https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 24 Sep 2026 23:43:39 +0000 https://vulnerability.circl.lu/sighting/5f49d17b-eee0-4f58-8104-bded1e119c94/export {"uuid": "5f49d17b-eee0-4f58-8104-bded1e119c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-33626", "type": "published-proof-of-concept", "source": "https://github.com/InternLM/lmdeploy/security/advisories/GHSA-6w67-hwm5-92mq", "content": "", "creation_timestamp": "2026-09-23T08:35:02.829216Z"} {"uuid": "5f49d17b-eee0-4f58-8104-bded1e119c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-33626", "type": "published-proof-of-concept", "source": "https://github.com/InternLM/lmdeploy/security/advisories/GHSA-6w67-hwm5-92mq", "content": "", "creation_timestamp": "2026-09-23T08:35:02.829216Z"} https://vulnerability.circl.lu/sighting/5f49d17b-eee0-4f58-8104-bded1e119c94/export Wed, 23 Sep 2026 08:35:02 +0000 https://vulnerability.circl.lu/sighting/b9d50f6f-d9ca-44b3-abd1-2f077c789c7b/export {"uuid": "b9d50f6f-d9ca-44b3-abd1-2f077c789c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33439", "type": "published-proof-of-concept", "source": "Telegram/QObZQj-wj-NR0QH_GBriKIV5zpAX3Zwsb3a-8q6W10cFyYM", "content": "", "creation_timestamp": "2026-09-23T00:00:25.568693Z"} {"uuid": "b9d50f6f-d9ca-44b3-abd1-2f077c789c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33439", "type": "published-proof-of-concept", "source": "Telegram/QObZQj-wj-NR0QH_GBriKIV5zpAX3Zwsb3a-8q6W10cFyYM", "content": "", "creation_timestamp": "2026-09-23T00:00:25.568693Z"} https://vulnerability.circl.lu/sighting/b9d50f6f-d9ca-44b3-abd1-2f077c789c7b/export Wed, 23 Sep 2026 00:00:25 +0000 https://vulnerability.circl.lu/sighting/fb80cf17-8f6c-411c-ba2d-2f6ced6e3721/export {"uuid": "fb80cf17-8f6c-411c-ba2d-2f6ced6e3721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33439", "type": "published-proof-of-concept", "source": "Telegram/Bq15RX4hLps3YxF9UScb9X_cGJp6cilOG7wedbwLQyx-TtQ", "content": "", "creation_timestamp": "2026-09-23T00:00:13.508346Z"} {"uuid": "fb80cf17-8f6c-411c-ba2d-2f6ced6e3721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33439", "type": "published-proof-of-concept", "source": "Telegram/Bq15RX4hLps3YxF9UScb9X_cGJp6cilOG7wedbwLQyx-TtQ", "content": "", "creation_timestamp": "2026-09-23T00:00:13.508346Z"} https://vulnerability.circl.lu/sighting/fb80cf17-8f6c-411c-ba2d-2f6ced6e3721/export Wed, 23 Sep 2026 00:00:13 +0000 https://vulnerability.circl.lu/sighting/5f9f1e6d-31d4-4516-b46e-612ac7711bb8/export {"uuid": "5f9f1e6d-31d4-4516-b46e-612ac7711bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33060", "type": "seen", "source": "https://gist.github.com/alon710/3ba8e1fcc936f8ea3f0b915b4e9e571b", "content": "# CVE-2026-61612: CVE-2026-61612: Server-Side Request Forgery Bypass via DNS Resolution in CKAN MCP Server\n\n> **CVSS Score:** 5.7\n> **Published:** 2026-09-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61612\n\n## Summary\nAn input validation bypass in the CKAN MCP Server (NPM package @aborruso/ckan-mcp-server) prior to version 0.4.108 allows remote attackers to perform Server-Side Request Forgery (SSRF). The application's server URL validation mechanism checked hostnames only as literal strings without performing pre-connection DNS resolution. An attacker can bypass these checks using hostnames that resolve to loopback, private, or link-local IP addresses, including the AWS Instance Metadata Service (IMDS). This is the third documented bypass of this protection mechanism, succeeding previous incomplete mitigations in CVE-2026-33060 and CVE-2026-53509.