https://vulnerability.circl.lu/sightings/feed 2026-08-09T19:01:00.168289+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/32625d8c-0174-4633-affd-1e1d862526f9/export 2026-08-09T19:01:00.195646+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "32625d8c-0174-4633-affd-1e1d862526f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41115", "type": "seen", "source": "https://t.me/pphm_HackerNews/1144", "content": "Dashboard Platform Vulnerability Allows Automatic Administrative Account Creation\n\nGrafana Enterprise has disclosed a maximum-severity vulnerability (CVE-2025-41115) that allows attackers using the SCIM (System for Cross-domain Identity Management) provisioning interface to treat a newly created user as an existing internal administrator.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.426089Z"} 2026-07-23T00:00:25.426089+00:00 https://vulnerability.circl.lu/sighting/dedb0da1-f350-4746-a90b-71a0f25dfb92/export 2026-08-09T19:01:00.199310+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dedb0da1-f350-4746-a90b-71a0f25dfb92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41115", "type": "seen", "source": "https://t.me/pphm_HackerNews/1144", "content": "Dashboard Platform Vulnerability Allows Automatic Administrative Account Creation\n\nGrafana Enterprise has disclosed a maximum-severity vulnerability (CVE-2025-41115) that allows attackers using the SCIM (System for Cross-domain Identity Management) provisioning interface to treat a newly created user as an existing internal administrator.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.705604Z"} 2026-07-22T05:00:04.705604+00:00 https://vulnerability.circl.lu/sighting/8425e2b4-2d61-42dc-99d5-c47e203367eb/export 2026-08-09T19:01:00.199500+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8425e2b4-2d61-42dc-99d5-c47e203367eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41115", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1256", "content": "\ud83d\udea8 CVE-2025-41115 (Grafana Enterprise, CVSS 10.0). \u041a\u043e\u0440\u043e\u0442\u043a\u043e: SCIM \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u2192 \u0440\u0438\u0441\u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0430\u0434\u043c\u0438\u043d\u043a\u0438. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SCIM provisioning - \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c externalId \u0438 \u0432\u043e\u0439\u0442\u0438 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0430.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b: Grafana Enterprise 12.0.0-12.2.1\n\n\u0424\u0438\u043a\u0441: \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 12.0.6 / 12.1.3 / 12.2.1 (patched) / 12.3.0\n\n\u2705 \u0427\u0435\u043a\u043b\u0438\u0441\u0442:\n1 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043b\u0438 SCIM (enableSCIM, user_sync_enabled).\n2 \u0415\u0441\u043b\u0438 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d - \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c.\n3 \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Grafana.\n4 \u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u0432\u0445\u043e\u0434\u044b.\n\nPoC: GitHub \u2014 Blackash-CVE-2025-41115", "creation_timestamp": "2026-07-14T00:01:03.314765Z"} 2026-07-14T00:01:03.314765+00:00 https://vulnerability.circl.lu/sighting/246d15b9-6c91-40a4-b754-946a21a93cb9/export 2026-08-09T19:01:00.199709+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "246d15b9-6c91-40a4-b754-946a21a93cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41115", "type": "seen", "source": "https://t.me/securixy_kz/1256", "content": "\ud83d\udea8 CVE-2025-41115 (Grafana Enterprise, CVSS 10.0). \u041a\u043e\u0440\u043e\u0442\u043a\u043e: SCIM \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u2192 \u0440\u0438\u0441\u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0430\u0434\u043c\u0438\u043d\u043a\u0438. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SCIM provisioning - \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c externalId \u0438 \u0432\u043e\u0439\u0442\u0438 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0430.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b: Grafana Enterprise 12.0.0-12.2.1\n\n\u0424\u0438\u043a\u0441: \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 12.0.6 / 12.1.3 / 12.2.1 (patched) / 12.3.0\n\n\u2705 \u0427\u0435\u043a\u043b\u0438\u0441\u0442:\n1 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043b\u0438 SCIM (enableSCIM, user_sync_enabled).\n2 \u0415\u0441\u043b\u0438 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d - \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c.