https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:53:41 +0000 https://vulnerability.circl.lu/sighting/a3820ced-5708-4057-95dc-1eefaa6fe489/export {"uuid": "a3820ced-5708-4057-95dc-1eefaa6fe489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mx45773svb2p", "content": "Daily IT Security Digest \u2014 2026-10-05\nInjection (CVE-2026-105135)**\n A critical remote code injection vulnerability (CVE-2026-105135) was identified in InternLM MindSearch 0.1.0 within the ExecutionAction.run function, allowing arbitrary code execution via manipulated inputs. No patch is", "creation_timestamp": "2026-10-05T05:02:37.678073Z"} {"uuid": "a3820ced-5708-4057-95dc-1eefaa6fe489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mx45773svb2p", "content": "Daily IT Security Digest \u2014 2026-10-05\nInjection (CVE-2026-105135)**\n A critical remote code injection vulnerability (CVE-2026-105135) was identified in InternLM MindSearch 0.1.0 within the ExecutionAction.run function, allowing arbitrary code execution via manipulated inputs. No patch is", "creation_timestamp": "2026-10-05T05:02:37.678073Z"} https://vulnerability.circl.lu/sighting/a3820ced-5708-4057-95dc-1eefaa6fe489/export Mon, 05 Oct 2026 05:02:37 +0000 https://vulnerability.circl.lu/sighting/d74c86c9-5356-4c7a-bbf6-5e0745c22a0a/export {"uuid": "d74c86c9-5356-4c7a-bbf6-5e0745c22a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx2qyje2uu2k", "content": "\ud83d\udd34 CVE-2026-105135 - Critical (10)\n\nA vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function Exec...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105135/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T15:51:28.171080Z"} {"uuid": "d74c86c9-5356-4c7a-bbf6-5e0745c22a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx2qyje2uu2k", "content": "\ud83d\udd34 CVE-2026-105135 - Critical (10)\n\nA vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function Exec...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105135/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-04T15:51:28.171080Z"} https://vulnerability.circl.lu/sighting/d74c86c9-5356-4c7a-bbf6-5e0745c22a0a/export Sun, 04 Oct 2026 15:51:28 +0000 https://vulnerability.circl.lu/sighting/5402ba0a-7c43-490f-896c-6fdedf98a690/export {"uuid": "5402ba0a-7c43-490f-896c-6fdedf98a690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwzx2goack2l", "content": "\ud83d\udea8 CVE-2026-105135 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionActio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105135\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T08:07:15.063017Z"} {"uuid": "5402ba0a-7c43-490f-896c-6fdedf98a690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwzx2goack2l", "content": "\ud83d\udea8 CVE-2026-105135 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionActio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105135\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-04T08:07:15.063017Z"} https://vulnerability.circl.lu/sighting/5402ba0a-7c43-490f-896c-6fdedf98a690/export Sun, 04 Oct 2026 08:07:15 +0000 https://vulnerability.circl.lu/sighting/e43128a4-b511-4b03-91e7-11072ea06af0/export {"uuid": "e43128a4-b511-4b03-91e7-11072ea06af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://gist.github.com/ichintu/231f28d16cc1668438fdb199fb3943c7", "content": "This daily cyber threat intelligence briefing covers critical vulnerabilities, enforcement actions, emerging threats, and strategic guidance:\n\n- **Critical Vulnerabilities:** Two CVSS 10.0 flaws were disclosed: a code injection in InternLM MindSearch (CVE-2026-105135) and an OS command injection in Ahsay AhsayCBS (CVE-2026-105134), both actively exploited in the wild.\n- **Law Enforcement & Espionage:** The FBI detained suspected ShinyHunters extortionist \u201cRey\u201d in Jordan, who is now cooperating with investigators. Separately, China-aligned TA419 is targeting U.S. AI policy experts with Microsoft account takeover phishing campaigns.\n- **Post-Quantum Migration:** Experts urge SMBs to immediately map cryptographic assets and begin migration to counter \u201charvest now, decrypt later\u201d threats, citing finalized NIST PQC standards and cloud vendor roadmaps.\n- **Industry Discourse:** Security professionals highlight that superficially renaming threats or security practices cannot substitute for addressing underlying vulnerabilities and operational gaps.", "creation_timestamp": "2026-10-04T08:00:33.000000Z"} {"uuid": "e43128a4-b511-4b03-91e7-11072ea06af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://gist.github.com/ichintu/231f28d16cc1668438fdb199fb3943c7", "content": "This daily cyber threat intelligence briefing covers critical vulnerabilities, enforcement actions, emerging threats, and strategic guidance:\n\n- **Critical Vulnerabilities:** Two CVSS 10.0 flaws were disclosed: a code injection in InternLM MindSearch (CVE-2026-105135) and an OS command injection in Ahsay AhsayCBS (CVE-2026-105134), both actively exploited in the wild.