https://vulnerability.circl.lu/sightings/feed 2026-08-28T23:44:06.443480+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/20e12dd1-72e2-4572-a93f-5fc776271654/export 2026-08-28T23:44:06.468728+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "20e12dd1-72e2-4572-a93f-5fc776271654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/TyxHaxNOYZewY16WupfPzLILXONmDjxPuLwVALABem5R50xg", "content": "", "creation_timestamp": "2026-08-28T15:00:05.299603Z"} 2026-08-28T15:00:05.299603+00:00 https://vulnerability.circl.lu/sighting/b06e5731-a1a6-4deb-85dd-b30b68a1a732/export 2026-08-28T23:44:06.472017+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b06e5731-a1a6-4deb-85dd-b30b68a1a732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mu52gkyljp2i", "content": "\ud83d\udce2 [VULN] Next.js : deux failles critiques permettent une ex\u00e9cution de code \u00e0 distance sans authentification - CVE-2026-75604\n\nLe 25 ao\u00fbt 2026, Vercel a publi\u00e9 plusieurs nouvelles versions de Next.js : 15.5.24 et 16.3.3. L'objectif ?\n\n#CVE #Cyberveille", "creation_timestamp": "2026-08-28T09:30:07.075701Z"} 2026-08-28T09:30:07.075701+00:00 https://vulnerability.circl.lu/sighting/0d5eb292-41be-402f-9ab6-4c4a7614b3e7/export 2026-08-28T23:44:06.472134+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0d5eb292-41be-402f-9ab6-4c4a7614b3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu4xp2d6lp2k", "content": "\ud83e\udd16 Next.js: Vercel patches two critical unauthenticated RCEs \u2014 crafted AVIF images and a Windows path traversal (CVE-2026-75604). Upgrade affected versions.\nhttps://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "creation_timestamp": "2026-08-28T08:41:10.543898Z"} 2026-08-28T08:41:10.543898+00:00 https://vulnerability.circl.lu/sighting/966fd94e-3e51-461c-bc43-81992584b848/export 2026-08-28T23:44:06.472221+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "966fd94e-3e51-461c-bc43-81992584b848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "content": "Credit: Hacktron\nVercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem.\n\nThe Windows path traversal, tracked as CVE-2026-75604&", "creation_timestamp": "2026-08-28T01:00:44.937603Z"} 2026-08-28T01:00:44.937603+00:00 https://vulnerability.circl.lu/sighting/6a3c044f-de10-4839-8740-850d996463b6/export 2026-08-28T23:44:06.472297+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6a3c044f-de10-4839-8740-850d996463b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-28T00:00:52.976185Z"} 2026-08-28T00:00:52.976185+00:00 https://vulnerability.circl.lu/sighting/d40f4eaf-3391-4c76-bf6b-630fb14666eb/export 2026-08-28T23:44:06.472372+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d40f4eaf-3391-4c76-bf6b-630fb14666eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-28T00:00:51.186329Z"} 2026-08-28T00:00:51.186329+00:00 https://vulnerability.circl.lu/sighting/5b5338eb-9b9a-4e77-8d72-eb817efdaee3/export 2026-08-28T23:44:06.472452+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5b5338eb-9b9a-4e77-8d72-eb817efdaee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/captainsmok3r_official/492", "content": "two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.", "creation_timestamp": "2026-08-28T00:00:11.151921Z"} 2026-08-28T00:00:11.151921+00:00 https://vulnerability.circl.lu/sighting/48692862-1d8f-4069-9e85-083ad6ddf186/export 2026-08-28T23:44:06.472534+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "48692862-1d8f-4069-9e85-083ad6ddf186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/493", "content": "poc: https://github.com/rafabd1/CVE-2026-75604-poc", "creation_timestamp": "2026-08-28T00:00:11.103217Z"} 2026-08-28T00:00:11.103217+00:00 https://vulnerability.circl.lu/sighting/300383d1-d600-4ed2-9ca3-c082754ea266/export 2026-08-28T23:44:06.472610+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "300383d1-d600-4ed2-9ca3-c082754ea266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/captainsmok3r_official/492", "content": "two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.", "creation_timestamp": "2026-08-27T22:00:05.937513Z"} 2026-08-27T22:00:05.937513+00:00 https://vulnerability.circl.lu/sighting/a5672d7a-c897-4f5d-bf75-300aa27aa39e/export 2026-08-28T23:44:06.472691+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a5672d7a-c897-4f5d-bf75-300aa27aa39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/493", "content": "poc: https://github.com/rafabd1/CVE-2026-75604-poc", "creation_timestamp": "2026-08-27T22:00:05.890900Z"} 2026-08-27T22:00:05.890900+00:00