https://vulnerability.circl.lu/sightings/feed 2026-09-17T03:44:21.839673+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c82121d5-1e7b-4df8-b3ee-745e34ccd6ff/export 2026-09-17T03:44:21.861787+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c82121d5-1e7b-4df8-b3ee-745e34ccd6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mueqv7t6m22f", "content": "Nodemailer \u306b SMTP\u30b3\u30de\u30f3\u30c9\u6ce8\u5165\u306e\u8106\u5f31\u6027\uff08CVE-2026-82854\uff09\u3002\n\n\u8a55\u4fa1\u306f\u958b\u767a\u5143\u304c CVSS 2.3 LOW\u3001NVD\u63b2\u8f09\u306e\u5024\u306f 9.8 CRITICAL \u3068\u5272\u308c\u3066\u3044\u307e\u3059\u3002\u65e2\u5b9a\u306eenvelope\u306b\u306f size \u304c\u542b\u307e\u308c\u306a\u3044\u305f\u3081\u3001\u591a\u304f\u306e\u30a2\u30d7\u30ea\u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: sendMail \u306b size \u4ed8\u304d\u306e envelope \u3092\u6e21\u3057\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u30018.0.4\u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\n\nforsmile.jp/articles/nod...", "creation_timestamp": "2026-08-31T11:00:39.108027Z"} 2026-08-31T11:00:39.108027+00:00 https://vulnerability.circl.lu/sighting/d7609cdf-c6f5-4335-ad22-71a2a58f7071/export 2026-09-17T03:44:21.863476+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d7609cdf-c6f5-4335-ad22-71a2a58f7071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82859", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mueo2rqbtw2c", "content": "CVE-2026-82859 - hulumi\nIf you are using hulumi versions earlier than 1.3.2, the tool\u2019s default settings can be tricked into ignoring the limits you set on who can create or change resources. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hulumi #kerberosmansour #CVE #infosec", "creation_timestamp": "2026-08-31T10:10:04.836713Z"} 2026-08-31T10:10:04.836713+00:00 https://vulnerability.circl.lu/sighting/46f82f6b-4ed1-4637-a335-40bee96a940d/export 2026-09-17T03:44:21.863624+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "46f82f6b-4ed1-4637-a335-40bee96a940d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82859", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenxbor562e", "content": "\ud83d\udea8 CVE-2026-82859 \u2014 CVSS 9.3 CRITICAL\n\nhulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82859\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:08:07.566018Z"} 2026-08-31T10:08:07.566018+00:00 https://vulnerability.circl.lu/sighting/d735a3ee-41e4-40f8-a364-890e9b3d3528/export 2026-09-17T03:44:21.863732+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d735a3ee-41e4-40f8-a364-890e9b3d3528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82858", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwyfc3625", "content": "\ud83d\udea8 CVE-2026-82858 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82858\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:57.422569Z"} 2026-08-31T10:07:57.422569+00:00 https://vulnerability.circl.lu/sighting/17814c6d-f6c0-4a1d-97e2-0fb9ddab62ba/export 2026-09-17T03:44:21.863855+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "17814c6d-f6c0-4a1d-97e2-0fb9ddab62ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82857", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwpvjrw25", "content": "\ud83d\udea8 CVE-2026-82857 \u2014 CVSS 9.3 CRITICAL\n\nhulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM po...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82857\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:48.924980Z"} 2026-08-31T10:07:48.924980+00:00 https://vulnerability.circl.lu/sighting/e0bb7188-68f0-4451-ba4b-d5c7911cbdb7/export 2026-09-17T03:44:21.863969+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e0bb7188-68f0-4451-ba4b-d5c7911cbdb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82856", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwhmlrx2f", "content": "\ud83d\udea8 CVE-2026-82856 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82856\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:39.801021Z"} 2026-08-31T10:07:39.801021+00:00 https://vulnerability.circl.lu/sighting/4c4f32da-3db5-4e44-b10e-fa49671e604a/export 2026-09-17T03:44:21.864069+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4c4f32da-3db5-4e44-b10e-fa49671e604a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82855", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenw7p7ra24", "content": "\ud83d\udea8 CVE-2026-82855 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82855\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:31.728133Z"} 2026-08-31T10:07:31.728133+00:00 https://vulnerability.circl.lu/sighting/7847242f-f12a-495a-b867-ed3997d7b0f7/export 2026-09-17T03:44:21.864170+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7847242f-f12a-495a-b867-ed3997d7b0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenvxe2542b", "content": "\ud83d\udea8 CVE-2026-82854 \u2014 CVSS 9.3 CRITICAL\n\nNodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size param...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82854\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:22.704574Z"} 2026-08-31T10:07:22.704574+00:00 https://vulnerability.circl.lu/sighting/458754a3-2697-480d-b991-6acc5915e99a/export 2026-09-17T03:44:21.864271+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "458754a3-2697-480d-b991-6acc5915e99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82858", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muenixwa5r2m", "content": "CVE-2026-82858 - drift\nVersions of the @hulumi/drift package older than 1.3.2 can accept execution plans that come from outside sources without properly checking where they originated. This lets an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#drift #hulumi #CVE #infosec", "creation_timestamp": "2026-08-31T10:00:07.008465Z"} 2026-08-31T10:00:07.008465+00:00 https://vulnerability.circl.lu/sighting/0967a344-a913-4cae-a5cb-7c6790505ca0/export 2026-09-17T03:44:21.864363+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0967a344-a913-4cae-a5cb-7c6790505ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82857", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mueniwgefj25", "content": "CVE-2026-82857 - hulumi\nVersions of Hulumi released before 1.3.2 allow a user with certain permissions to add or change roles that control access to resources, without proper limits. This means an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hulumi #kerberosmansour #CVE #infosec", "creation_timestamp": "2026-08-31T10:00:05.747042Z"} 2026-08-31T10:00:05.747042+00:00