https://vulnerability.circl.lu/sightings/feed 2026-08-15T09:25:18.811163+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/356baa5f-7aba-45dc-b998-d03521782b48/export 2026-08-15T09:25:18.837488+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "356baa5f-7aba-45dc-b998-d03521782b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56139\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 10:39:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC reproducer for CVE-2026-56139 (Apache Camel camel-undertow Rest DSL): the Rest DSL binding hard-codes muteException=false, so a configured muteException=true is ignored and an uncaught exception's full stack trace is returned to the client (CWE-209). Fixed in 4.14.8/4.18.3/4.21.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:11.950468Z"} 2026-07-24T00:00:11.950468+00:00 https://vulnerability.circl.lu/sighting/3aaa7a94-4aa7-4b9a-97e0-7745dd9ea03a/export 2026-08-15T09:25:18.839848+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3aaa7a94-4aa7-4b9a-97e0-7745dd9ea03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://t.me/GithubRedTeam/94636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56139\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 10:39:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC reproducer for CVE-2026-56139 (Apache Camel camel-undertow Rest DSL): the Rest DSL binding hard-codes muteException=false, so a configured muteException=true is ignored and an uncaught exception's full stack trace is returned to the client (CWE-209). Fixed in 4.14.8/4.18.3/4.21.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:05.492217Z"} 2026-07-23T04:00:05.492217+00:00 https://vulnerability.circl.lu/sighting/a414092f-cafa-4bb6-9198-b07132189f4a/export 2026-08-15T09:25:18.839970+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a414092f-cafa-4bb6-9198-b07132189f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "published-proof-of-concept", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-23T00:00:10.200876Z"} 2026-07-23T00:00:10.200876+00:00 https://vulnerability.circl.lu/sighting/7ba0a30d-387b-49d5-8eb1-7a98e6731dec/export 2026-08-15T09:25:18.840064+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7ba0a30d-387b-49d5-8eb1-7a98e6731dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-22T17:00:04.292201Z"} 2026-07-22T17:00:04.292201+00:00 https://vulnerability.circl.lu/sighting/2b6c0abe-aebe-47de-ad32-9a16ac85c4fb/export 2026-08-15T09:25:18.840150+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2b6c0abe-aebe-47de-ad32-9a16ac85c4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6qezu4n627", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56139 \u0432 Apache: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u0443\u0442\u0435\u0447\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445\n\n\n\nhttps://kripta.biz/posts/B20A37FC-4048-412D-A98A-4C0A5AF345D3", "creation_timestamp": "2026-07-09T03:54:50.978043Z"} 2026-07-09T03:54:50.978043+00:00 https://vulnerability.circl.lu/sighting/38a5b89b-0cbb-4c4f-a283-f1674bafe492/export 2026-08-15T09:25:18.840247+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "38a5b89b-0cbb-4c4f-a283-f1674bafe492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpxzvulgha26", "content": "CVE-2026-56139 - Apache Camel Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients\nCVE ID : CVE-2026-56139\n \n Pub...", "creation_timestamp": "2026-07-06T11:56:41.536606Z"} 2026-07-06T11:56:41.536606+00:00 https://vulnerability.circl.lu/sighting/9bb18ac5-95c5-4468-8e00-b70146626339/export 2026-08-15T09:25:18.840334+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9bb18ac5-95c5-4468-8e00-b70146626339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwgwa3ch52o", "content": "CVE-2026-56139: Apache Camel: Camel-Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients - and the option was not honoured", "creation_timestamp": "2026-07-05T20:44:12.884112Z"} 2026-07-05T20:44:12.884112+00:00