https://vulnerability.circl.lu/sightings/feed 2026-09-13T04:34:22.911411+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/52575986-cc47-443f-b852-ccecdd41dc28/export 2026-09-13T04:34:22.937987+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "52575986-cc47-443f-b852-ccecdd41dc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86093", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117249508395725821", "content": "The severity is increased for this new vulnerability affecting IBM Db2 (CVE-2026-86093) https://vuldb.com/vuln/402239", "creation_timestamp": "2026-09-11T00:11:56.716370Z"} 2026-09-11T00:11:56.716370+00:00 https://vulnerability.circl.lu/sighting/7d931770-26cd-452d-b038-6a5c874e876c/export 2026-09-13T04:34:22.941024+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7d931770-26cd-452d-b038-6a5c874e876c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86093", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv7bacxmck2w", "content": "\ud83d\udfe0 CVE-2026-86093 - High (7.5)\n\nIBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86093/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T00:02:25.901306Z"} 2026-09-11T00:02:25.901306+00:00 https://vulnerability.circl.lu/sighting/3630ffdb-5cb1-4177-b92a-cd9e31bfe7eb/export 2026-09-13T04:34:22.941368+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3630ffdb-5cb1-4177-b92a-cd9e31bfe7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86090", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv54eo74uz2v", "content": "CVE-2026-86090: ntopng auth bypass lets non-admin users delete all alert endpoints, silencing critical notifications. CVSS 7.1. No patch yet. Audit your instance now. Details: https://www.valtersit.com/cve/CVE-2026-86090/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-10T03:30:04.601021Z"} 2026-09-10T03:30:04.601021+00:00 https://vulnerability.circl.lu/sighting/6d1693ec-11b2-4c47-9d06-741626d6350f/export 2026-09-13T04:34:22.941639+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6d1693ec-11b2-4c47-9d06-741626d6350f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86090", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244625094933654", "content": "CVE-2026-86090: ntopng auth bypass lets non-admin users delete all alert endpoints, silencing critical notifications. CVSS 7.1. No patch yet. Audit your instance now. Details: https://www.valtersit.com/cve/CVE-2026-86090/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-10T03:30:04.591448Z"} 2026-09-10T03:30:04.591448+00:00 https://vulnerability.circl.lu/sighting/b734bdf9-4b39-4a02-87df-4b3fa12a2a35/export 2026-09-13T04:34:22.941909+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b734bdf9-4b39-4a02-87df-4b3fa12a2a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86098", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117242777798627415", "content": "CVE-2026-86098: Heap buffer overflow in ntop nDPI <6.0 via ndpi_json_string_escape. Crafted TLS SNI, HTTP, or DNS data can corrupt memory\u2014potential RCE. CVSS 7.4. No patch yet. Harden exposure & monitor traffic. Details: https://www.valtersit.com/cve/CVE-2026-86098/ #CVE #infosec", "creation_timestamp": "2026-09-09T19:40:22.988746Z"} 2026-09-09T19:40:22.988746+00:00 https://vulnerability.circl.lu/sighting/73abbc34-6a35-4e4c-84aa-f27ef0bb8ad8/export 2026-09-13T04:34:22.942025+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "73abbc34-6a35-4e4c-84aa-f27ef0bb8ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86098", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv4c4nfww72f", "content": "CVE-2026-86098: Heap buffer overflow in ntop nDPI <6.0 via ndpi_json_string_escape. Crafted TLS SNI, HTTP, or DNS data can corrupt memory\u2014potential RCE. CVSS 7.4. No patch yet. Harden exposure & monitor traffic. Details: https://www.valtersit.com/cve/CVE-2026-86098/ #CVE #infosec", "creation_timestamp": "2026-09-09T19:40:16.067021Z"} 2026-09-09T19:40:16.067021+00:00 https://vulnerability.circl.lu/sighting/b8556d9b-3f69-449a-9112-715b55da7ed9/export 2026-09-13T04:34:22.942125+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b8556d9b-3f69-449a-9112-715b55da7ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86095", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117242030714604253", "content": "CVE-2026-86095 | Unidata netcdf-c has an out-of-bounds write in NC4_HDF5_inq_attname()\u2014crafted HDF5 files overflow a 256-byte buffer, causing memory corruption or crashes. CVSS 7.8. Unpatched. Update immediately. https://www.valtersit.com/cve/CVE-2026-86095/ #CVE #infosec #netcdf", "creation_timestamp": "2026-09-09T16:30:23.823171Z"} 2026-09-09T16:30:23.823171+00:00 https://vulnerability.circl.lu/sighting/4fcd212a-58f8-45a0-a604-422ba29e4095/export 2026-09-13T04:34:22.942219+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4fcd212a-58f8-45a0-a604-422ba29e4095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86095", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv3xivveya2z", "content": "CVE-2026-86095 | Unidata netcdf-c has an out-of-bounds write in NC4_HDF5_inq_attname()\u2014crafted HDF5 files overflow a 256-byte buffer, causing memory corruption or crashes. CVSS 7.8. Unpatched. Update immediately. https://www.valtersit.com/cve/CVE-2026-86095/ #CVE #infosec #netcdf", "creation_timestamp": "2026-09-09T16:30:17.280928Z"} 2026-09-09T16:30:17.280928+00:00 https://vulnerability.circl.lu/sighting/26cb14da-a155-405f-a075-9e28f331f379/export 2026-09-13T04:34:22.942318+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "26cb14da-a155-405f-a075-9e28f331f379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86091", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117240930233128852", "content": "CVE-2026-86091: ntopng privilege flaw lets authenticated users delete all host pools, bypassing security policies. CVSS 7.1. Critical admin action needed\u2014if unpatched, restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-86091/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-09T11:50:27.256852Z"} 2026-09-09T11:50:27.256852+00:00 https://vulnerability.circl.lu/sighting/b54cd57d-539f-41a5-912b-03687ba2480c/export 2026-09-13T04:34:22.942415+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b54cd57d-539f-41a5-912b-03687ba2480c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86091", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv3huhsxyv2t", "content": "CVE-2026-86091: ntopng privilege flaw lets authenticated users delete all host pools, bypassing security policies. CVSS 7.1. Critical admin action needed\u2014if unpatched, restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-86091/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-09T11:50:24.529817Z"} 2026-09-09T11:50:24.529817+00:00