https://vulnerability.circl.lu/sightings/feed 2026-08-14T05:33:44.962667+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/955bf29e-84b6-4d2c-bf27-2169c8ebf8f2/export 2026-08-14T05:33:44.996853+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "955bf29e-84b6-4d2c-bf27-2169c8ebf8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71201", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3r2rzs5rcn4ns", "content": "[OSSA-2026-033] Ironic Portgroup shard filter bypasses project scope (CVE-2026-71201)", "creation_timestamp": "2026-08-05T16:32:14.755633Z"} 2026-08-05T16:32:14.755633+00:00 https://vulnerability.circl.lu/sighting/fd9f305d-a150-4717-8877-4bcf97ae3b37/export 2026-08-14T05:33:44.999093+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fd9f305d-a150-4717-8877-4bcf97ae3b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71206", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117042587175345568", "content": "CVE-2026-71206 - Auth flaw in Shiori. Deleted/demoted users keep owner-level access via unrevoked JWT tokens. CVSS 8.3. No patch yet. Audit and rotate tokens immediately. #CVE #infosec #Shiori\nhttps://www.valtersit.com/cve/CVE-2026-71206/", "creation_timestamp": "2026-08-05T11:09:14.844772Z"} 2026-08-05T11:09:14.844772+00:00 https://vulnerability.circl.lu/sighting/3cbd033e-f82a-4b13-9d98-611fe2759427/export 2026-08-14T05:33:44.999238+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3cbd033e-f82a-4b13-9d98-611fe2759427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71206", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msdfahr6m52a", "content": "CVE-2026-71206 - Auth flaw in Shiori. Deleted/demoted users keep owner-level access via unrevoked JWT tokens. CVSS 8.3. No patch yet. Audit and rotate tokens immediately. #CVE #infosec #Shiori\n\nhttps://www.valtersit.com/cve/CVE-2026-71206/", "creation_timestamp": "2026-08-05T11:09:08.810415Z"} 2026-08-05T11:09:08.810415+00:00 https://vulnerability.circl.lu/sighting/29723980-23df-4cd8-b298-692612d05b37/export 2026-08-14T05:33:44.999346+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "29723980-23df-4cd8-b298-692612d05b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71207", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msd7b22cji2a", "content": "CVE-2026-71207\nAn attacker can log in without a password by submitting a special input to the login form. This is because the system doesn't properly check user input. Additionally, the system has hardcoded admin credentials\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T09:22:05.453061Z"} 2026-08-05T09:22:05.453061+00:00 https://vulnerability.circl.lu/sighting/a06df1e8-53bd-4538-99ba-b4bf1e41e3b9/export 2026-08-14T05:33:44.999445+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a06df1e8-53bd-4538-99ba-b4bf1e41e3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7120", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrbtkns52k2t", "content": "\ud83d\udea8 Medium-severity security fix in @fastify/static@10.1.2 just released!\n\nPatches CVE-2026-7120: @fastify/static vulnerable to authorization bypass via non-canonical URL paths.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-07-23T02:54:54.077666Z"} 2026-07-23T02:54:54.077666+00:00