\n\n## TL;DR\nA Server-Side Request Forgery (SSRF) vulnerability in @aborruso/ckan-mcp-server before v0.4.108 allows low-privilege remote attackers to query local or internal network endpoints, including AWS IMDS, by passing domains that resolve to restricted IPs, bypassing the string-only validation checks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity Score**: 5.7 (Medium)\n- **EPSS Score**: 0.00221 (Percentile: 12.95%)\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js applications running @aborruso/ckan-mcp-server version < 0.4.108\n\n## Mitigation\n\n- Upgrade @aborruso/ckan-mcp-server to version 0.4.108 or higher to enforce DNS-resolved IP checks.\n- Implement outbound network firewall constraints (egress filtering) to block requests to loopback addresses, private networks, and cloud metadata targets.\n- Enable the domain validation allowlist feature using the CKAN_ALLOWED_DOMAINS environment variable to restrict outbound connections to approved targets.\n\n**Remediation Steps:**\n1. Run 'npm install @aborruso/ckan-mcp-server@latest' to update the package to v0.4.108 or higher.\n2. Configure environment configuration using 'export CKAN_ALLOWED_DOMAINS=\"data.gov,open.canada.ca,dati.gov.it\"' to limit target access.\n3. Configure cloud security group or local iptables firewall policies to deny traffic from the MCP server container to 169.254.169.254 and 127.0.0.1.\n\n## References\n\n- [GitHub Security Advisory GHSA-798p-78g2-v556](https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-798p-78g2-v556)\n- [Fix Commit in Repository](https://github.com/ondata/ckan-mcp-server/commit/bb7439b553b9f965adc3d43bcd415c42eebe2f40)\n- [Release Tag v0.4.108](https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.108)\n- [GitHub Advisory Database Reference (CVE-2026-33060)](https://github.com/advisories/GHSA-3xm7-qw7j-qc8v)\n- [GitHub Advisory Database Reference (CVE-2026-53509)](https://github.com/advisories/GHSA-g84h-j7jj-x32p)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61612) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-22T15:32:08.384048Z"} {"uuid": "5f9f1e6d-31d4-4516-b46e-612ac7711bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33060", "type": "seen", "source": "https://gist.github.com/alon710/3ba8e1fcc936f8ea3f0b915b4e9e571b", "content": "# CVE-2026-61612: CVE-2026-61612: Server-Side Request Forgery Bypass via DNS Resolution in CKAN MCP Server\n\n> **CVSS Score:** 5.7\n> **Published:** 2026-09-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61612\n\n## Summary\nAn input validation bypass in the CKAN MCP Server (NPM package @aborruso/ckan-mcp-server) prior to version 0.4.108 allows remote attackers to perform Server-Side Request Forgery (SSRF). The application's server URL validation mechanism checked hostnames only as literal strings without performing pre-connection DNS resolution. An attacker can bypass these checks using hostnames that resolve to loopback, private, or link-local IP addresses, including the AWS Instance Metadata Service (IMDS). This is the third documented bypass of this protection mechanism, succeeding previous incomplete mitigations in CVE-2026-33060 and CVE-2026-53509.\n\n## TL;DR\nA Server-Side Request Forgery (SSRF) vulnerability in @aborruso/ckan-mcp-server before v0.4.108 allows low-privilege remote attackers to query local or internal network endpoints, including AWS IMDS, by passing domains that resolve to restricted IPs, bypassing the string-only validation checks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity Score**: 5.7 (Medium)\n- **EPSS Score**: 0.00221 (Percentile: 12.95%)\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js applications running @aborruso/ckan-mcp-server version < 0.4.108\n\n## Mitigation\n\n- Upgrade @aborruso/ckan-mcp-server to version 0.4.108 or higher to enforce DNS-resolved IP checks.\n- Implement outbound network firewall constraints (egress filtering) to block requests to loopback addresses, private networks, and cloud metadata targets.