https://vulnerability.circl.lu/sightings/feed 2026-07-12T17:40:22.327675+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/be2c8086-6542-424e-a0a1-35e1d72235fa/export 2026-07-12T17:40:22.351417+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "be2c8086-6542-424e-a0a1-35e1d72235fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49261", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplt2i3ser2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-49261 \u0432 MariaDB: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D1EA9C11-0D58-43DD-9D04-9A08B3FE8200", "creation_timestamp": "2026-07-01T15:22:03.129200Z"} 2026-07-01T15:22:03.129200+00:00 https://vulnerability.circl.lu/sighting/149c6ea7-19d0-4c6d-9bfc-1f1e417cb97c/export 2026-07-12T17:40:22.354396+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "149c6ea7-19d0-4c6d-9bfc-1f1e417cb97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49261", "type": "seen", "source": "https://dnsc.ro/citeste/alerta-vulnerabilitate-critica-in-mariadb", "content": "", "creation_timestamp": "2026-07-01T13:15:07.420783Z"} 2026-07-01T13:15:07.420783+00:00 https://vulnerability.circl.lu/sighting/942b294b-5978-43b6-9dc7-72352f203885/export 2026-07-12T17:40:22.355262+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "942b294b-5978-43b6-9dc7-72352f203885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49260", "type": "published-proof-of-concept", "source": "https://github.com/pontedilana/php-weasyprint/security/advisories/GHSA-f5gc-qxf8-mh9g", "content": "", "creation_timestamp": "2026-06-26T22:35:24.955418Z"} 2026-06-26T22:35:24.955418+00:00 https://vulnerability.circl.lu/sighting/451f77d3-1a44-4d60-85d0-47dd15cc2c3e/export 2026-07-12T17:40:22.355340+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "451f77d3-1a44-4d60-85d0-47dd15cc2c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49262", "type": "published-proof-of-concept", "source": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789", "content": "", "creation_timestamp": "2026-06-26T22:35:22.550967Z"} 2026-06-26T22:35:22.550967+00:00 https://vulnerability.circl.lu/sighting/3fb7c4e4-7d93-485e-9a64-909058aedcac/export 2026-07-12T17:40:22.355405+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3fb7c4e4-7d93-485e-9a64-909058aedcac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49261", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnd7x2442e", "content": "\ud83d\udea8 ALERT: CVE-2026-49261\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nMariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embed", "creation_timestamp": "2026-06-22T00:35:40.356951Z"} 2026-06-22T00:35:40.356951+00:00 https://vulnerability.circl.lu/sighting/bddcb6c3-9927-4dc9-8076-5d794a1f93d3/export 2026-07-12T17:40:22.355476+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bddcb6c3-9927-4dc9-8076-5d794a1f93d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49268", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motn3qrabg2r", "content": "\ud83d\udea8 ALERT: CVE-2026-49268\n\nCVSS 9.1/10\n\n\ud83d\udccb WHAT IT IS:\nA remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated into the LDAP DN template without any escaping of RFC 2253 special ", "creation_timestamp": "2026-06-22T00:31:29.516680Z"} 2026-06-22T00:31:29.516680+00:00 https://vulnerability.circl.lu/sighting/ae81ec21-e385-4ef6-a407-65cb6e3660bc/export 2026-07-12T17:40:22.355541+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ae81ec21-e385-4ef6-a407-65cb6e3660bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49260", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3monvvf7aa22k", "content": "CVE-2026-49260 - PhpWeasyPrint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc)\nCVE ID : CVE-2026-49260\n \n Published : June 19, 2026, 4:59 p.m. | 44\u00a0minutes ago\n \n Description ...", "creation_timestamp": "2026-06-19T17:53:01.488925Z"} 2026-06-19T17:53:01.488925+00:00 https://vulnerability.circl.lu/sighting/86ce5027-bff0-414b-8fdb-98b3e6938875/export 2026-07-12T17:40:22.355652+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "86ce5027-bff0-414b-8fdb-98b3e6938875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49268", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3molcr4tjop2y", "content": "Apache Shiro patched CVE-2026-49268: DefaultLdapRealm did not escape RFC 2253 special characters in usernames, allowing LDAP DN injection. Fixed in 2.2.1 and 3.0.0-alpha-2. Input that flows into a directory query needs escaping every time. When did you last audit your Shiro realm config?\n\n#security", "creation_timestamp": "2026-06-18T17:05:17.919201Z"} 2026-06-18T17:05:17.919201+00:00 https://vulnerability.circl.lu/sighting/554a69ec-6a0e-489d-9f25-c3f8d8d69bcf/export 2026-07-12T17:40:22.355730+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "554a69ec-6a0e-489d-9f25-c3f8d8d69bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49261", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moj7khktkw2v", "content": "\ud83d\udea8 HIGH: CVE-2026-49261\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nMariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedde", "creation_timestamp": "2026-06-17T21:02:33.671660Z"} 2026-06-17T21:02:33.671660+00:00 https://vulnerability.circl.lu/sighting/646b3242-6c88-49eb-b382-8d5c62a1f478/export 2026-07-12T17:40:22.355798+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "646b3242-6c88-49eb-b382-8d5c62a1f478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49261", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moip27mboh2e", "content": "\ud83d\udccc CVE-2026-49261 - MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.... https://www.cyberhub.blog/cves/CVE-2026-49261", "creation_timestamp": "2026-06-17T16:07:09.234241Z"} 2026-06-17T16:07:09.234241+00:00