258+00:00 https://vulnerability.circl.lu/sighting/834ce6be-5acf-47f9-93ca-1a2649674199/export 2026-09-16T23:07:39.513062+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "834ce6be-5acf-47f9-93ca-1a2649674199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7514", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q", "content": "\ud83d\udd17 CVE : CVE-2024-11222, CVE-2025-14871, CVE-2026-1168, CVE-2026-12910, CVE-2026-13210, CVE-2026-16794, CVE-2026-19619, CVE-2026-3855, CVE-2026-7514, CVE-2026-78252, CVE-2026-79708, CVE-2026-8030, CVE-2026-82837, CVE-2026-85706, CVE-2026-86340, CVE-2026-86341, CVE-2026-87719, CVE-2026-88765", "creation_timestamp": "2026-09-11T14:00:11.545043Z"} 2026-09-11T14:00:11.545043+00:00 https://vulnerability.circl.lu/sighting/729d7db9-817c-4384-b5d2-b5bd69c04282/export 2026-09-16T23:07:39.515482+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "729d7db9-817c-4384-b5d2-b5bd69c04282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75149", "type": "seen", "source": "https://t.me/CyberDispatch/2687", "content": "A Marimo notebook can launch MCP commands before cells run.\n\nCVE-2026-75149 triggers when a crafted notebook is opened in edit mode. It affects versions before 0.23.15.\nMarimo fixed it in 0.23.15.", "creation_timestamp": "2026-08-30T00:00:39.026901Z"} 2026-08-30T00:00:39.026901+00:00 https://vulnerability.circl.lu/sighting/aa86f527-bd1a-4229-b30a-3d35a81b43d6/export 2026-09-16T23:07:39.515713+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "aa86f527-bd1a-4229-b30a-3d35a81b43d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75149", "type": "seen", "source": "https://t.me/CyberDispatch/2687", "content": "A Marimo notebook can launch MCP commands before cells run.\n\nCVE-2026-75149 triggers when a crafted notebook is opened in edit mode. It affects versions before 0.23.15.\nMarimo fixed it in 0.23.15.", "creation_timestamp": "2026-08-29T20:00:04.379070Z"} 2026-08-29T20:00:04.379070+00:00 https://vulnerability.circl.lu/sighting/630971f2-23b4-4494-ae3d-7628bec709ba/export 2026-09-16T23:07:39.515870+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "630971f2-23b4-4494-ae3d-7628bec709ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75149", "type": "seen", "source": "https://t.me/pphm_HackerNews/2854", "content": "\ud83d\udd34 Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode\n\nMarimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command in a specially crafted notebook, according to VulnCheck's CVE Numbering Authority (CNA) record.\n\nThe CNA record says the command can run as a local subprocess when the notebook is opened in edit mode.\n\nThe vulnerability, tracked as CVE-2026-75149, is a code injection issue affecting versions prior to 0.23.15. VulnCheck's CVE Numbering Authority (CNA) record assigns it a CVSS v4 score of 8.7 and a CVSS v3.1 score of 8.8, with user interaction required and no attacker authentication required.", "creation_timestamp": "2026-08-27T00:00:10.990235Z"} 2026-08-27T00:00:10.990235+00:00 https://vulnerability.circl.lu/sighting/319796b1-d9b1-41e9-8a3c-b52ef8afa99b/export 2026-09-16T23:07:39.516017+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "319796b1-d9b1-41e9-8a3c-b52ef8afa99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75149", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9888", "content": "\u203c\ufe0f A Marimo notebook can launch MCP commands before cells run.\n\nCVE-2026-75149 triggers when a crafted notebook is opened in edit mode. It affects versions before 0.23.15.\nMarimo fixed it in 0.23.15.\n\nRead the details: https://thehackernews.com/2026/08/marimo-notebook-flaw-could-run-mcp.html", "creation_timestamp": "2026-08-27T00:00:09.383140Z"} 2026-08-27T00:00:09.383140+00:00 https://vulnerability.circl.lu/sighting/57187083-9583-4f6d-937c-3fc4d76933c5/export 2026-09-16T23:07:39.516153+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "57187083-9583-4f6d-937c-3fc4d76933c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75149", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9888", "content": "\u203c\ufe0f A Marimo notebook can launch MCP commands before cells run.\n\nCVE-2026-75149 triggers when a crafted notebook is opened in edit mode. It affects versions before 0.23.15.\nMarimo fixed it in 0.23.15.\n\nRead the details: https://thehackernews.com/2026/08/marimo-notebook-flaw-could-run-mcp.html", "creation_timestamp": "2026-08-26T19:00:03.568778Z"} 2026-08-26T19:00:03.568778+00:00 https://vulnerability.circl.lu/sighting/abb5fd5c-3ca0-41e1-ad37-9dd89c0d4320/export 2026-09-16T23:07:39.516288+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "abb5fd5c-3ca0-41e1-ad37-9dd89c0d4320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75149", "type": "seen", "source": "https://t.me/pphm_HackerNews/2854", "content": "\ud83d\udd34 Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode\n\nMarimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command in a specially crafted notebook, according to VulnCheck's CVE Numbering Authority (CNA) record.\n\nThe CNA record says the command can run as a local subprocess when the notebook is opened in edit mode.\n\nThe vulnerability, tracked as CVE-2026-75149, is a code injection issue affecting versions prior to 0.23.15. VulnCheck's CVE Numbering Authority (CNA) record assigns it a CVSS v4 score of 8.7 and a CVSS v3.1 score of 8.8, with user interaction required and no attacker authentication required.", "creation_timestamp": "2026-08-26T03:00:03.573950Z"} 2026-08-26T03:00:03.573950+00:00 https://vulnerability.circl.lu/sighting/3fbbada6-9926-4285-bb8c-7e59c63197c2/export 2026-09-16T23:07:39.516425+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3fbbada6-9926-4285-bb8c-7e59c63197c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75149", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtvx5cqydc2m", "content": "CVE-2026-75149 lets crafted Marimo notebooks execute attacker-supplied MCP commands as local subprocesses when opened in edit mode; fixed in 0.23.15.\n", "creation_timestamp": "2026-08-25T13:42:37.647863Z"} 2026-08-25T13:42:37.647863+00:00