https://vulnerability.circl.lu/sightings/feed 2026-09-15T12:56:07.492141+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/63c0ce56-fa24-4236-a646-c05326094d30/export 2026-09-15T12:56:07.520516+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "63c0ce56-fa24-4236-a646-c05326094d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54334", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvkmuxhnfd2p", "content": "CVE-2026-54334 - uefi-firmware\nThe UEFI Firmware Parser has a flaw that can cause a crash or allow an attacker to run malicious code on a computer. This issue affects the UEFI Firmware Parser, a tool used\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#uefifirmware #pip #CVE #infosec", "creation_timestamp": "2026-09-15T12:30:05.693092Z"} 2026-09-15T12:30:05.693092+00:00 https://vulnerability.circl.lu/sighting/1ea17383-edd6-41ae-9daa-ce3be1775ba4/export 2026-09-15T12:56:07.522564+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1ea17383-edd6-41ae-9daa-ce3be1775ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54333", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvkmd4dx7d2t", "content": "CVE-2026-54333 - uefi-firmware\nThe UEFI Firmware Parser is prone to a critical flaw that can cause it to crash or be exploited by hackers. This is due to a bug in how it handles certain types of firmware\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#uefifirmware #pip #CVE #infosec", "creation_timestamp": "2026-09-15T12:20:06.744859Z"} 2026-09-15T12:20:06.744859+00:00 https://vulnerability.circl.lu/sighting/accbf4aa-af29-4b6b-af97-28560f254a9c/export 2026-09-15T12:56:07.522672+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "accbf4aa-af29-4b6b-af97-28560f254a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54334", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4qknfnk2j", "content": "\ud83d\udea8 CVE-2026-54334 \u2014 CVSS 9.8 CRITICAL\n\nUEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54334\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:08:38.150651Z"} 2026-09-14T22:08:38.150651+00:00 https://vulnerability.circl.lu/sighting/81d2629d-0c1f-41e7-ad61-4dcdd4ec8f01/export 2026-09-15T12:56:07.522752+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "81d2629d-0c1f-41e7-ad61-4dcdd4ec8f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54333", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvj4qbug6g2t", "content": "\ud83d\udea8 CVE-2026-54333 \u2014 CVSS 9.8 CRITICAL\n\nUEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54333\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T22:08:28.991962Z"} 2026-09-14T22:08:28.991962+00:00 https://vulnerability.circl.lu/sighting/ca8512b4-c756-4b89-9e50-999e39018052/export 2026-09-15T12:56:07.522834+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ca8512b4-c756-4b89-9e50-999e39018052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54334", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj35kwdxm2j", "content": "CVE-2026-54334 - uefi-firmware-parser\nVersions of the UEFI Firmware Parser before 1.14 can be fooled by specially crafted BIOS or firmware files. The parser may write beyond its internal memory area, causing the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#theopolis #CVE #infosec", "creation_timestamp": "2026-09-14T21:40:07.379900Z"} 2026-09-14T21:40:07.379900+00:00 https://vulnerability.circl.lu/sighting/242add09-5200-40f3-ab6d-4d8c0a2c0644/export 2026-09-15T12:56:07.522916+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "242add09-5200-40f3-ab6d-4d8c0a2c0644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54333", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvj35ir7hp2p", "content": "CVE-2026-54333 - uefi-firmware-parser\nThe UEFI Firmware Parser tool (versions before 1.14) can mishandle specially crafted firmware data, causing it to write past its own memory space. This can make the program\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#theopolis #CVE #infosec", "creation_timestamp": "2026-09-14T21:40:05.249945Z"} 2026-09-14T21:40:05.249945+00:00 https://vulnerability.circl.lu/sighting/230f579d-7e17-4fee-9249-af1185949cb7/export 2026-09-15T12:56:07.522997+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "230f579d-7e17-4fee-9249-af1185949cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54338", "type": "seen", "source": "https://gist.github.com/alon710/4b4569a59147cbf248fba613069c312c", "content": "# CVE-2026-54338: CVE-2026-54338: JupyterHub Unauthenticated Denial of Service via Unbounded Username Logging\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54338\n\n## Summary\nJupyterHub is vulnerable to an unauthenticated Denial of Service (DoS) vulnerability. Prior to version 5.5.0, form-based authenticators failed to restrict the size of the username input field on failed logins, allowing remote attackers to exhaust host storage and memory resources.\n\n## TL;DR\nUnauthenticated remote attackers can trigger a Denial of Service on JupyterHub by sending oversized username strings to form-based login endpoints, exhausting system log storage and server memory.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.00282 (Percentile: 20.17%)\n- **Impact**: Denial of Service, Log Injection\n- **Exploit Status**: None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- JupyterHub\n- **jupyterhub**: < 5.5.0 (Fixed in: `5.5.0`)\n\n## Mitigation\n\n- Upgrade to JupyterHub version 5.5.0 or later\n- Transition to third-party non-form authenticators like OAuthenticator\n- Apply reverse proxy rate limiting on the /hub/login route\n- Implement filesystem isolated log rotation and storage quotas\n\n**Remediation Steps:**\n1. Check current JupyterHub installation version using 'jupyterhub --version'\n2. Update JupyterHub deployment packages to version 5.5.0 or higher\n3. Restart the JupyterHub service to load the patched code paths\n4. Configure disk write quotas and log rotation for the logging volume\n\n## References\n\n- [GHSA-p43p-whwx-q52h](https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-p43p-whwx-q52h)\n- [Fix Commit](https://github.com/jupyterhub/jupyterhub/commit/d6dc595f84b7509969686da31d87d6d69e7fce0a)\n- [NVD Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54338)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-54338)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54338) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T20:33:25.238008Z"} 2026-08-25T20:33:25.238008+00:00 https://vulnerability.circl.lu/sighting/50553ce5-3795-4066-9fb1-7ee365d81f75/export 2026-09-15T12:56:07.523085+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "50553ce5-3795-4066-9fb1-7ee365d81f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54330", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiko2z7r2t", "content": "\ud83d\udc1b VULNERABILITIES (CVSS 8.2) CVE-2026-54330: \u2014 severity important \u2014 Red Hat Security Data (JSON)\nhttps://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-54330.json #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-20T14:49:42.531520Z"} 2026-08-20T14:49:42.531520+00:00 https://vulnerability.circl.lu/sighting/e8231d91-e67b-4356-965c-2b2554145ed0/export 2026-09-15T12:56:07.523158+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e8231d91-e67b-4356-965c-2b2554145ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54330", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26", "content": "\ud83d\udd17 CVE : CVE-2025-30156, CVE-2026-39944, CVE-2026-50152, CVE-2026-54330", "creation_timestamp": "2026-08-20T14:25:25.221992Z"} 2026-08-20T14:25:25.221992+00:00 https://vulnerability.circl.lu/sighting/c3f71b1a-b11a-4455-b9a5-006929cf3b0c/export 2026-09-15T12:56:07.523228+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "c3f71b1a-b11a-4455-b9a5-006929cf3b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54332", "type": "published-proof-of-concept", "source": "https://github.com/gopacket/gopacket/security/advisories/GHSA-g6v3-7xmc-w563", "content": "", "creation_timestamp": "2026-07-28T18:35:11.073817Z"} 2026-07-28T18:35:11.073817+00:00