https://vulnerability.circl.lu/sightings/feed 2026-09-27T09:37:25.786991+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/99da4989-9caa-410b-9066-4721cb795298/export 2026-09-27T09:37:25.815510+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "99da4989-9caa-410b-9066-4721cb795298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvcp6pq4qd2t", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:50:03.198795Z"} 2026-09-12T08:50:03.198795+00:00 https://vulnerability.circl.lu/sighting/910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a/export 2026-09-27T09:37:25.819208+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117257168610414149", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:40:06.702752Z"} 2026-09-12T08:40:06.702752+00:00 https://vulnerability.circl.lu/sighting/46de0012-8358-4a29-920e-54dedca97f99/export 2026-09-27T09:37:25.819549+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "46de0012-8358-4a29-920e-54dedca97f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3muph6jb6xk2w", "content": "\ud83d\udea8 Moderate-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84890: undici vulnerable to Denial of Service via unbounded decompression of compressed responses\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T17:06:12.602890Z"} 2026-09-04T17:06:12.602890+00:00 https://vulnerability.circl.lu/sighting/08f0a258-eb70-41c2-b577-16543a937580/export 2026-09-27T09:37:25.819845+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "08f0a258-eb70-41c2-b577-16543a937580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprgdxehyf2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8489 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ultimate Member: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6191C0D4-A9B8-45D4-B4F6-6BEBA4BFE0D0", "creation_timestamp": "2026-07-03T20:50:41.264133Z"} 2026-07-03T20:50:41.264133+00:00 https://vulnerability.circl.lu/sighting/fd4f6a6e-7038-44fd-afdc-46fdf4d31873/export 2026-09-27T09:37:25.820110+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fd4f6a6e-7038-44fd-afdc-46fdf4d31873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpqqch5bk727", "content": "CVE-2026-8489 ultimate-member (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-03T14:16:07.975529Z"} 2026-07-03T14:16:07.975529+00:00 https://vulnerability.circl.lu/sighting/dd6bcfe7-3d7c-4075-b299-f609e3dd902c/export 2026-09-27T09:37:25.820368+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dd6bcfe7-3d7c-4075-b299-f609e3dd902c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mppumip7bu2a", "content": "CVE-2026-8489 - Ultimate Member\nCVE ID : CVE-2026-8489\n \n Published : July 3, 2026, 4:30 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress i...", "creation_timestamp": "2026-07-03T06:00:43.739184Z"} 2026-07-03T06:00:43.739184+00:00