https://vulnerability.circl.lu/sightings/feed 2026-10-12T03:53:37.283097+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5b744faa-3603-4784-b289-49ea1b869a9d/export 2026-10-12T03:53:37.309926+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5b744faa-3603-4784-b289-49ea1b869a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-01)", "content": "", "creation_timestamp": "2026-10-01T00:00:00.000000Z"} 2026-10-01T00:00:00+00:00 https://vulnerability.circl.lu/sighting/0190de0a-ce26-469c-9dd7-79bff3512ddf/export 2026-10-12T03:53:37.314989+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0190de0a-ce26-469c-9dd7-79bff3512ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71329", "type": "published-proof-of-concept", "source": "Telegram/CgpRoI0kd8VOnb4H1nysqmmlkbNCUVDObmHsawTqMaNU2Qs", "content": "", "creation_timestamp": "2026-08-13T00:00:43.627665Z"} 2026-08-13T00:00:43.627665+00:00 https://vulnerability.circl.lu/sighting/22fe8dc1-75c9-446e-a21f-4071e1e79af1/export 2026-10-12T03:53:37.315135+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "22fe8dc1-75c9-446e-a21f-4071e1e79af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71329", "type": "seen", "source": "Telegram/CgpRoI0kd8VOnb4H1nysqmmlkbNCUVDObmHsawTqMaNU2Qs", "content": "", "creation_timestamp": "2026-08-12T08:00:05.402631Z"} 2026-08-12T08:00:05.402631+00:00 https://vulnerability.circl.lu/sighting/b1247575-c740-44d2-ac42-e3302fed77ff/export 2026-10-12T03:53:37.315262+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b1247575-c740-44d2-ac42-e3302fed77ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msqfx3ek4u2k", "content": "CVE-2025-71324 is trending. Hype score 1, currently #9 on cvemon.\n\nFlowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-71324", "creation_timestamp": "2026-08-10T15:26:24.380711Z"} 2026-08-10T15:26:24.380711+00:00 https://vulnerability.circl.lu/sighting/07335ba8-6558-4de5-a9f5-911045be3499/export 2026-10-12T03:53:37.315373+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "07335ba8-6558-4de5-a9f5-911045be3499", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/15ad7e2f-6701-43c5-be22-74aeb0ba7c7a", "content": "", "creation_timestamp": "2026-08-04T01:01:04.353192Z"} 2026-08-04T01:01:04.353192+00:00 https://vulnerability.circl.lu/sighting/e22298a5-2bb1-4329-a42e-78df62e1babb/export 2026-10-12T03:53:37.315499+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e22298a5-2bb1-4329-a42e-78df62e1babb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3ac46ea-fc16-4463-8ef3-f6350ac3d27d", "content": "", "creation_timestamp": "2026-08-03T12:00:22.692059Z"} 2026-08-03T12:00:22.692059+00:00 https://vulnerability.circl.lu/sighting/e8af3cb8-f6ba-47d2-bca6-00dd399068c3/export 2026-10-12T03:53:37.315599+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e8af3cb8-f6ba-47d2-bca6-00dd399068c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71328", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqau4qb6y72k", "content": "\ud83d\udccc CVE-2025-71328 - Flowise before 3.0.10 contains an unverified password change vulnerability. An authenticated user can change their account password through the accoun... https://www.cyberhub.blog/cves/CVE-2025-71328", "creation_timestamp": "2026-07-10T00:07:07.140304Z"} 2026-07-10T00:07:07.140304+00:00 https://vulnerability.circl.lu/sighting/8c3f1ea5-51c6-48a9-bca2-a9daea9169c1/export 2026-10-12T03:53:37.315699+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8c3f1ea5-51c6-48a9-bca2-a9daea9169c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqash3io6f23", "content": "\ud83d\udccc CVE-2025-71324 - Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistant... https://www.cyberhub.blog/cves/CVE-2025-71324", "creation_timestamp": "2026-07-09T23:37:07.014602Z"} 2026-07-09T23:37:07.014602+00:00 https://vulnerability.circl.lu/sighting/45a17a4c-3e58-478e-bd78-e11c406eaeaf/export 2026-10-12T03:53:37.315797+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "45a17a4c-3e58-478e-bd78-e11c406eaeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71327", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mphzjf4nzk2g", "content": "\ud83d\udccc CVE-2025-71327 - Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to ... https://www.cyberhub.blog/cves/CVE-2025-71327", "creation_timestamp": "2026-06-30T03:07:07.025960Z"} 2026-06-30T03:07:07.025960+00:00 https://vulnerability.circl.lu/sighting/c43e00fb-e1c7-4051-8018-87b01640ef8e/export 2026-10-12T03:53:37.315892+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c43e00fb-e1c7-4051-8018-87b01640ef8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp673kg6ry2x", "content": "CVE-2025-71324 - Flowise - Arbitrary File Read via chatId Parameter\nCVE ID : CVE-2025-71324\n \n Published : June 25, 2026, 9:41 p.m. | 7\u00a0hours, 30\u00a0minutes ago\n \n Description : Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api...", "creation_timestamp": "2026-06-26T05:20:07.874342Z"} 2026-06-26T05:20:07.874342+00:00