https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 18:43:12 +0000 https://vulnerability.circl.lu/sighting/134c2896-0683-4be5-8ec9-36522453aec9/export {"uuid": "134c2896-0683-4be5-8ec9-36522453aec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11921", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq5ziasyf2r", "content": "CVE-2026-11921 - verify identity access\nThe IBM Verify Identity Access and IBM Security Verify Access containers might not apply password changes made by administrators. This could leave old passwords in use, increasing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-09-17T17:20:09.584258Z"} {"uuid": "134c2896-0683-4be5-8ec9-36522453aec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11921", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq5ziasyf2r", "content": "CVE-2026-11921 - verify identity access\nThe IBM Verify Identity Access and IBM Security Verify Access containers might not apply password changes made by administrators. This could leave old passwords in use, increasing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-09-17T17:20:09.584258Z"} https://vulnerability.circl.lu/sighting/134c2896-0683-4be5-8ec9-36522453aec9/export Thu, 17 Sep 2026 17:20:09 +0000 https://vulnerability.circl.lu/sighting/aa14134a-26f6-4b03-9ff7-4a461d89b551/export {"uuid": "aa14134a-26f6-4b03-9ff7-4a461d89b551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11928", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq5zdvow52w", "content": "CVE-2026-11928 - verify identity access\nThe IBM Verify Identity Access and IBM Security Verify Access products can be tricked into writing excess data to memory, which could let an attacker run unwanted code. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-09-17T17:20:05.610866Z"} {"uuid": "aa14134a-26f6-4b03-9ff7-4a461d89b551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11928", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq5zdvow52w", "content": "CVE-2026-11928 - verify identity access\nThe IBM Verify Identity Access and IBM Security Verify Access products can be tricked into writing excess data to memory, which could let an attacker run unwanted code. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-09-17T17:20:05.610866Z"} https://vulnerability.circl.lu/sighting/aa14134a-26f6-4b03-9ff7-4a461d89b551/export Thu, 17 Sep 2026 17:20:05 +0000 https://vulnerability.circl.lu/sighting/cfcdee15-5a9b-4ab1-804e-3c30f6ba9cf6/export {"uuid": "cfcdee15-5a9b-4ab1-804e-3c30f6ba9cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1168", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-25", "content": "", "creation_timestamp": "2026-09-14T07:45:55.807322Z"} {"uuid": "cfcdee15-5a9b-4ab1-804e-3c30f6ba9cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1168", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-25", "content": "", "creation_timestamp": "2026-09-14T07:45:55.807322Z"} https://vulnerability.circl.lu/sighting/cfcdee15-5a9b-4ab1-804e-3c30f6ba9cf6/export Mon, 14 Sep 2026 07:45:55 +0000 https://vulnerability.circl.lu/sighting/f55676be-cf9b-4389-827e-bd0bc48efd51/export {"uuid": "f55676be-cf9b-4389-827e-bd0bc48efd51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1168", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260914", "content": "", "creation_timestamp": "2026-09-14T07:45:10.716166Z"} {"uuid": "f55676be-cf9b-4389-827e-bd0bc48efd51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1168", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260914", "content": "", "creation_timestamp": "2026-09-14T07:45:10.716166Z"} https://vulnerability.circl.lu/sighting/f55676be-cf9b-4389-827e-bd0bc48efd51/export Mon, 14 Sep 2026 07:45:10 +0000 https://vulnerability.circl.lu/sighting/f21f14d8-3de8-4b78-a0a0-90319af3087a/export {"uuid": "f21f14d8-3de8-4b78-a0a0-90319af3087a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11748", "type": "seen", "source": "https://gist.github.com/alon710/c05d2b733514467507b538dab5375550", "content": "# CVE-2026-11748: CVE-2026-11748: Unauthenticated LDAP Injection in Central Dogma Server Authentication\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-09-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11748\n\n## Summary\nAn LDAP injection vulnerability exists in the centraldogma-server-auth-shiro module of LY Corporation Central Dogma before version 0.84.0. The search logic dynamically constructs LDAP search filters by interpolating user-provided usernames without escaping RFC 4515 metacharacters. Unauthenticated remote attackers can leverage this flaw to bypass authentication, enumerate directory hierarchies, and access unauthorized resources.