https://vulnerability.circl.lu/sightings/feed 2026-09-12T21:40:49.715325+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/76d3a14b-db41-434f-b375-39924159d984/export 2026-09-12T21:40:49.739972+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "76d3a14b-db41-434f-b375-39924159d984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89266", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvca5pazsf2n", "content": "stb_vorbis 1.22\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u30b3\u30fc\u30c9\u30d6\u30c3\u30af\u4e57\u6570\u5272\u308a\u5f53\u3066\u30b5\u30a4\u30ba\u304cint\u306b\u5207\u308a\u6368\u3066\u3089\u308c\u308b\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u60aa\u610f\u306e\u3042\u308bOgg Vorbis\u30d5\u30a1\u30a4\u30eb\u3067\u3001\u30d7\u30ed\u30bb\u30b9\u30af\u30e9\u30c3\u2026\nCVE-2026-89266 CVSS 8.2 | HIGH", "creation_timestamp": "2026-09-12T04:21:02.745876Z"} 2026-09-12T04:21:02.745876+00:00 https://vulnerability.circl.lu/sighting/d95db312-5169-44a3-881c-f2b36a4fb49c/export 2026-09-12T21:40:49.742881+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d95db312-5169-44a3-881c-f2b36a4fb49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89266", "type": "seen", "source": "https://gist.github.com/ichintu/4112015d623e1740e33503b5788e1512", "content": "On September 12, 2026, two vulnerabilities were disclosed: **CVE-2026-87719** (Critical, 9.9) affects GitLab EE (18.3\u201319.3.1), where crafted GraphQL arguments bypass deserialization, allowing authenticated Duo Chat users to extract sensitive instance configurations and credentials. **CVE-2026-89266** (High, 8.8) impacts stb_vorbis \u22641.22, where an integer truncation flaw in `start_decoder()` enables heap buffer overflows via malicious Ogg Vorbis files, leading to application crashes and memory corruption.", "creation_timestamp": "2026-09-12T04:02:16.973383Z"} 2026-09-12T04:02:16.973383+00:00 https://vulnerability.circl.lu/sighting/bdf9a1e6-54fc-4df6-9e6f-e16e7f78b6c3/export 2026-09-12T21:40:49.743219+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bdf9a1e6-54fc-4df6-9e6f-e16e7f78b6c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g4lusr4jim5zw", "content": "CVE-2026-89266 - stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands\nCVE ID : CVE-2026-89266\n \n Published : Sept. 12, 2026, 12:17 a.m. | 42\u00a0minutes ago\n \n Description : stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the cod...", "creation_timestamp": "2026-09-12T01:40:01.554400Z"} 2026-09-12T01:40:01.554400+00:00 https://vulnerability.circl.lu/sighting/3da09db5-d1af-40c4-bf48-0d79717a3c51/export 2026-09-12T21:40:49.743489+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3da09db5-d1af-40c4-bf48-0d79717a3c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89266", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbuw5vi5k2v", "content": "\ud83d\udfe0 CVE-2026-89266 - High (8.2)\n\nstb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook mul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89266/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T01:00:02.203066Z"} 2026-09-12T01:00:02.203066+00:00