https://vulnerability.circl.lu/sightings/feed 2026-10-07T23:47:47.202384+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/78fa6f57-cf6c-4592-bc85-efb457ffc6aa/export 2026-10-07T23:47:47.223731+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "78fa6f57-cf6c-4592-bc85-efb457ffc6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/CyberDispatch/2093", "content": "A 1997 parser bug is still haunting Squid.\n\nSquidbleed (CVE-2026-47729) can leak another user\u2019s cleartext HTTP request through a shared Squid proxy, including credentials or session tokens.", "creation_timestamp": "2026-08-29T20:00:08.992220Z"} 2026-08-29T20:00:08.992220+00:00 https://vulnerability.circl.lu/sighting/3e8a926c-c5a9-41bc-8662-257bb1715f72/export 2026-10-07T23:47:47.227193+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3e8a926c-c5a9-41bc-8662-257bb1715f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/pphm_HackerNews/1608", "content": "\ud83d\udd34 Squidbleed: 29-Year-Old Squid Bug Leaks User Credentials\n\nSquidbleed is a 29-year-old Squid Proxy flaw that can leak credentials, tokens, and other users\u2019 HTTP data through a memory overread.\n\nResearchers at Calif.io have disclosed CVE-2026-47729, a memory leak vulnerability in Squid Proxy that was introduced in 1997 and has remained undetected through nearly three decades of releases, audits, and rewrites. \n\nThey named it Squidbleed because it works like Heartbleed: it causes the proxy to read past the end of a memory buffer and hand the contents to whoever asked.\n\n\u201cThe bug occurs when no filename is provided after the modification timestamp.\u201d reads the report published by the researchers.", "creation_timestamp": "2026-08-21T23:00:11.531967Z"} 2026-08-21T23:00:11.531967+00:00 https://vulnerability.circl.lu/sighting/f3f6a214-ec39-4ace-b715-7ffe6f94e458/export 2026-10-07T23:47:47.227530+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f3f6a214-ec39-4ace-b715-7ffe6f94e458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3msy2syzrtt25", "content": "Squidbleed (CVE-2026-47729) - Heartbleed-style vulnerability that leaks internal memory from every version of Squid Proxy, in its default configuration", "creation_timestamp": "2026-08-13T16:28:34.584391Z"} 2026-08-13T16:28:34.584391+00:00 https://vulnerability.circl.lu/sighting/b7124b3e-8d0f-40d2-bbd2-41ca97797f46/export 2026-10-07T23:47:47.227781+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b7124b3e-8d0f-40d2-bbd2-41ca97797f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2764", "content": "Squidbleed (CVE-2026-47729): A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid\n\nOriginal text: \u201cSquidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)\u201d \u2014 Dark Web Informer (June 24, 2026). This is an independent technical write-up of the same vulnerability. The code samples below are original, illustrative reconstructions written for this article \u2014 they demonstrate the bug class and are not copied from the Squid\u2026\n\nhttps://core-jmp.org/2026/06/squidbleed-cve-2026-47729-squid-ftp-heap-over-read/", "creation_timestamp": "2026-07-28T22:00:05.807582Z"} 2026-07-28T22:00:05.807582+00:00 https://vulnerability.circl.lu/sighting/4ec2025e-b2f2-4004-84c5-1a761832800a/export 2026-10-07T23:47:47.228001+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4ec2025e-b2f2-4004-84c5-1a761832800a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/zhatez/2764", "content": "Squidbleed (CVE-2026-47729): A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid\n\nOriginal text: \u201cSquidbleed: A 29-Year-Old Heap Over-Read Leaks Cleartext HTTP in Squid (CVE-2026-47729)\u201d \u2014 Dark Web Informer (June 24, 2026). This is an independent technical write-up of the same vulnerability. The code samples below are original, illustrative reconstructions written for this article \u2014 they demonstrate the bug class and are not copied from the Squid\u2026\n\nhttps://core-jmp.org/2026/06/squidbleed-cve-2026-47729-squid-ftp-heap-over-read/", "creation_timestamp": "2026-07-26T07:01:46.183548Z"} 2026-07-26T07:01:46.183548+00:00 https://vulnerability.circl.lu/sighting/fb1fd7fd-bc2f-4497-b544-4e21f442f52e/export 2026-10-07T23:47:47.228216+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fb1fd7fd-bc2f-4497-b544-4e21f442f52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47724", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdtlla4y72g", "content": "\ud83d\udd34 CVE-2026-47724 - Critical (9.9)\n\nnebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47724/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T22:00:42.831343Z"} 2026-07-23T22:00:42.831343+00:00 https://vulnerability.circl.lu/sighting/59c22367-8786-4282-8f38-a9c8d1260459/export 2026-10-07T23:47:47.228420+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "59c22367-8786-4282-8f38-a9c8d1260459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47724", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdq3lhsox2k", "content": "CVE-2026-47724 - juev\nNon-admin operators can create admin API keys, giving them broad access to other tenants. This can happen when an API key is used to call the `/api/v1/operators//api-keys`\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#juev #Golang #CVE #infosec", "creation_timestamp": "2026-07-23T20:58:04.402068Z"} 2026-07-23T20:58:04.402068+00:00 https://vulnerability.circl.lu/sighting/70c37a2b-c62c-4c23-9862-40775ef95465/export 2026-10-07T23:47:47.228632+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "70c37a2b-c62c-4c23-9862-40775ef95465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/thehackernews/9301", "content": "\ud83e\udd2f A 1997 parser bug is still haunting Squid.\n\nSquidbleed (CVE-2026-47729) can leak another user\u2019s cleartext HTTP request through a shared Squid proxy, including credentials or session tokens.\n\nRead \ud83e\udc16 https://thehackernews.com/2026/06/29-year-old-squid-proxy-bug-squidbleed.html", "creation_timestamp": "2026-07-15T12:00:04.342798Z"} 2026-07-15T12:00:04.342798+00:00 https://vulnerability.circl.lu/sighting/07ba5eb0-8ff3-45ae-975d-d2eb12bee79e/export 2026-10-07T23:47:47.228827+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "07ba5eb0-8ff3-45ae-975d-d2eb12bee79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3263", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 strchr() \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-08611\nCVE-2026-47729\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid:\nhttps://github.com/squid-cache/squid/releases/tag/SQUID_7_6\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-47729\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/CVE-2026-47729", "creation_timestamp": "2026-07-15T00:00:34.723600Z"} 2026-07-15T00:00:34.723600+00:00 https://vulnerability.circl.lu/sighting/0addc682-d08f-4c0d-8abb-e0ae5470d7d3/export 2026-10-07T23:47:47.229057+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0addc682-d08f-4c0d-8abb-e0ae5470d7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47729", "type": "seen", "source": "https://t.me/bdufstecru/3263", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 strchr() \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-08611\nCVE-2026-47729\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Squid:\nhttps://github.com/squid-cache/squid/releases/tag/SQUID_7_6\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-47729\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/CVE-2026-47729", "creation_timestamp": "2026-07-14T01:00:05.495035Z"} 2026-07-14T01:00:05.495035+00:00