https://vulnerability.circl.lu/sightings/feed 2026-07-21T16:33:05.859313+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/09ae558e-5db4-4b60-b467-9d409987787c/export 2026-07-21T16:33:05.885226+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "09ae558e-5db4-4b60-b467-9d409987787c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3y52bqdc2o", "content": "CVE-2026-58413 - EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data\nCVE ID : CVE-2026-58413\n \n Published : July 20, 2026, 5:18 p.m. | 26\u00a0minutes ago\n \n Description : Network-AI is a TypeScript/Node.js multi-agent orchestrat...", "creation_timestamp": "2026-07-20T19:00:45.586459Z"} 2026-07-20T19:00:45.586459+00:00 https://vulnerability.circl.lu/sighting/78400643-de60-458e-9b39-e4b8c972417a/export 2026-07-21T16:33:05.886808+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "78400643-de60-458e-9b39-e4b8c972417a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3x7ptn7q2g", "content": "CVE-2026-58414 - Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups\nCVE ID : CVE-2026-58414\n \n Published : July 20, 2026, 5:18 p.m. | 26\u00a0minutes ago\n \n Description : Network-AI is a TypeScript/Node.j...", "creation_timestamp": "2026-07-20T18:44:21.430785Z"} 2026-07-20T18:44:21.430785+00:00 https://vulnerability.circl.lu/sighting/44e7bc37-a045-4cf6-a82c-153333ac4931/export 2026-07-21T16:33:05.886941+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "44e7bc37-a045-4cf6-a82c-153333ac4931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkoxhvhd42i", "content": "CVE-2026-58410 - ChurchCRM: Improper object-level authorization allows low-privileged users to read and modify other families\u2019 records\nCVE ID : CVE-2026-58410\n \n Published : July 13, 2026, 9:16 p.m. | 13\u00a0minutes ago\n \n Description : ChurchCRM is an open-source church managemen...", "creation_timestamp": "2026-07-13T22:01:19.257188Z"} 2026-07-13T22:01:19.257188+00:00 https://vulnerability.circl.lu/sighting/f6336900-8d30-4986-b403-81dba91bd54b/export 2026-07-21T16:33:05.887047+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f6336900-8d30-4986-b403-81dba91bd54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58411", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqknjwttsh2z", "content": "CVE-2026-58411 - ChurchCRM has Reflected Cross-Site Scripting (XSS) via unsanitized request parameter names and values\nCVE ID : CVE-2026-58411\n \n Published : July 13, 2026, 9:05 p.m. | 24\u00a0minutes ago\n \n Description : ChurchCRM is an open-source church management system. Prior ...", "creation_timestamp": "2026-07-13T21:35:51.567356Z"} 2026-07-13T21:35:51.567356+00:00 https://vulnerability.circl.lu/sighting/8a063212-3860-4476-9205-69a14967dc13/export 2026-07-21T16:33:05.887156+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8a063212-3860-4476-9205-69a14967dc13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58418", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpryzvcfgb2l", "content": "CVE-2026-58418 - SSRF via HTTP Redirect in Repository Migration\nCVE ID : CVE-2026-58418\n \n Published : July 3, 2026, 8:54 p.m. | 3\u00a0hours, 19\u00a0minutes ago\n \n Description : SSRF via HTTP Redirect in Repository Migration\n \n Severity: 0.0 | NA\n \n Visit the link for more details, su...", "creation_timestamp": "2026-07-04T02:25:07.973559Z"} 2026-07-04T02:25:07.973559+00:00 https://vulnerability.circl.lu/sighting/fc9ba2fe-a518-49f7-bc9e-f6fd9360b25d/export 2026-07-21T16:33:05.887257+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fc9ba2fe-a518-49f7-bc9e-f6fd9360b25d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mprybxveca2a", "content": "CVE-2026-58419 - Notification API leaks private issue metadata after access revocation\nCVE ID : CVE-2026-58419\n \n Published : July 3, 2026, 8:54 p.m. | 3\u00a0hours, 19\u00a0minutes ago\n \n Description : Notification API leaks private issue metadata after access revocation\n \n Severity: 0...", "creation_timestamp": "2026-07-04T02:11:41.753274Z"} 2026-07-04T02:11:41.753274+00:00 https://vulnerability.circl.lu/sighting/1bd282d7-5dd4-484e-aecf-024bd8c6526b/export 2026-07-21T16:33:05.887359+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1bd282d7-5dd4-484e-aecf-024bd8c6526b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5841", "type": "published-proof-of-concept", "source": "Telegram/PMg85ruQxGJV3fewnx4iF85fyDu3eKOw9onWzzjaoGbfReM", "content": "", "creation_timestamp": "2026-04-09T07:17:08.000000Z"} 2026-04-09T07:17:08+00:00 https://vulnerability.circl.lu/sighting/77ed3978-7532-4d2e-8791-ee62a4356150/export 2026-07-21T16:33:05.887456+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "77ed3978-7532-4d2e-8791-ee62a4356150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5841", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5841", "content": "", "creation_timestamp": "2026-04-08T20:16:06.000000Z"} 2026-04-08T20:16:06+00:00