https://vulnerability.circl.lu/sightings/feed 2026-10-11T21:43:39.749847+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/df1243c2-8e9d-454f-9a09-29007f6222d8/export 2026-10-11T21:43:39.772286+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "df1243c2-8e9d-454f-9a09-29007f6222d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82973", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwnyuv5wy42u", "content": "\ud83d\udea8 CVE-2026-82973 \u2014 CVSS 9.4 CRITICAL\n\nImproper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82973\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-29T14:07:58.778361Z"} 2026-09-29T14:07:58.778361+00:00 https://vulnerability.circl.lu/sighting/b340a1a5-ad1d-4f1b-97ce-68ed59569a19/export 2026-10-11T21:43:39.775133+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b340a1a5-ad1d-4f1b-97ce-68ed59569a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82973", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwnwyou7jt2y", "content": "\ud83d\udd34 CVE-2026-82973 - Critical (9.4)\n\nImproper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox b...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82973/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T13:34:20.020046Z"} 2026-09-29T13:34:20.020046+00:00 https://vulnerability.circl.lu/sighting/163d9a90-d161-44f5-903b-7f71b1f98c58/export 2026-10-11T21:43:39.775308+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "163d9a90-d161-44f5-903b-7f71b1f98c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82973", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwnwrss3wx22", "content": "CVE-2026-82973: CRITICAL flaw in psyb0t/docker-mailbox v0.1.0 \u2013 0.4.12 lets remote IMAP command injection if bearer-token auth is off. Upgrade to 0.4.13+ to secure your mailboxes. \ud83d\udee1\ufe0f https://radar.offseq.com/threat/cve-2026-82973-cwe-93-improper-neutralization-of-crlf-sequences-crlf-injection-in-...", "creation_timestamp": "2026-09-29T13:30:28.976350Z"} 2026-09-29T13:30:28.976350+00:00 https://vulnerability.circl.lu/sighting/6c978ec5-9245-4594-ae6b-d80bf7a76400/export 2026-10-11T21:43:39.775427+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6c978ec5-9245-4594-ae6b-d80bf7a76400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82973", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117354569796762535", "content": "CVE-2026-82973 (CRITICAL, CVSS 9.4) impacts psyb0t/docker-mailbox v0.1.0 \u2013 0.4.12: improper CRLF neutralization allows remote IMAP command injection if bearer-token auth is off. Upgrade to 0.4.13+! https://radar.offseq.com/threat/cve-2026-82973-cwe-93-improper-neutralization-of-crlf-sequences-crlf-injection-in-psyb0t-docker-mailbox-3ffb9517fce4d388 #OffSeq #CVE #EmailSecurity #Docker", "creation_timestamp": "2026-09-29T13:30:26.804676Z"} 2026-09-29T13:30:26.804676+00:00 https://vulnerability.circl.lu/sighting/08a31cfb-a11c-4b5f-a203-f0c3674e0063/export 2026-10-11T21:43:39.775540+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "08a31cfb-a11c-4b5f-a203-f0c3674e0063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82973", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwntkmgggy2l", "content": "CVE-2026-82973: psyb0t docker-mailbox before 0.4.13 has a CRLF injection flaw in IMAP command construction, letting a remote unauthenticated attacker inject IMAP commands when bearer-token authentication is off. Upgrade to 0.4.13; no exploitation confirmed.", "creation_timestamp": "2026-09-29T12:32:46.086415Z"} 2026-09-29T12:32:46.086415+00:00 https://vulnerability.circl.lu/sighting/bf8c18c7-b67d-41a9-aa68-3dba6f31a66c/export 2026-10-11T21:43:39.775661+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bf8c18c7-b67d-41a9-aa68-3dba6f31a66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82971", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mug7ypozo72m", "content": "QVidium Box Gets Remote Commanded While Bureaucrats Admire Their Stamps\nPANIC 72% | Lag 0.0h | CVE-2026-82971 affects QVidium Opera11's net_tr.cgi web component, where a specially crafted IP addr\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-01T01:03:43.264125Z"} 2026-09-01T01:03:43.264125+00:00 https://vulnerability.circl.lu/sighting/b8856a86-9a8d-4c4a-9427-3189cb9a20ae/export 2026-10-11T21:43:39.775784+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b8856a86-9a8d-4c4a-9427-3189cb9a20ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3pouy22ajzwc5", "content": "CVE-2026-82971 - QVidium Opera11 CGI Script net_tr.cgi command injection\nCVE ID : CVE-2026-82971\n \n Published : Aug. 31, 2026, 11:16 p.m. | 53\u00a0minutes ago\n \n Description : A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of ...", "creation_timestamp": "2026-09-01T00:31:05.248747Z"} 2026-09-01T00:31:05.248747+00:00 https://vulnerability.circl.lu/sighting/6e1caf8a-4910-4463-81cb-da9f493875bb/export 2026-10-11T21:43:39.775900+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6e1caf8a-4910-4463-81cb-da9f493875bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82971", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mug4uuqoqq2e", "content": "\ud83d\udea8 CVE-2026-82971 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82971\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T00:07:52.493575Z"} 2026-09-01T00:07:52.493575+00:00 https://vulnerability.circl.lu/sighting/58304099-f9b6-440c-98de-e1c3ca1016b3/export 2026-10-11T21:43:39.776004+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "58304099-f9b6-440c-98de-e1c3ca1016b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82971", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mufznjpirw2c", "content": "CVE-2026-82971 - opera11\nThe web component net_tr.cgi in QVidium Opera11 can be tricked into running commands you did not intend by sending a specially crafted IP address value. This can be done from\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opera11 #qvidium #CVE #infosec", "creation_timestamp": "2026-08-31T23:10:04.910510Z"} 2026-08-31T23:10:04.910510+00:00 https://vulnerability.circl.lu/sighting/bbbfb44c-fcbc-4566-8c48-3d002c37fd99/export 2026-10-11T21:43:39.776109+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bbbfb44c-fcbc-4566-8c48-3d002c37fd99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82970", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mufc2cgxuz2e", "content": "\ud83d\udea8 CVE-2026-82970 \u2014 CVSS 10 CRITICAL\n\nUnrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82970\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T16:07:43.227607Z"} 2026-08-31T16:07:43.227607+00:00