https://vulnerability.circl.lu/sightings/feed 2026-07-22T19:39:15.050873+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7bdd234d-1fb1-494f-9e10-025f1fdf792c/export 2026-07-22T19:39:15.071684+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7bdd234d-1fb1-494f-9e10-025f1fdf792c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6yn5lbay2q", "content": "CVE-2026-64877 - Ticketing REST API SQL Injection Vulnerability\nCVE ID : CVE-2026-64877\n \n Published : July 21, 2026, 7:17 p.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensit...", "creation_timestamp": "2026-07-21T23:47:46.199984Z"} 2026-07-21T23:47:46.199984+00:00 https://vulnerability.circl.lu/sighting/c30ff31a-c891-4e14-bde5-f6dda3589ad9/export 2026-07-22T19:39:15.074157+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c30ff31a-c891-4e14-bde5-f6dda3589ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64878", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6ye6zujs23", "content": "CVE-2026-64878 - Command Injection\nCVE ID : CVE-2026-64878\n \n Published : July 21, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in remote code ex...", "creation_timestamp": "2026-07-21T23:42:44.537785Z"} 2026-07-21T23:42:44.537785+00:00 https://vulnerability.circl.lu/sighting/d51502b2-80a2-4456-a905-90aac61418ac/export 2026-07-22T19:39:15.074264+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d51502b2-80a2-4456-a905-90aac61418ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64879", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6xsbr2z722", "content": "CVE-2026-64879 - Command Injection\nCVE ID : CVE-2026-64879\n \n Published : July 21, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an attacker to i...", "creation_timestamp": "2026-07-21T23:32:43.367855Z"} 2026-07-21T23:32:43.367855+00:00 https://vulnerability.circl.lu/sighting/64ecbc1f-6c4e-4943-a40f-8a18218f0cf7/export 2026-07-22T19:39:15.074351+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "64ecbc1f-6c4e-4943-a40f-8a18218f0cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64879", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6pm2rbos24", "content": "CVE-2026-64879 - security center\nAdobe Acrobat's file upload feature does not properly check files for malicious content. This allows attackers to upload files that can execute system commands,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#securitycenter #tenable #CVE #infosec", "creation_timestamp": "2026-07-21T21:06:04.885081Z"} 2026-07-21T21:06:04.885081+00:00 https://vulnerability.circl.lu/sighting/8474b203-a14b-496d-8b9a-af49ffd02c1f/export 2026-07-22T19:39:15.074429+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8474b203-a14b-496d-8b9a-af49ffd02c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6piiv7552i", "content": "CVE-2026-64878 - security center\nAdobe Analytics has a vulnerability that allows attackers to execute malicious code. This could happen if an attacker sends specially crafted data to the Analysis REST\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#securitycenter #tenable #CVE #infosec", "creation_timestamp": "2026-07-21T21:04:05.549990Z"} 2026-07-21T21:04:05.549990+00:00 https://vulnerability.circl.lu/sighting/d935778e-76c0-4d42-a52a-7dcdc0573588/export 2026-07-22T19:39:15.074513+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d935778e-76c0-4d42-a52a-7dcdc0573588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64877", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6lxd6i4z2a", "content": "\ud83d\udd34 CVE-2026-64877 - Critical (9.6)\n\nAn authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to acc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-64877/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T20:00:48.403759Z"} 2026-07-21T20:00:48.403759+00:00 https://vulnerability.circl.lu/sighting/10ef1805-fe33-4ced-924d-ab752c458603/export 2026-07-22T19:39:15.074597+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "10ef1805-fe33-4ced-924d-ab752c458603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64877", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6lowlm3s2i", "content": "CVE-2026-64877\nA non-admin user with a legitimate account can access sensitive data by exploiting a weakness in the ticketing API. This could allow unauthorized access to confidential information. To protect against this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-21T19:56:06.034812Z"} 2026-07-21T19:56:06.034812+00:00 https://vulnerability.circl.lu/sighting/aa914682-971c-407f-802d-ab55a0f8d31a/export 2026-07-22T19:39:15.074682+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "aa914682-971c-407f-802d-ab55a0f8d31a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6487", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjp575ym2p26", "content": "", "creation_timestamp": "2026-04-17T14:30:27.532816Z"} 2026-04-17T14:30:27.532816+00:00