\n\n## TL;DR\nUnauthenticated LDAP injection in LY Corporation Central Dogma before version 0.84.0 allows remote attackers to bypass authentication and query directory contents due to unsafe handling of RFC 4515 metacharacters in username fields.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-90\n- **Attack Vector**: Network\n- **CVSS v4.0**: 6.9 (Medium)\n- **EPSS Score**: 0.00618 (Percentile: 47.64%)\n- **Impact**: Authentication Bypass / Directory Enumeration\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- LY Corporation Central Dogma centraldogma-server-auth-shiro module\n- **Central Dogma**: < 0.84.0 (Fixed in: `0.84.0`)\n\n## Mitigation\n\n- Upgrade the Central Dogma installation to version 0.84.0 or above.\n- Implement WAF input validation rules to block the execution of LDAP control characters in authentication queries.\n- Disable unauthenticated binds on the backend LDAP/Active Directory controllers.\n- Enforce least-privilege access permissions on the directory service account utilized by the Central Dogma server.\n\n**Remediation Steps:**\n1. Identify all deployment nodes running Central Dogma versions prior to 0.84.0.\n2. Update dependencies in build.gradle or pom.xml to target centraldogma-server-auth-shiro version 0.84.0.\n3. Recompile and redeploy the Central Dogma server services.\n4. Validate the fix by attempting to log in with wildcard characters (e.g., '*' and 'admin*)(objectClass=*') to verify they are rejected or treated as literal characters.\n\n## References\n\n- [GHSA-98q5-5qh2-7w75: LDAP Injection in centraldogma-server-auth-shiro](https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75)\n- [Central Dogma Security Patch Commit](https://github.com/line/centraldogma/commit/f78719f33d2bde9c37d99aafe612427d3a6f43f6)\n- [CVE.org CVE-2026-11748 Detail](https://www.cve.org/CVERecord?id=CVE-2026-11748)\n- [NVD - CVE-2026-11748 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-11748)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11748) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-12T04:32:07.906348Z"} {"uuid": "f21f14d8-3de8-4b78-a0a0-90319af3087a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11748", "type": "seen", "source": "https://gist.github.com/alon710/c05d2b733514467507b538dab5375550", "content": "# CVE-2026-11748: CVE-2026-11748: Unauthenticated LDAP Injection in Central Dogma Server Authentication\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-09-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11748\n\n## Summary\nAn LDAP injection vulnerability exists in the centraldogma-server-auth-shiro module of LY Corporation Central Dogma before version 0.84.0. The search logic dynamically constructs LDAP search filters by interpolating user-provided usernames without escaping RFC 4515 metacharacters. Unauthenticated remote attackers can leverage this flaw to bypass authentication, enumerate directory hierarchies, and access unauthorized resources.\n\n## TL;DR\nUnauthenticated LDAP injection in LY Corporation Central Dogma before version 0.84.0 allows remote attackers to bypass authentication and query directory contents due to unsafe handling of RFC 4515 metacharacters in username fields.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-90\n- **Attack Vector**: Network\n- **CVSS v4.0**: 6.9 (Medium)\n- **EPSS Score**: 0.00618 (Percentile: 47.64%)\n- **Impact**: Authentication Bypass / Directory Enumeration\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- LY Corporation Central Dogma centraldogma-server-auth-shiro module\n- **Central Dogma**: < 0.84.0 (Fixed in: `0.84.0`)\n\n## Mitigation\n\n- Upgrade the Central Dogma installation to version 0.84.0 or above.\n- Implement WAF input validation rules to block the execution of LDAP control characters in authentication queries.\n- Disable unauthenticated binds on the backend LDAP/Active Directory controllers.\n- Enforce least-privilege access permissions on the directory service account utilized by the Central Dogma server.\n\n**Remediation Steps:**\n1. Identify all deployment nodes running Central Dogma versions prior to 0.84.0.\n2. Update dependencies in build.gradle or pom.xml to target centraldogma-server-auth-shiro version 0.84.0.\n3. Recompile and redeploy the Central Dogma server services.\n4. Validate the fix by attempting to log in with wildcard characters (e.g., '*' and 'admin*)(objectClass=*') to verify they are rejected or treated as literal characters.