\n- Enable the domain validation allowlist feature using the CKAN_ALLOWED_DOMAINS environment variable to restrict outbound connections to approved targets.\n\n**Remediation Steps:**\n1. Run 'npm install @aborruso/ckan-mcp-server@latest' to update the package to v0.4.108 or higher.\n2. Configure environment configuration using 'export CKAN_ALLOWED_DOMAINS=\"data.gov,open.canada.ca,dati.gov.it\"' to limit target access.\n3. Configure cloud security group or local iptables firewall policies to deny traffic from the MCP server container to 169.254.169.254 and 127.0.0.1.\n\n## References\n\n- [GitHub Security Advisory GHSA-798p-78g2-v556](https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-798p-78g2-v556)\n- [Fix Commit in Repository](https://github.com/ondata/ckan-mcp-server/commit/bb7439b553b9f965adc3d43bcd415c42eebe2f40)\n- [Release Tag v0.4.108](https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.108)\n- [GitHub Advisory Database Reference (CVE-2026-33060)](https://github.com/advisories/GHSA-3xm7-qw7j-qc8v)\n- [GitHub Advisory Database Reference (CVE-2026-53509)](https://github.com/advisories/GHSA-g84h-j7jj-x32p)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61612) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-22T15:32:08.384048Z"} https://vulnerability.circl.lu/sighting/5f9f1e6d-31d4-4516-b46e-612ac7711bb8/export Tue, 22 Sep 2026 15:32:08 +0000 https://vulnerability.circl.lu/sighting/8aef212f-3ce4-4db2-8bc0-dbca4e95490c/export {"uuid": "8aef212f-3ce4-4db2-8bc0-dbca4e95490c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33625", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw46hqmfon2b", "content": "CVE-2026-33625 LMDeploy code injection, CVSS 8.8. Malicious HuggingFace model runs arbitrary Python via quant_dtype eval on load. No patch confirmed. Update to 0.12.3 now. https://www.valtersit.com/cve/CVE-2026-33625/ #CVE #infosec #AIsecurity", "creation_timestamp": "2026-09-22T12:00:06.439888Z"} {"uuid": "8aef212f-3ce4-4db2-8bc0-dbca4e95490c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33625", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw46hqmfon2b", "content": "CVE-2026-33625 LMDeploy code injection, CVSS 8.8. Malicious HuggingFace model runs arbitrary Python via quant_dtype eval on load. No patch confirmed. Update to 0.12.3 now. https://www.valtersit.com/cve/CVE-2026-33625/ #CVE #infosec #AIsecurity", "creation_timestamp": "2026-09-22T12:00:06.439888Z"} https://vulnerability.circl.lu/sighting/8aef212f-3ce4-4db2-8bc0-dbca4e95490c/export Tue, 22 Sep 2026 12:00:06 +0000 https://vulnerability.circl.lu/sighting/b14380e9-a6a9-46be-855d-7a25942f13aa/export {"uuid": "b14380e9-a6a9-46be-855d-7a25942f13aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33625", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117314502130222385", "content": "CVE-2026-33625 LMDeploy code injection, CVSS 8.8. Malicious HuggingFace model runs arbitrary Python via quant_dtype eval on load. No patch confirmed. Update to 0.12.3 now. https://www.valtersit.com/cve/CVE-2026-33625/ #CVE #infosec #AIsecurity", "creation_timestamp": "2026-09-22T11:40:56.061843Z"} {"uuid": "b14380e9-a6a9-46be-855d-7a25942f13aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33625", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117314502130222385", "content": "CVE-2026-33625 LMDeploy code injection, CVSS 8.8. Malicious HuggingFace model runs arbitrary Python via quant_dtype eval on load. No patch confirmed. Update to 0.12.3 now. https://www.valtersit.com/cve/CVE-2026-33625/ #CVE #infosec #AIsecurity", "creation_timestamp": "2026-09-22T11:40:56.061843Z"} https://vulnerability.circl.lu/sighting/b14380e9-a6a9-46be-855d-7a25942f13aa/export Tue, 22 Sep 2026 11:40:56 +0000 https://vulnerability.circl.lu/sighting/28f5f9cc-c316-4fe9-b0ae-ef6720ea5c30/export {"uuid": "28f5f9cc-c316-4fe9-b0ae-ef6720ea5c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33439", "type": "seen", "source": "Telegram/Bq15RX4hLps3YxF9UScb9X_cGJp6cilOG7wedbwLQyx-TtQ", "content": "", "creation_timestamp": "2026-09-22T07:00:09.567525Z"} {"uuid": "28f5f9cc-c316-4fe9-b0ae-ef6720ea5c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33439", "type": "seen", "source": "Telegram/Bq15RX4hLps3YxF9UScb9X_cGJp6cilOG7wedbwLQyx-TtQ", "content": "", "creation_timestamp": "2026-09-22T07:00:09.567525Z"} https://vulnerability.circl.lu/sighting/28f5f9cc-c316-4fe9-b0ae-ef6720ea5c30/export Tue, 22 Sep 2026 07:00:09 +0000 https://vulnerability.circl.lu/sighting/8415d24c-a0bb-4890-a8bf-ad1e65ef6883/export {"uuid": "8415d24c-a0bb-4890-a8bf-ad1e65ef6883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33439", "type": "seen", "source": "Telegram/QObZQj-wj-NR0QH_GBriKIV5zpAX3Zwsb3a-8q6W10cFyYM", "content": "", "creation_timestamp": "2026-09-22T07:00:05.412357Z"} {"uuid": "8415d24c-a0bb-4890-a8bf-ad1e65ef6883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33439", "type": "seen", "source": "Telegram/QObZQj-wj-NR0QH_GBriKIV5zpAX3Zwsb3a-8q6W10cFyYM", "content": "", "creation_timestamp": "2026-09-22T07:00:05.412357Z"} https://vulnerability.circl.lu/sighting/8415d24c-a0bb-4890-a8bf-ad1e65ef6883/export Tue, 22 Sep 2026 07:00:05 +0000 https://vulnerability.circl.lu/sighting/c15cd559-44e3-4204-87a3-6a6108899e9a/export {"uuid": "c15cd559-44e3-4204-87a3-6a6108899e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33439", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102916", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-33439-Poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rh33t\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 22:42:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-33439, a pre-auth RCE in OpenAM via unsafe Java deserialization.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T00:00:10.695705Z"} {"uuid": "c15cd559-44e3-4204-87a3-6a6108899e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33439", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102916", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-33439-Poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rh33t\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 22:42:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-33439, a pre-auth RCE in OpenAM via unsafe Java deserialization.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T00:00:10.695705Z"} https://vulnerability.circl.lu/sighting/c15cd559-44e3-4204-87a3-6a6108899e9a/export Tue, 22 Sep 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/79b9050c-1ba5-4f03-84e7-03b2f349e01f/export {"uuid": "79b9050c-1ba5-4f03-84e7-03b2f349e01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33818", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvz5ffrwcj2k", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 32 interactions\nCVE-2026-58704: 21 interactions\nCVE-2026-76460: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-33818: 8 interactions\nCVE-2026-39821: 8 interactions\nCVE-2026-56853: 8 interactions\n", "creation_timestamp": "2026-09-21T07:07:14.249025Z"} {"uuid": "79b9050c-1ba5-4f03-84e7-03b2f349e01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33818", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvz5ffrwcj2k", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 32 interactions\nCVE-2026-58704: 21 interactions\nCVE-2026-76460: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-33818: 8 interactions\nCVE-2026-39821: 8 interactions\nCVE-2026-56853: 8 interactions\n", "creation_timestamp": "2026-09-21T07:07:14.249025Z"} https://vulnerability.circl.lu/sighting/79b9050c-1ba5-4f03-84e7-03b2f349e01f/export Mon, 21 Sep 2026 07:07:14 +0000