https://vulnerability.circl.lu/sightings/feed 2026-08-08T08:30:10.637820+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4efb999c-64b0-4527-8457-7fd54b6631d6/export 2026-08-08T08:30:10.665453+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4efb999c-64b0-4527-8457-7fd54b6631d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13697", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3ms77xhs5v52t", "content": "undici patched CVE-2026-13697. Responses with a malformed private directive such as Cache-Control: private=\"\" or private=\",\" were stored in the default shared cache and served to a later caller with the same key. One patch to lib/util/cache.js fixes it and a related parse-time crash. #dev", "creation_timestamp": "2026-08-03T19:23:59.783023Z"} 2026-08-03T19:23:59.783023+00:00 https://vulnerability.circl.lu/sighting/99592fc7-ad23-4417-b225-f0352a52a013/export 2026-08-08T08:30:10.668365+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "99592fc7-ad23-4417-b225-f0352a52a013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13697", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrsomyann62v", "content": "undici 7.0.0\uff5e7.28.0, 8.0.0\uff5e8.8.0\u3067\u3001\u4e0d\u6b63\u306aCache-Control\u30d8\u30c3\u30c0\u306b\u3088\u308a\u3001\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u60c5\u5831\uff08Set-Cookie\u7b49\uff09\u304c\u6f0f\u6d29\u3001\u307e\u305f\u306f\u30d7\u30ed\u30bb\u30b9\u304c\u7570\u5e38\u7d42\u4e86\u3059\u308b\u53ef\u80fd\u6027\u2026\nCVE-2026-13697 CVSS 7.4 | HIGH", "creation_timestamp": "2026-07-29T19:41:57.171805Z"} 2026-07-29T19:41:57.171805+00:00 https://vulnerability.circl.lu/sighting/882065c8-dd1e-4128-98b3-17f68e5e273a/export 2026-08-08T08:30:10.668541+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "882065c8-dd1e-4128-98b3-17f68e5e273a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13697", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrsefkx66k2c", "content": "\ud83d\udea8 High-severity security fix in undici@7.29.0 and undici@8.9.0 just released!\n\nPatches CVE-2026-13697: cross-user information disclosure and parse-time crash via degenerate private cache directives\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-07-29T16:38:52.617519Z"} 2026-07-29T16:38:52.617519+00:00 https://vulnerability.circl.lu/sighting/09f6cc08-c484-4c45-af3e-de9a2f321377/export 2026-08-08T08:30:10.668667+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "09f6cc08-c484-4c45-af3e-de9a2f321377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5lebm3qu2x", "content": "CVE-2026-13693 - Bit Form\nCVE ID : CVE-2026-13693\n \n Published : July 21, 2026, 7:16 a.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : The Bit Form WordPress plugin before 3.1.0 does not restrict a form file-field value to a safe path before reading the file and attaching it to ...", "creation_timestamp": "2026-07-21T10:17:29.181152Z"} 2026-07-21T10:17:29.181152+00:00 https://vulnerability.circl.lu/sighting/08a82dfe-9884-471d-b9f9-55635c4d224b/export 2026-08-08T08:30:10.668800+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "08a82dfe-9884-471d-b9f9-55635c4d224b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13694", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kag5gbv2e", "content": "CVE-2026-13694 - Bit Form\nCVE ID : CVE-2026-13694\n \n Published : July 21, 2026, 7:16 a.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allo...", "creation_timestamp": "2026-07-21T09:57:25.745346Z"} 2026-07-21T09:57:25.745346+00:00 https://vulnerability.circl.lu/sighting/dac5b5e1-c11e-4b05-92f6-49a82b2411ea/export 2026-08-08T08:30:10.668918+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dac5b5e1-c11e-4b05-92f6-49a82b2411ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13699", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2lcqx6uu2l", "content": "\u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05de\u05e2\u05e8\u05db\u05ea Databroker: CVE-2026-13699 \u05d5\u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea\n\n\n\nhttps://khesef.xyz/posts/BEE90738-3B21-4DBB-ABBE-02FC24C9A2C1", "creation_timestamp": "2026-07-20T05:38:38.551001Z"} 2026-07-20T05:38:38.551001+00:00 https://vulnerability.circl.lu/sighting/edd7345a-0e19-49ba-8414-a2e393a4b7bf/export 2026-08-08T08:30:10.669030+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "edd7345a-0e19-49ba-8414-a2e393a4b7bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13699", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lc5zd2z2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-13699 \u0432 Databroker 0.6.1: \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n\n\n\nhttps://kripta.biz/posts/87222FCD-0766-445C-A56E-27DF2A01669C", "creation_timestamp": "2026-07-20T05:38:18.947073Z"} 2026-07-20T05:38:18.947073+00:00 https://vulnerability.circl.lu/sighting/8302eded-4c7a-4e8d-836a-af609792690d/export 2026-08-08T08:30:10.669147+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8302eded-4c7a-4e8d-836a-af609792690d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13698", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mq7z2rkvbo2o", "content": "New HIGH CVE for OpenVPN: CVE-2026-13698\n\nA memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 client key to potentially cause a denial of s\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-13698", "creation_timestamp": "2026-07-09T16:02:50.530218Z"} 2026-07-09T16:02:50.530218+00:00 https://vulnerability.circl.lu/sighting/918f4514-593b-494c-aea8-ec8e26cdd65e/export 2026-08-08T08:30:10.669253+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "918f4514-593b-494c-aea8-ec8e26cdd65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2w5cnpd52v", "content": "CVE-2026-13696 - LDAP Injection in HAVELSAN's Liman MYS\nCVE ID : CVE-2026-13696\n \n Published : July 7, 2026, 12:16 p.m. | 2\u00a0hours, 58\u00a0minutes ago\n \n Description : Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc...", "creation_timestamp": "2026-07-07T15:27:15.572541Z"} 2026-07-07T15:27:15.572541+00:00 https://vulnerability.circl.lu/sighting/cef3487f-5fb7-45fa-9e2f-439cbafee090/export 2026-08-08T08:30:10.669362+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cef3487f-5fb7-45fa-9e2f-439cbafee090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13698", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyifa6m562w", "content": "CVE-2026-13698 - OpenVPN Memory Leak Denial of Service\nCVE ID : CVE-2026-13698\n \n Published : July 6, 2026, 3:16 p.m. | 31\u00a0minutes ago\n \n Description : A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attack...", "creation_timestamp": "2026-07-06T16:15:49.394076Z"} 2026-07-06T16:15:49.394076+00:00