\n3 \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Grafana.\n4 \u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u0432\u0445\u043e\u0434\u044b.\n\nPoC: GitHub \u2014 Blackash-CVE-2025-41115", "creation_timestamp": "2026-07-13T00:00:17.723792Z"} 2026-07-13T00:00:17.723792+00:00 https://vulnerability.circl.lu/sighting/e8fa0dc0-8ed7-4f6c-b7a8-d2fe1eb7ae8e/export 2026-08-09T19:01:00.199843+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e8fa0dc0-8ed7-4f6c-b7a8-d2fe1eb7ae8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41115", "type": "seen", "source": "https://t.me/securixy_kz/1256", "content": "\ud83d\udea8 CVE-2025-41115 (Grafana Enterprise, CVSS 10.0). \u041a\u043e\u0440\u043e\u0442\u043a\u043e: SCIM \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u2192 \u0440\u0438\u0441\u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0430\u0434\u043c\u0438\u043d\u043a\u0438. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SCIM provisioning - \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c externalId \u0438 \u0432\u043e\u0439\u0442\u0438 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0430.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b: Grafana Enterprise 12.0.0-12.2.1\n\n\u0424\u0438\u043a\u0441: \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 12.0.6 / 12.1.3 / 12.2.1 (patched) / 12.3.0\n\n\u2705 \u0427\u0435\u043a\u043b\u0438\u0441\u0442:\n1 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043b\u0438 SCIM (enableSCIM, user_sync_enabled).\n2 \u0415\u0441\u043b\u0438 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d - \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c.\n3 \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Grafana.\n4 \u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0438 \u0432\u0445\u043e\u0434\u044b.\n\nPoC: GitHub \u2014 Blackash-CVE-2025-41115", "creation_timestamp": "2026-07-12T22:00:06.666236Z"} 2026-07-12T22:00:06.666236+00:00 https://vulnerability.circl.lu/sighting/7681ba67-9d8f-4d96-9faa-355fa2d00fa1/export 2026-08-09T19:01:00.199976+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7681ba67-9d8f-4d96-9faa-355fa2d00fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41115", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116838675578498232", "content": "#OT #Advisory VDE-2026-049Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01\nSecurity advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.#CVE CVE-2025-68121, CVE-2026-1229, CVE-2025-41115, CVE-2025-15467, CVE-2023-3128, CVE-2022-28660, CVE-2022-26148, CVE-2018-15727, CVE-2020-27846, CVE-2024-9264, CVE-2024-1442, CVE-2022-28391, CVE-2022-24812, CVE-2022-23498, CVE-2022-21703, CVE-2022-31097, CVE-2025-61732, CVE-2025-4674, CVE-2022-29170, CVE-2024-56406\nhttps://certvde.com/en/advisories/vde-2026-049/\n#CSAF https://balluff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-049.json", "creation_timestamp": "2026-06-30T10:51:46.145678Z"} 2026-06-30T10:51:46.145678+00:00 https://vulnerability.circl.lu/sighting/9714e86f-e3e0-4b8f-ae08-b7aa1ac0298c/export 2026-08-09T19:01:00.200109+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9714e86f-e3e0-4b8f-ae08-b7aa1ac0298c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41118", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjxer7zu2j2w", "content": "", "creation_timestamp": "2026-04-20T21:07:08.113553Z"} 2026-04-20T21:07:08.113553+00:00 https://vulnerability.circl.lu/sighting/4bc58292-e1b7-4c15-9b46-3b3dbbc81674/export 2026-08-09T19:01:00.200215+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4bc58292-e1b7-4c15-9b46-3b3dbbc81674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41118", "type": "seen", "source": "Telegram/uDqb5UNOJD19g19jmJKdnJBBrEUml8WxLQrnFn708j03zpg", "content": "", "creation_timestamp": "2026-04-15T23:26:09.000000Z"} 2026-04-15T23:26:09+00:00 https://vulnerability.circl.lu/sighting/ea334ba6-cd7a-4e4d-bcee-f86ef55792c2/export 2026-08-09T19:01:00.200319+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ea334ba6-cd7a-4e4d-bcee-f86ef55792c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41118", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjksix6ctm2m", "content": "", "creation_timestamp": "2026-04-15T21:08:25.681351Z"} 2026-04-15T21:08:25.681351+00:00 https://vulnerability.circl.lu/sighting/9657948d-a1f8-4e4c-98a3-2ef8f1bb601d/export 2026-08-09T19:01:00.200421+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9657948d-a1f8-4e4c-98a3-2ef8f1bb601d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41115", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mi2f2secfe2l", "content": "", "creation_timestamp": "2026-03-27T15:00:05.235591Z"} 2026-03-27T15:00:05.235591+00:00