https://vulnerability.circl.lu/sightings/feed 2026-09-21T12:57:59.477607+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8950dc82-0004-4642-88fb-ea5ae2695bb5/export 2026-09-21T12:57:59.499380+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8950dc82-0004-4642-88fb-ea5ae2695bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98238", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9147-uproot-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:58:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nuproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.185590Z"} 2026-08-24T00:00:10.185590+00:00 https://vulnerability.circl.lu/sighting/a3f7dafa-3701-4535-bed4-7d2fbc010b0d/export 2026-09-21T12:57:59.502152+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a3f7dafa-3701-4535-bed4-7d2fbc010b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://t.me/GithubRedTeam/98238", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9147-uproot-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:58:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nuproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.292635Z"} 2026-08-23T00:00:33.292635+00:00 https://vulnerability.circl.lu/sighting/9d564912-69d4-4ccd-b8b4-b2f5c850d1ad/export 2026-09-21T12:57:59.502492+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9d564912-69d4-4ccd-b8b4-b2f5c850d1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://t.me/GithubRedTeam/98238", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9147-uproot-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SaiTeja-Erukude\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 21:58:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nuproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.849419Z"} 2026-08-22T19:00:09.849419+00:00 https://vulnerability.circl.lu/sighting/d2faa4de-e7d0-410f-9a74-65096c2be456/export 2026-09-21T12:57:59.502744+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d2faa4de-e7d0-410f-9a74-65096c2be456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "published-proof-of-concept", "source": "Telegram/grGgFPZ83MCjoN4lsKRGKPYRhb0kdh5D59BuMU6s61_TMsM", "content": "", "creation_timestamp": "2026-08-18T00:00:10.487085Z"} 2026-08-18T00:00:10.487085+00:00 https://vulnerability.circl.lu/sighting/d5d7656e-51eb-4443-9c17-42920790ab5c/export 2026-09-21T12:57:59.502849+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d5d7656e-51eb-4443-9c17-42920790ab5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "published-proof-of-concept", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-18T00:00:10.104252Z"} 2026-08-18T00:00:10.104252+00:00 https://vulnerability.circl.lu/sighting/2a1ead71-837d-426b-82ac-8d9fceb95093/export 2026-09-21T12:57:59.502946+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2a1ead71-837d-426b-82ac-8d9fceb95093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-17T18:00:06.284343Z"} 2026-08-17T18:00:06.284343+00:00 https://vulnerability.circl.lu/sighting/70eecc9a-2d69-41b9-bda1-18da6f70a16f/export 2026-09-21T12:57:59.503042+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "70eecc9a-2d69-41b9-bda1-18da6f70a16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "Telegram/grGgFPZ83MCjoN4lsKRGKPYRhb0kdh5D59BuMU6s61_TMsM", "content": "", "creation_timestamp": "2026-08-17T18:00:05.752922Z"} 2026-08-17T18:00:05.752922+00:00 https://vulnerability.circl.lu/sighting/5114f993-246b-4bb4-a254-61663f374499/export 2026-09-21T12:57:59.503134+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5114f993-246b-4bb4-a254-61663f374499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr7kctwzem23", "content": "Daily IT Security Digest \u2014 2026-07-22\nfound to contain high-severity malicious code injecting arbitrary Python execution via crafted ROOT files \u2014 a critical supply-chain attack vector for physics and data science workflows. CVE-2026-9147 scores CVSS 8.5 as malicious ROOT files can trigger arbitrary", "creation_timestamp": "2026-07-22T05:04:07.221593Z"} 2026-07-22T05:04:07.221593+00:00 https://vulnerability.circl.lu/sighting/d924a435-c074-4154-9729-0f1d396b5d38/export 2026-09-21T12:57:59.503230+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d924a435-c074-4154-9729-0f1d396b5d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9147", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr7kcto63n2w", "content": "Daily IT Security Digest \u2014 2026-07-22\nhttps://mastodon.social/@Analyst207/116732756276891823, https://mastodon.social/@hermes71.bsky.social\n\n## 6. scikit-hep `uproot` Package Contains Malicious Code (CVE-2026-9147)\nThe Python scientific computing package `uproot` (published under scikit-hep on", "creation_timestamp": "2026-07-22T05:04:06.506155Z"} 2026-07-22T05:04:06.506155+00:00 https://vulnerability.circl.lu/sighting/3210ba2d-4d6f-478d-b068-be6cc5c41039/export 2026-09-21T12:57:59.503327+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3210ba2d-4d6f-478d-b068-be6cc5c41039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9147", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr4zrhkg3w2u", "content": "Daily IT Security Digest \u2014 2026-07-21\nthis toolkit. Users are advised to avoid processing untrusted ROOT files until a patch is released. [Source](https://radar.offseq.com/threat/cve-2026-9147) | [Mastodon](https://infosec.exchange/@offseq/116941221213811825)", "creation_timestamp": "2026-07-21T05:02:44.146218Z"} 2026-07-21T05:02:44.146218+00:00