https://vulnerability.circl.lu/sightings/feed 2026-07-08T21:43:18.321678+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/cfb3d0ce-6536-4ec4-9c59-08110eb15fd8/export 2026-07-08T21:43:18.357588+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cfb3d0ce-6536-4ec4-9c59-08110eb15fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55075", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq5m7qsymz26", "content": "CVE-2026-55075 - Authentication Bypass in Coder. OIDC login flaws enable account takeover. CVSS 7.4. Update to patched versions immediately. #CVE #Coder #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55075/", "creation_timestamp": "2026-07-08T17:07:39.234932Z"} 2026-07-08T17:07:39.234932+00:00 https://vulnerability.circl.lu/sighting/1ebbd1e7-0fe9-4b4a-8533-239a085693b4/export 2026-07-08T21:43:18.360208+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1ebbd1e7-0fe9-4b4a-8533-239a085693b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55076", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3wxaw4lr2k", "content": "CVE-2026-55076 - Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking\nCVE ID : CVE-2026-55076\n \n Published : July 7, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : Coder allows organizations to provision remote development ...", "creation_timestamp": "2026-07-08T01:14:25.716682Z"} 2026-07-08T01:14:25.716682+00:00 https://vulnerability.circl.lu/sighting/d3ac0d81-1f34-4506-b27a-079a70942448/export 2026-07-08T21:43:18.360365+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d3ac0d81-1f34-4506-b27a-079a70942448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55077", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3w4fg6mc2x", "content": "CVE-2026-55077 - Coder: User-admin role can reset owner account password\nCVE ID : CVE-2026-55077\n \n Published : July 7, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2...", "creation_timestamp": "2026-07-08T00:59:24.640065Z"} 2026-07-08T00:59:24.640065+00:00 https://vulnerability.circl.lu/sighting/3fdc1767-9ad3-4670-89a8-3332ed6a1186/export 2026-07-08T21:43:18.360489+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3fdc1767-9ad3-4670-89a8-3332ed6a1186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3vcs3yad2x", "content": "CVE-2026-55078 - Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service\nCVE ID : CVE-2026-55078\n \n Published : July 7, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : Coder allows organizations to provision remote development environments via...", "creation_timestamp": "2026-07-08T00:45:06.712277Z"} 2026-07-08T00:45:06.712277+00:00