https://vulnerability.circl.lu/sightings/feed 2026-07-04T14:12:12.706692+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d481869a-19ca-4d49-afaf-65683bce3023/export 2026-07-04T14:12:12.727897+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d481869a-19ca-4d49-afaf-65683bce3023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3mpszfmkkxc2i", "content": "phpBB PTT-2026-004 (CVE-2026-48611) requires a single unauthenticated HTTP request and works on default phpBB installations. PTT-2026-005 (CVE-2026-48612) requires phpBB to have OAuth configured", "creation_timestamp": "2026-07-04T12:04:19.711743Z"} 2026-07-04T12:04:19.711743+00:00 https://vulnerability.circl.lu/sighting/7319d9bc-6449-4159-b52e-056794429778/export 2026-07-04T14:12:12.730032+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7319d9bc-6449-4159-b52e-056794429778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqpiqcc2k", "content": "\ud83d\udc49 PTT-2026-005 (CVE-2026-48612, 8.3): the PoC walks through the silent OAuth account takeover, including the case where the victim only has to load a forum post for the chain to fire.\n\npentest-tools.com/research/php...", "creation_timestamp": "2026-07-04T09:29:30.522452Z"} 2026-07-04T09:29:30.522452+00:00 https://vulnerability.circl.lu/sighting/78541b82-b6e5-4d2a-b8b2-02f924c7154a/export 2026-07-04T14:12:12.730131+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "78541b82-b6e5-4d2a-b8b2-02f924c7154a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqogfo22k", "content": "\ud83d\udc49 PTT-2026-005 (CVE-2026-48612, 8.3): the PoC walks through the silent OAuth account takeover, including the case where the victim only has to load a forum post for the chain to fire.\n\npentest-tools.com/research/php...", "creation_timestamp": "2026-07-04T09:29:29.641412Z"} 2026-07-04T09:29:29.641412+00:00 https://vulnerability.circl.lu/sighting/22ea5dd0-eceb-497e-bfb1-d06a70566caa/export 2026-07-04T14:12:12.730203+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "22ea5dd0-eceb-497e-bfb1-d06a70566caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpsqqmdovk2k", "content": "\ud83d\udc49 PTT-2026-005 (CVE-2026-48612, 8.3): the PoC walks through the silent OAuth account takeover, including the case where the victim only has to load a forum post for the chain to fire.\n\npentest-tools.com/research/php...", "creation_timestamp": "2026-07-04T09:29:28.792217Z"} 2026-07-04T09:29:28.792217+00:00 https://vulnerability.circl.lu/sighting/3b555532-28e3-4f57-8a1b-66af8593f46c/export 2026-07-04T14:12:12.730274+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3b555532-28e3-4f57-8a1b-66af8593f46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2yjlei6u2g", "content": "CVE-2026-48612 - Okta OAuth Account Linking Vulnerability\nCVE ID : CVE-2026-48612\n \n Published : June 12, 2026, 4:17 a.m. | 49\u00a0minutes ago\n \n Description : Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and...", "creation_timestamp": "2026-06-12T05:19:31.512339Z"} 2026-06-12T05:19:31.512339+00:00 https://vulnerability.circl.lu/sighting/5bda4f31-974d-4e84-b75f-80c6556604a8/export 2026-07-04T14:12:12.730343+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5bda4f31-974d-4e84-b75f-80c6556604a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48612", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2xh6tipn24", "content": "\ud83d\udfe0 CVE-2026-48612 - High (8)\n\nImproper state verification in the OAuth implementation could allow an attacker to manipulate the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48612/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T05:00:18.538046Z"} 2026-06-12T05:00:18.538046+00:00