https://vulnerability.circl.lu/sightings/feed 2026-10-08T20:19:45.369884+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7753c18a-b6da-4632-8f16-99c0ccd4fa6b/export 2026-10-08T20:19:45.393409+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "7753c18a-b6da-4632-8f16-99c0ccd4fa6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-80205", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-rrv8-h7p8-rx55", "content": "", "creation_timestamp": "2026-09-08T22:36:05.190072Z"} 2026-09-08T22:36:05.190072+00:00 https://vulnerability.circl.lu/sighting/2b52cb76-b278-44fc-ac8a-6b4773bb9c93/export 2026-10-08T20:19:45.395599+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "2b52cb76-b278-44fc-ac8a-6b4773bb9c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-80206", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-w3v8-gmh9-3wv7", "content": "", "creation_timestamp": "2026-09-08T22:36:02.980698Z"} 2026-09-08T22:36:02.980698+00:00 https://vulnerability.circl.lu/sighting/f2873353-c00d-4775-8f9c-c22b8c94f902/export 2026-10-08T20:19:45.395762+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f2873353-c00d-4775-8f9c-c22b8c94f902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80206", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muk7lrd2v52x", "content": "\ud83d\udccc CVE-2026-80206 - NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles... https://www.cyberhub.blog/cves/CVE-2026-80206", "creation_timestamp": "2026-09-02T15:07:07.215152Z"} 2026-09-02T15:07:07.215152+00:00 https://vulnerability.circl.lu/sighting/8ded5ead-96f1-405c-99a7-be136eef5389/export 2026-10-08T20:19:45.396964+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8ded5ead-96f1-405c-99a7-be136eef5389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80205", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujqixbp4z2c", "content": "\ud83d\udccc CVE-2026-80205 - NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that ac... https://www.cyberhub.blog/cves/CVE-2026-80205", "creation_timestamp": "2026-09-02T10:37:06.828211Z"} 2026-09-02T10:37:06.828211+00:00 https://vulnerability.circl.lu/sighting/490f845f-c482-46f8-b671-2ee8b544852e/export 2026-10-08T20:19:45.397089+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "490f845f-c482-46f8-b671-2ee8b544852e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80202", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2dazxkse2j", "content": "CVE-2026-80202 - kimai\nKimai timesheets can be read, deleted, or modified by team leads from other teams. This can lead to unauthorized changes or deletion of timesheet data, affecting team and project\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kimai #composer #CVE #infosec", "creation_timestamp": "2026-08-27T07:30:05.776250Z"} 2026-08-27T07:30:05.776250+00:00 https://vulnerability.circl.lu/sighting/fb652b35-c871-4702-9c72-a317e15ff1f7/export 2026-10-08T20:19:45.397196+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fb652b35-c871-4702-9c72-a317e15ff1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80203", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtyar4we3r2c", "content": "CVE-2026-80203 - grav\nIf you use the Grav content system with the API plugin older than version 1.0.18, a command\u2011line key that is not supposed to have full rights can still be used to change or delete other\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-26T11:40:05.153880Z"} 2026-08-26T11:40:05.153880+00:00 https://vulnerability.circl.lu/sighting/8468bedc-6b4b-41f7-adf0-0157143a060a/export 2026-10-08T20:19:45.397314+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8468bedc-6b4b-41f7-adf0-0157143a060a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jk3gkazuem6mn", "content": "CVE-2026-80202 - Kimai before 2.56.0 Authorization Bypass via TimesheetVoter\nCVE ID : CVE-2026-80202\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(), whi...", "creation_timestamp": "2026-08-26T00:32:57.574024Z"} 2026-08-26T00:32:57.574024+00:00 https://vulnerability.circl.lu/sighting/0a92b059-3575-4761-83ce-bd37805ee41d/export 2026-10-08T20:19:45.397417+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0a92b059-3575-4761-83ce-bd37805ee41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ddfj5rmkf3fh3", "content": "CVE-2026-80201 - Kimai before 2.53.0 API Token Leakage via Invoice Template\nCVE ID : CVE-2026-80201\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowi...", "creation_timestamp": "2026-08-26T00:26:57.637087Z"} 2026-08-26T00:26:57.637087+00:00 https://vulnerability.circl.lu/sighting/569d85ea-b87b-4cc3-8f61-911354002d34/export 2026-10-08T20:19:45.397523+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "569d85ea-b87b-4cc3-8f61-911354002d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6gawym4ilvqnr", "content": "CVE-2026-80200 - Kimai before 2.53.0 Open Redirect via RelayState\nCVE ID : CVE-2026-80200\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that acce...", "creation_timestamp": "2026-08-26T00:14:58.329678Z"} 2026-08-26T00:14:58.329678+00:00 https://vulnerability.circl.lu/sighting/c3102f7d-1f2b-4944-8ef0-a23275cfcc16/export 2026-10-08T20:19:45.397650+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "c3102f7d-1f2b-4944-8ef0-a23275cfcc16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8020", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"} 2026-05-17T18:00:00+00:00