https://vulnerability.circl.lu/sightings/feed 2026-10-04T03:27:32.418723+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3f4138cc-056c-49c6-9de1-38be97514649/export 2026-10-04T03:27:32.445114+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3f4138cc-056c-49c6-9de1-38be97514649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81699", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muokqagmfe23", "content": "\ud83d\udccc CVE-2026-81699 - openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounde... https://www.cyberhub.blog/cves/CVE-2026-81699", "creation_timestamp": "2026-09-04T08:37:06.971577Z"} 2026-09-04T08:37:06.971577+00:00 https://vulnerability.circl.lu/sighting/ab77855b-2ce5-485c-99ab-732e0b100979/export 2026-10-04T03:27:32.446750+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ab77855b-2ce5-485c-99ab-732e0b100979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81694", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3munzxronfk2x", "content": "\ud83d\udccc CVE-2026-81694 - openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted drive data (outside the AES-GCM authenticated manifes... https://www.cyberhub.blog/cves/CVE-2026-81694", "creation_timestamp": "2026-09-04T03:37:06.543918Z"} 2026-09-04T03:37:06.543918+00:00 https://vulnerability.circl.lu/sighting/c7ddd717-88e3-4626-b449-2ade0de3674b/export 2026-10-04T03:27:32.446841+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c7ddd717-88e3-4626-b449-2ade0de3674b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81691", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumq2ohfyg2f", "content": "\ud83d\udccc CVE-2026-81691 - openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and ... https://www.cyberhub.blog/cves/CVE-2026-81691", "creation_timestamp": "2026-09-03T15:07:09.718470Z"} 2026-09-03T15:07:09.718470+00:00 https://vulnerability.circl.lu/sighting/c0be98e8-574a-4037-b4be-e234fb05a55e/export 2026-10-04T03:27:32.446907+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c0be98e8-574a-4037-b4be-e234fb05a55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81690", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumoezosav2x", "content": "\ud83d\udccc CVE-2026-81690 - openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the d... https://www.cyberhub.blog/cves/CVE-2026-81690", "creation_timestamp": "2026-09-03T14:37:06.692698Z"} 2026-09-03T14:37:06.692698+00:00 https://vulnerability.circl.lu/sighting/0390ac15-44b5-4235-829e-abd5a77234aa/export 2026-10-04T03:27:32.446969+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0390ac15-44b5-4235-829e-abd5a77234aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81693", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumkzrd47l2l", "content": "\ud83d\udccc CVE-2026-81693 - openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR imag... https://www.cyberhub.blog/cves/CVE-2026-81693", "creation_timestamp": "2026-09-03T13:37:07.810446Z"} 2026-09-03T13:37:07.810446+00:00 https://vulnerability.circl.lu/sighting/f2b67389-4edc-4545-9da3-8772007e2a1c/export 2026-10-04T03:27:32.447031+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f2b67389-4edc-4545-9da3-8772007e2a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81696", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujerhlcvo2b", "content": "\ud83d\udccc CVE-2026-81696 - openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft m... https://www.cyberhub.blog/cves/CVE-2026-81696", "creation_timestamp": "2026-09-02T07:07:07.151742Z"} 2026-09-02T07:07:07.151742+00:00 https://vulnerability.circl.lu/sighting/c9b922ff-1e5b-42bf-bba6-23973ac394f8/export 2026-10-04T03:27:32.447092+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c9b922ff-1e5b-42bf-bba6-23973ac394f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81695", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujd3tbnpo2v", "content": "\ud83d\udccc CVE-2026-81695 - openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can ... https://www.cyberhub.blog/cves/CVE-2026-81695", "creation_timestamp": "2026-09-02T06:37:07.448657Z"} 2026-09-02T06:37:07.448657+00:00 https://vulnerability.circl.lu/sighting/11721c99-77c9-4479-bbaf-5021b09d183f/export 2026-10-04T03:27:32.447151+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "11721c99-77c9-4479-bbaf-5021b09d183f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj62usqkq2f", "content": "\ud83d\udccc CVE-2026-81698 - openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untruste... https://www.cyberhub.blog/cves/CVE-2026-81698", "creation_timestamp": "2026-09-02T05:07:07.230311Z"} 2026-09-02T05:07:07.230311+00:00 https://vulnerability.circl.lu/sighting/eb24e617-cc70-49a2-abd9-e5c75c13e190/export 2026-10-04T03:27:32.447212+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "eb24e617-cc70-49a2-abd9-e5c75c13e190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81699", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mufp45rg2u2r", "content": "OpenSSL: CVE-2026-81699 [HIGH]\n\nopenssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing.\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81699", "creation_timestamp": "2026-08-31T20:01:25.038302Z"} 2026-08-31T20:01:25.038302+00:00 https://vulnerability.circl.lu/sighting/04c5e728-6d81-4750-a1e2-7e6a616d948b/export 2026-10-04T03:27:32.447275+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "04c5e728-6d81-4750-a1e2-7e6a616d948b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mufbr2innp2q", "content": "New HIGH CVE for OpenSSL: CVE-2026-81698\n\nopenssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can c\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-81698", "creation_timestamp": "2026-08-31T16:02:33.285591Z"} 2026-08-31T16:02:33.285591+00:00