https://vulnerability.circl.lu/sightings/feed 2026-08-06T04:43:02.878410+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/540e8a17-e2ed-454c-90e7-db69cce3f290/export 2026-08-06T04:43:02.901048+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "540e8a17-e2ed-454c-90e7-db69cce3f290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfutk4u62a", "content": "CVE-2026-52891\nWekan's avatar upload feature allows hackers to execute server commands if they upload a file with malicious characters. This is a security risk because it could allow hackers to take control of your server. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:18:04.274959Z"} 2026-07-18T04:18:04.274959+00:00 https://vulnerability.circl.lu/sighting/534b1c66-1e5d-466c-97ee-b40d87f6fa54/export 2026-08-06T04:43:02.904416+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "534b1c66-1e5d-466c-97ee-b40d87f6fa54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpyal2izp2s", "content": "CVE-2026-52891 - Wekan: Shell Injection via Avatar Upload\nCVE ID : CVE-2026-52891\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : Wekan is open source kanban built with Meteor. Prior to 9.07, Wekan avatar upload functionality embeds user-supplied fil...", "creation_timestamp": "2026-07-16T00:30:46.914649Z"} 2026-07-16T00:30:46.914649+00:00 https://vulnerability.circl.lu/sighting/33875bd1-2c6b-4cd7-9d2a-5d5f4227abe6/export 2026-08-06T04:43:02.904570+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "33875bd1-2c6b-4cd7-9d2a-5d5f4227abe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxqavaqm2i", "content": "CVE-2026-52893 - Wekan: OIDC Account Takeover via Unconditional Email-Based Account Merge in onCreateUser hook\nCVE ID : CVE-2026-52893\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : Wekan is open source kanban built with Meteor. Prior to 9.32, the W...", "creation_timestamp": "2026-07-16T00:21:39.248994Z"} 2026-07-16T00:21:39.248994+00:00 https://vulnerability.circl.lu/sighting/485fa4cc-40f8-4b15-be09-c61c09a6d2dc/export 2026-08-06T04:43:02.904671+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "485fa4cc-40f8-4b15-be09-c61c09a6d2dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52893", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqptj4dkuq2w", "content": "CVE-2026-52893 - wekan\nWekan users are at risk if their email address is shared with an attacker using an OpenID Connect (OIDC) account. This vulnerability is fixed in Wekan version 9.32, so update to the latest\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wekan #CVE #infosec", "creation_timestamp": "2026-07-15T23:06:04.667647Z"} 2026-07-15T23:06:04.667647+00:00 https://vulnerability.circl.lu/sighting/d9b24df5-b0bc-434e-b83f-41d64a088c0c/export 2026-08-06T04:43:02.904770+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d9b24df5-b0bc-434e-b83f-41d64a088c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5spsbr25", "content": "CVE-2026-52891 - wekan\nWekan, an open source project management tool, allows attackers to execute commands on the server by uploading a malicious avatar with special characters. This can lead to unauthorized access and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wekan #CVE #infosec", "creation_timestamp": "2026-07-15T22:06:04.313239Z"} 2026-07-15T22:06:04.313239+00:00 https://vulnerability.circl.lu/sighting/10497d60-0a3b-42be-8c6d-b824dcdeaae3/export 2026-08-06T04:43:02.904869+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "10497d60-0a3b-42be-8c6d-b824dcdeaae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"} 2026-04-14T15:49:19+00:00 https://vulnerability.circl.lu/sighting/5052afc8-fccc-4eb3-9d33-e83680d28770/export 2026-08-06T04:43:02.904971+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "5052afc8-fccc-4eb3-9d33-e83680d28770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"} 2026-04-12T20:00:00+00:00 https://vulnerability.circl.lu/sighting/89150368-deb4-4b45-b8c5-5e6448fa920c/export 2026-08-06T04:43:02.906765+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "89150368-deb4-4b45-b8c5-5e6448fa920c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mitfqm3ajc2c", "content": "", "creation_timestamp": "2026-04-06T13:48:51.145248Z"} 2026-04-06T13:48:51.145248+00:00 https://vulnerability.circl.lu/sighting/1b7586fd-23b2-4bbd-aabf-3a20dacc3679/export 2026-08-06T04:43:02.906895+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "1b7586fd-23b2-4bbd-aabf-3a20dacc3679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"} 2026-04-02T17:00:00+00:00 https://vulnerability.circl.lu/sighting/47ec929a-8c4d-4521-a257-f0da66ddc939/export 2026-08-06T04:43:02.907005+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "47ec929a-8c4d-4521-a257-f0da66ddc939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"} 2026-04-01T18:00:00+00:00