https://vulnerability.circl.lu/sightings/feed 2026-10-01T07:43:53.486054+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/86a40013-f429-4475-aeba-27c0c506ee11/export 2026-10-01T07:43:53.514948+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "86a40013-f429-4475-aeba-27c0c506ee11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwcc4boogk2t", "content": "\u300cOAuth2 Proxy\u300d\u306b\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u306f\u672a\u516c\u958b\n\n\u8a8d\u8a3c\u30d7\u30ed\u30af\u30b7\u300cOAuth2 Proxy\u300d\u306b\u8a8d\u8a3c\u3092\u56de\u907f\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30bd\u30fc\u30b9\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u304a\u3044\u3066\u4fee\u6b63\u304c\u9032\u3081\u3089\u308c\u3066\u3044\u308b\u304c\u3001\u4fee\u6b63\u7248\u306f\u672a\u63d0\u4f9b\u3068\u306a\u3063\u3066\u3044\u308b\u3002\n\n\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30af\u30b7\u30e2\u30fc\u30c9\u3067\u300ctrusted_proxy_ip\u300d\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u3001\u7d30\u5de5\u3057\u305f\u300cX-Forwarded-Uri\u300d\u30d8\u30c3\u30c0\u306b\u3088\u3063\u3066\u8a8d\u8a3c\u3092\u56de\u907f\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-76835\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3082\u306e\u3002\u30c7\u30d5\u30a9\u30eb\u30c8\u69cb\u6210\u3067\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3044\u3046\u3002\n\n...\n\n\u300c\u540c7.15.2\u300d\u306b\u3066\u300cCVE-2026-40575\u300d\u3068\u3057\u3066\u5bfe\u7b56\u3092\u5b9f\u65bd\u3057\u305f\u3082\u306e\u306e\u3001...", "creation_timestamp": "2026-09-24T22:21:14.820807Z"} 2026-09-24T22:21:14.820807+00:00 https://vulnerability.circl.lu/sighting/272f7ef5-8e04-4ac8-929f-94e0bbe8da27/export 2026-10-01T07:43:53.517529+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "272f7ef5-8e04-4ac8-929f-94e0bbe8da27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://www.acn.gov.it/portale/w/oauth2-poc-pubblico-per-lo-sfruttamento-di-una-vulnerabilita-con-gravita-critica-", "content": "Disponibile un Proof of Concept (PoC) per la CVE-2026-76835 presente in OAuth2 Proxy. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe permettere a un attaccante remoto non autenticato di eludere i meccanismi di autenticazione sui sistemi interessati.", "creation_timestamp": "2026-08-27T16:01:01.275590Z"} 2026-08-27T16:01:01.275590+00:00 https://vulnerability.circl.lu/sighting/830ce985-d7ec-48ca-a855-263c6ffecf7e/export 2026-10-01T07:43:53.517644+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "830ce985-d7ec-48ca-a855-263c6ffecf7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtu4a2g2b225", "content": "\ud83d\udea8 CVE-2026-76835 \u2014 CVSS 9.3 CRITICAL\n\nOAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76835\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T20:08:18.115433Z"} 2026-08-24T20:08:18.115433+00:00 https://vulnerability.circl.lu/sighting/26da17b7-2ecc-4869-aea9-d1214cc0cd05/export 2026-10-01T07:43:53.517719+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "26da17b7-2ecc-4869-aea9-d1214cc0cd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtu23pht6c2y", "content": "CVE-2026-76835 - oauth2-proxy\nThe OAuth2 Proxy software treats any client as a trusted proxy by default, so it trusts the X-Forwarded-Uri header sent by the requester. An attacker can send a fake header that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oauth2proxy #CVE #infosec", "creation_timestamp": "2026-08-24T19:30:04.928191Z"} 2026-08-24T19:30:04.928191+00:00 https://vulnerability.circl.lu/sighting/f4aa6682-4c27-4ac5-9508-558dd9b7db15/export 2026-10-01T07:43:53.517796+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f4aa6682-4c27-4ac5-9508-558dd9b7db15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyixqmp52r", "content": "\ud83d\udd34 CVE-2026-76835 - Critical (9.1)\n\nOAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76835/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T19:01:44.179103Z"} 2026-08-24T19:01:44.179103+00:00