https://vulnerability.circl.lu/sightings/feed 2026-09-30T18:19:26.265575+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/706e4853-d43c-48c0-b4ac-66fbcaf09851/export 2026-09-30T18:19:26.293474+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "706e4853-d43c-48c0-b4ac-66fbcaf09851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84947", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwqcbho2ii2j", "content": "\n\ud83d\udea8 New LOW CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-84947 impacts undici in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/714\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-09-30T12:01:24.799408Z"} 2026-09-30T12:01:24.799408+00:00 https://vulnerability.circl.lu/sighting/3f888075-a601-426d-a104-32c397fbaab8/export 2026-09-30T18:19:26.294920+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3f888075-a601-426d-a104-32c397fbaab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84941", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv7c3dsxxp25", "content": "TP-Link's Omada Controller, the console many businesses use to run their networks, has a patched flaw (CVE-2026-84941).\n\nA logged-in admin who manages SAML sign-on can read files off the controller host.\n\nSelf-hosted? Update to 6.2.14.11 or the July 11 build.", "creation_timestamp": "2026-09-11T00:17:32.608965Z"} 2026-09-11T00:17:32.608965+00:00 https://vulnerability.circl.lu/sighting/0ba442a5-3efc-4895-b5e9-f5c771a032ac/export 2026-09-30T18:19:26.295056+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0ba442a5-3efc-4895-b5e9-f5c771a032ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84941", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv7bbib3be2b", "content": "CVE-2026-84941: TP-Link Systems disclosed an XML external entity flaw in the Omada Software Controller SAML single sign-on feature, letting an authenticated user with SAML configuration rights read sensitive information. Fixed in version 6.2.14.11.", "creation_timestamp": "2026-09-11T00:03:03.772896Z"} 2026-09-11T00:03:03.772896+00:00 https://vulnerability.circl.lu/sighting/8b42c862-eb1e-451a-b8cb-8d83e215fe56/export 2026-09-30T18:19:26.295166+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8b42c862-eb1e-451a-b8cb-8d83e215fe56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84942", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mv3pjyorpa2e", "content": "CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards #patchmanagement", "creation_timestamp": "2026-09-09T14:07:42.756836Z"} 2026-09-09T14:07:42.756836+00:00 https://vulnerability.circl.lu/sighting/2959321b-fc21-4202-b401-98a80bc368b3/export 2026-09-30T18:19:26.295268+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2959321b-fc21-4202-b401-98a80bc368b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84942", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4pfz2c7oosalz", "content": "CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards\nCVE ID : CVE-2026-84942\n \n Published : Sept. 8, 2026, 8:18 p.m. | 39\u00a0minutes ago\n \n Description : Improper input validation in the Vega expression function implementation ...", "creation_timestamp": "2026-09-08T21:10:46.583043Z"} 2026-09-08T21:10:46.583043+00:00 https://vulnerability.circl.lu/sighting/829986ea-3019-4f44-a86a-67e0c90e3eb6/export 2026-09-30T18:19:26.295371+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "829986ea-3019-4f44-a86a-67e0c90e3eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84942", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muzw5gzwya2s", "content": "\ud83d\udfe0 CVE-2026-84942 - High (8.7)\n\nImproper input validation in the Vega expression function implementation in OpenSearch Dashboards...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84942/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T21:00:39.416264Z"} 2026-09-08T21:00:39.416264+00:00 https://vulnerability.circl.lu/sighting/27909379-909d-4707-8679-0d59c489187d/export 2026-09-30T18:19:26.295468+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "27909379-909d-4707-8679-0d59c489187d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2pozg5y57hhxy", "content": "CVE-2026-84947 - undici vulnerable to response truncation via oversized chunked responses in the dump interceptor\nCVE ID : CVE-2026-84947\n \n Published : 4. September 2026 16:53 | 29\u00a0Minuten ago\n \n Description : undici's dump interceptor reads and discards a response body up to...", "creation_timestamp": "2026-09-04T17:47:50.592155Z"} 2026-09-04T17:47:50.592155+00:00 https://vulnerability.circl.lu/sighting/a3001651-3819-4764-9bd9-adc8f12b6fce/export 2026-09-30T18:19:26.295570+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a3001651-3819-4764-9bd9-adc8f12b6fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84947", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mupgl5yzrk2w", "content": "\ud83d\udea8 Low-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84947: undici vulnerable to response truncation via oversized chunked responses in the dump interceptor\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T16:55:30.763818Z"} 2026-09-04T16:55:30.763818+00:00