\n\n## References\n\n- [GHSA-98q5-5qh2-7w75: LDAP Injection in centraldogma-server-auth-shiro](https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75)\n- [Central Dogma Security Patch Commit](https://github.com/line/centraldogma/commit/f78719f33d2bde9c37d99aafe612427d3a6f43f6)\n- [CVE.org CVE-2026-11748 Detail](https://www.cve.org/CVERecord?id=CVE-2026-11748)\n- [NVD - CVE-2026-11748 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-11748)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11748) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-12T04:32:07.906348Z"} https://vulnerability.circl.lu/sighting/f21f14d8-3de8-4b78-a0a0-90319af3087a/export Sat, 12 Sep 2026 04:32:07 +0000 https://vulnerability.circl.lu/sighting/3a764fcd-bfec-401b-9c29-2c3f6a598b6f/export {"uuid": "3a764fcd-bfec-401b-9c29-2c3f6a598b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11746", "type": "seen", "source": "https://gist.github.com/alon710/bd396251a8687bea5416d129d9cb5f66", "content": "# CVE-2026-11746: CVE-2026-11746: Use of Hard-coded ZooKeeper Replication Secret 'ch4n63m3' in Central Dogma Server\n\n> **CVSS Score:** 9.4\n> **Published:** 2026-09-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11746\n\n## Summary\nCVE-2026-11746 is a critical vulnerability in Central Dogma Server prior to version 0.84.0, where an embedded ZooKeeper replication secret silently falls back to a publicly known, hard-coded default string ('ch4n63m3'). Remote attackers with access to the replication network can authenticate as legitimate cluster peers, potentially leading to unauthorized data exposure, state manipulation, or complete cluster takeover.\n\n## TL;DR\nUnauthenticated remote attackers with access to Central Dogma's replication ports can take over the cluster by authenticating with the default hard-coded replication secret 'ch4n63m3'.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-798\n- **Attack Vector**: Adjacent Network\n- **CVSS v4.0 Score**: 9.4 (Critical)\n- **EPSS Score**: 0.00229\n- **Impact**: Complete Cluster Takeover / Information Disclosure\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Central Dogma Server\n\n## Mitigation\n\n- Upgrade Central Dogma Server to version 0.84.0 or above to enforce secure cryptographic secrets on startup.\n- Explicitly configure a strong, random 'replication.secret' of at least 16 characters in dogma.json on all nodes.\n- Implement host-based firewalls or security groups to strictly isolate replication ports from unauthorized network segments.\n\n**Remediation Steps:**\n1. Verify the current running version of Central Dogma Server and retrieve the dogma.json configuration.\n2. Generate a secure 32-character hex secret using 'openssl rand -hex 32'.\n3. Update dogma.json on every replica cluster node to include the generated secret within the 'replication' block.\n4. Upgrade the Central Dogma server installations to version 0.84.0 or later.\n5. Restart the services and verify the log output to confirm that the configuration is loaded securely.\n\n## References\n\n- [GitHub Security Advisory GHSA-2j95-gqxf-v3vg](https://github.com/line/centraldogma/security/advisories/GHSA-2j95-gqxf-v3vg)\n- [Fix Commit](https://github.com/line/centraldogma/commit/a38baa1f162ce7417ee0d7317a036fd52f3cd844)\n- [v0.84.0 Release Changelog](https://github.com/line/centraldogma/commit/09b5db8bd2f16394bfc21097e77d720d3103b8b6)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11746) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-12T03:31:29.284057Z"} {"uuid": "3a764fcd-bfec-401b-9c29-2c3f6a598b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11746", "type": "seen", "source": "https://gist.github.com/alon710/bd396251a8687bea5416d129d9cb5f66", "content": "# CVE-2026-11746: CVE-2026-11746: Use of Hard-coded ZooKeeper Replication Secret 'ch4n63m3' in Central Dogma Server\n\n> **CVSS Score:** 9.4\n> **Published:** 2026-09-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11746\n\n## Summary\nCVE-2026-11746 is a critical vulnerability in Central Dogma Server prior to version 0.84.0, where an embedded ZooKeeper replication secret silently falls back to a publicly known, hard-coded default string ('ch4n63m3'). Remote attackers with access to the replication network can authenticate as legitimate cluster peers, potentially leading to unauthorized data exposure, state manipulation, or complete cluster takeover.\n\n## TL;DR\nUnauthenticated remote attackers with access to Central Dogma's replication ports can take over the cluster by authenticating with the default hard-coded replication secret 'ch4n63m3'.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-798\n- **Attack Vector**: Adjacent Network\n- **CVSS v4.0 Score**: 9.4 (Critical)\n- **EPSS Score**: 0.00229\n- **Impact**: Complete Cluster Takeover / Information Disclosure\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Central Dogma Server\n\n## Mitigation\n\n- Upgrade Central Dogma Server to version 0.84.0 or above to enforce secure cryptographic secrets on startup.