https://vulnerability.circl.lu/sightings/feed 2026-09-24T13:57:26.851665+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b347f76e-82be-4c49-8470-eb36dae15463/export 2026-09-24T13:57:26.874847+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b347f76e-82be-4c49-8470-eb36dae15463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92980", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtxtii5rk24", "content": "CVE-2026-92980 - hortusfox-web\nIn versions before 6.1, an admin who uses the Import/Export feature can cause the web server to execute any operating\u2011system command. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hortusfoxweb #danielbrendel #CVE #infosec", "creation_timestamp": "2026-09-19T05:40:05.334168Z"} 2026-09-19T05:40:05.334168+00:00 https://vulnerability.circl.lu/sighting/6e9c5d4f-c06d-46a1-b978-d1acf02161bd/export 2026-09-24T13:57:26.877361+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6e9c5d4f-c06d-46a1-b978-d1acf02161bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92986", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtxbl7c3y25", "content": "CVE-2026-92986 - siyuan\nThe SiYuan note\u2011taking app lets a note's title be displayed without cleaning out special characters. An attacker who can change a title could insert code that runs on the user\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-09-19T05:30:04.323082Z"} 2026-09-19T05:30:04.323082+00:00 https://vulnerability.circl.lu/sighting/c23c48aa-4d70-4bf7-ab6c-ddb81145649c/export 2026-09-24T13:57:26.877506+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c23c48aa-4d70-4bf7-ab6c-ddb81145649c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92985", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtwpr3xzz22", "content": "CVE-2026-92985 - siyuan\nOlder versions of SiYuan do not properly clean up the text used for bookmark labels when a notebook file is opened. A specially crafted notebook can contain hidden code that runs on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-09-19T05:20:06.494993Z"} 2026-09-19T05:20:06.494993+00:00 https://vulnerability.circl.lu/sighting/c3182ec1-14ca-4996-a61c-d3a996fa99d8/export 2026-09-24T13:57:26.877645+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c3182ec1-14ca-4996-a61c-d3a996fa99d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92984", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtwppo42y2r", "content": "CVE-2026-92984 - hubzero-cms\nThe HUBzero CMS platform can accept session IDs from the web address instead of only from secure cookies. This lets an attacker create a link with a known session ID, send it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hubzerocms #hubzero #CVE #infosec", "creation_timestamp": "2026-09-19T05:20:04.763529Z"} 2026-09-19T05:20:04.763529+00:00 https://vulnerability.circl.lu/sighting/e57774da-5cf3-4f19-aabc-fb683b27ef35/export 2026-09-24T13:57:26.877758+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e57774da-5cf3-4f19-aabc-fb683b27ef35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92987", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6q56pqj44ieyk", "content": "CVE-2026-92987 - roxmltree through 0.21.1 Denial of Service via Quadratic Parsing\nCVE ID : CVE-2026-92987\n \n Published : Sept. 17, 2026, 2:22 p.m. | 13\u00a0minutes ago\n \n Description : roxmltree through 0.21.1 performs quadratic-time attribute and namespace validation during XML p...", "creation_timestamp": "2026-09-17T16:17:21.210286Z"} 2026-09-17T16:17:21.210286+00:00