https://vulnerability.circl.lu/sightings/feed 2026-09-16T23:16:12.916374+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bd60572a-ba9a-4e53-a80d-74afc1455c1a/export 2026-09-16T23:16:12.946997+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bd60572a-ba9a-4e53-a80d-74afc1455c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78330", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvjtvawti425", "content": "Daily IT Security Digest \u2014 2026-09-15\nof 230 fixes. Chrome users should update to the latest version immediately. Source: @offseq@infosec.exchange \u2014 https://infosec.exchange/@offseq/117239907946637236\n\n## 6. Apache Syncope Admin Escalation via JWKS (CRITICAL)\n\nCVE-2026-78330 is a critical", "creation_timestamp": "2026-09-15T05:02:51.908670Z"} 2026-09-15T05:02:51.908670+00:00 https://vulnerability.circl.lu/sighting/4554399e-ca6a-42be-8d42-381264c1fab9/export 2026-09-16T23:16:12.950059+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4554399e-ca6a-42be-8d42-381264c1fab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78330", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjs3hr62f2e", "content": "Apache Syncope faces a CRITICAL privilege escalation flaw (CVE-2026-78330) when JWKS is exposed. Versions 3.0.0-M0 \u2013 3.0.16, 4.0.0-M0 \u2013 4.0.7, 4.1.0-M0 \u2013 4.1.2 affected. Upgrade to 4.0.8/4.1.3 ASAP. https://radar.offseq.com/threat/incorrect-privilege-assignment-vulnerability-in-apache-syncope-cve...", "creation_timestamp": "2026-09-15T04:30:33.743973Z"} 2026-09-15T04:30:33.743973+00:00 https://vulnerability.circl.lu/sighting/87d18b01-19b3-41c6-ae4b-b6f787fd2504/export 2026-09-16T23:16:12.950397+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "87d18b01-19b3-41c6-ae4b-b6f787fd2504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78330", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117273174374332264", "content": "CVE-2026-78330 | CRITICAL: Apache Syncope vuln allows admin escalation if JWKS is exposed and JWT auth used. Affects 3.0.0-M0 \u2013 3.0.16, 4.0.0-M0 \u2013 4.0.7, 4.1.0-M0 \u2013 4.1.2. Upgrade to 4.0.8/4.1.3 to mitigate. Details: https://radar.offseq.com/threat/incorrect-privilege-assignment-vulnerability-in-apache-syncope-cve-2026-78330-b2c023a1d947f76b #OffSeq #Vulnerability #ApacheSyncope", "creation_timestamp": "2026-09-15T04:30:31.231363Z"} 2026-09-15T04:30:31.231363+00:00 https://vulnerability.circl.lu/sighting/a811a5b1-f97c-47c8-9ff6-2e40f2493aab/export 2026-09-16T23:16:12.950663+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a811a5b1-f97c-47c8-9ff6-2e40f2493aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78330", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvituzizet2t", "content": "CVE-2026-78330 - apache syncope\nVersions of Apache Syncope from 3.0.0\u2011M0 up to 3.0.16, and from 4.0.0\u2011M0 through 4.1.2, may let an attacker who has a normal user\u2019s login token obtain full\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachesyncope #apachefoundation #CVE #infosec", "creation_timestamp": "2026-09-14T19:30:20.357485Z"} 2026-09-14T19:30:20.357485+00:00