\n- Explicitly configure a strong, random 'replication.secret' of at least 16 characters in dogma.json on all nodes.\n- Implement host-based firewalls or security groups to strictly isolate replication ports from unauthorized network segments.\n\n**Remediation Steps:**\n1. Verify the current running version of Central Dogma Server and retrieve the dogma.json configuration.\n2. Generate a secure 32-character hex secret using 'openssl rand -hex 32'.\n3. Update dogma.json on every replica cluster node to include the generated secret within the 'replication' block.\n4. Upgrade the Central Dogma server installations to version 0.84.0 or later.\n5. Restart the services and verify the log output to confirm that the configuration is loaded securely.\n\n## References\n\n- [GitHub Security Advisory GHSA-2j95-gqxf-v3vg](https://github.com/line/centraldogma/security/advisories/GHSA-2j95-gqxf-v3vg)\n- [Fix Commit](https://github.com/line/centraldogma/commit/a38baa1f162ce7417ee0d7317a036fd52f3cd844)\n- [v0.84.0 Release Changelog](https://github.com/line/centraldogma/commit/09b5db8bd2f16394bfc21097e77d720d3103b8b6)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11746) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-12T03:31:29.284057Z"} https://vulnerability.circl.lu/sighting/3a764fcd-bfec-401b-9c29-2c3f6a598b6f/export Sat, 12 Sep 2026 03:31:29 +0000 https://vulnerability.circl.lu/sighting/ac402d67-49fb-4fe8-84f7-a6c8e945b447/export {"uuid": "ac402d67-49fb-4fe8-84f7-a6c8e945b447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11748", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75", "content": "", "creation_timestamp": "2026-09-11T22:37:28.197079Z"} {"uuid": "ac402d67-49fb-4fe8-84f7-a6c8e945b447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11748", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-98q5-5qh2-7w75", "content": "", "creation_timestamp": "2026-09-11T22:37:28.197079Z"} https://vulnerability.circl.lu/sighting/ac402d67-49fb-4fe8-84f7-a6c8e945b447/export Fri, 11 Sep 2026 22:37:28 +0000 https://vulnerability.circl.lu/sighting/443fe8ed-70a9-401b-a74c-4b6a03771297/export {"uuid": "443fe8ed-70a9-401b-a74c-4b6a03771297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11746", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-2j95-gqxf-v3vg", "content": "", "creation_timestamp": "2026-09-11T22:37:25.982210Z"} {"uuid": "443fe8ed-70a9-401b-a74c-4b6a03771297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11746", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-2j95-gqxf-v3vg", "content": "", "creation_timestamp": "2026-09-11T22:37:25.982210Z"} https://vulnerability.circl.lu/sighting/443fe8ed-70a9-401b-a74c-4b6a03771297/export Fri, 11 Sep 2026 22:37:25 +0000 https://vulnerability.circl.lu/sighting/c488a8f3-d1b4-4dc5-a12c-a62987b85e46/export {"uuid": "c488a8f3-d1b4-4dc5-a12c-a62987b85e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11745", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-vjfw-cpmh-xwv3", "content": "", "creation_timestamp": "2026-09-11T22:37:23.305097Z"} {"uuid": "c488a8f3-d1b4-4dc5-a12c-a62987b85e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11745", "type": "published-proof-of-concept", "source": "https://github.com/line/centraldogma/security/advisories/GHSA-vjfw-cpmh-xwv3", "content": "", "creation_timestamp": "2026-09-11T22:37:23.305097Z"} https://vulnerability.circl.lu/sighting/c488a8f3-d1b4-4dc5-a12c-a62987b85e46/export Fri, 11 Sep 2026 22:37:23 +0000 https://vulnerability.circl.lu/sighting/3892dadd-a3b1-41bb-b072-1515861f7143/export {"uuid": "3892dadd-a3b1-41bb-b072-1515861f7143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11746", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvbjqqanfy2g", "content": "CVE-2026-11746 - com.linecorp.centraldogma:centraldogma-server\nThe Central Dogma server uses a hard\u2011coded password (\u201cch4n63m3\u201d) for its built\u2011in ZooKeeper communication if administrators do not set their own secret.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#Java #CVE #infosec", "creation_timestamp": "2026-09-11T21:40:05.024723Z"} {"uuid": "3892dadd-a3b1-41bb-b072-1515861f7143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11746", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvbjqqanfy2g", "content": "CVE-2026-11746 - com.linecorp.centraldogma:centraldogma-server\nThe Central Dogma server uses a hard\u2011coded password (\u201cch4n63m3\u201d) for its built\u2011in ZooKeeper communication if administrators do not set their own secret.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#Java #CVE #infosec", "creation_timestamp": "2026-09-11T21:40:05.024723Z"} https://vulnerability.circl.lu/sighting/3892dadd-a3b1-41bb-b072-1515861f7143/export Fri, 11 Sep 2026 21:40:05 +0000