\n- **Law Enforcement & Espionage:** The FBI detained suspected ShinyHunters extortionist \u201cRey\u201d in Jordan, who is now cooperating with investigators. Separately, China-aligned TA419 is targeting U.S. AI policy experts with Microsoft account takeover phishing campaigns.\n- **Post-Quantum Migration:** Experts urge SMBs to immediately map cryptographic assets and begin migration to counter \u201charvest now, decrypt later\u201d threats, citing finalized NIST PQC standards and cloud vendor roadmaps.\n- **Industry Discourse:** Security professionals highlight that superficially renaming threats or security practices cannot substitute for addressing underlying vulnerabilities and operational gaps.", "creation_timestamp": "2026-10-04T08:00:33.000000Z"} https://vulnerability.circl.lu/sighting/e43128a4-b511-4b03-91e7-11072ea06af0/export Sun, 04 Oct 2026 08:00:33 +0000 https://vulnerability.circl.lu/sighting/daeb6aa9-adcf-410d-bcc2-2857f44bce4a/export {"uuid": "daeb6aa9-adcf-410d-bcc2-2857f44bce4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105135", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwzuyncpbh2j", "content": "InternLM MindSearch 0.1.0 faces CRITICAL code injection (CVE-2026-105135). Remote attackers can run arbitrary code \u2014 no patch yet. Restrict access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-105135-code-injection-in-internlm-mindsearch-f0d6fc8a61cd76d9 #OffSeq #CVE202610513...", "creation_timestamp": "2026-10-04T07:30:27.412684Z"} {"uuid": "daeb6aa9-adcf-410d-bcc2-2857f44bce4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105135", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwzuyncpbh2j", "content": "InternLM MindSearch 0.1.0 faces CRITICAL code injection (CVE-2026-105135). Remote attackers can run arbitrary code \u2014 no patch yet. Restrict access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-105135-code-injection-in-internlm-mindsearch-f0d6fc8a61cd76d9 #OffSeq #CVE202610513...", "creation_timestamp": "2026-10-04T07:30:27.412684Z"} https://vulnerability.circl.lu/sighting/daeb6aa9-adcf-410d-bcc2-2857f44bce4a/export Sun, 04 Oct 2026 07:30:27 +0000 https://vulnerability.circl.lu/sighting/c4fa6918-d5cd-4f2d-888d-2edb4bf600c9/export {"uuid": "c4fa6918-d5cd-4f2d-888d-2edb4bf600c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105135", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117381465680047279", "content": "InternLM MindSearch 0.1.0 hit by CRITICAL code injection (CVE-2026-105135) in ExecutionAction.run \u2014 remote attackers can execute arbitrary code via manipulated inputs. No patch; restrict access & monitor for updates. https://radar.offseq.com/threat/cve-2026-105135-code-injection-in-internlm-mindsearch-f0d6fc8a61cd76d9 #OffSeq #CVE2026105135 #infosec #zeroday", "creation_timestamp": "2026-10-04T07:30:25.369781Z"} {"uuid": "c4fa6918-d5cd-4f2d-888d-2edb4bf600c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105135", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117381465680047279", "content": "InternLM MindSearch 0.1.0 hit by CRITICAL code injection (CVE-2026-105135) in ExecutionAction.run \u2014 remote attackers can execute arbitrary code via manipulated inputs. No patch; restrict access & monitor for updates. https://radar.offseq.com/threat/cve-2026-105135-code-injection-in-internlm-mindsearch-f0d6fc8a61cd76d9 #OffSeq #CVE2026105135 #infosec #zeroday", "creation_timestamp": "2026-10-04T07:30:25.369781Z"} https://vulnerability.circl.lu/sighting/c4fa6918-d5cd-4f2d-888d-2edb4bf600c9/export Sun, 04 Oct 2026 07:30:25 +0000 https://vulnerability.circl.lu/sighting/337b2a0b-3fef-4e78-9f5f-d0124a3bc5c2/export {"uuid": "337b2a0b-3fef-4e78-9f5f-d0124a3bc5c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117378615596344582", "content": "A new vulnerability with increased severity was disclosed for InternLM MindSearch (CVE-2026-105135) https://vuldb.com/vuln/413352", "creation_timestamp": "2026-10-03T19:25:36.347006Z"} {"uuid": "337b2a0b-3fef-4e78-9f5f-d0124a3bc5c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105135", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117378615596344582", "content": "A new vulnerability with increased severity was disclosed for InternLM MindSearch (CVE-2026-105135) https://vuldb.com/vuln/413352", "creation_timestamp": "2026-10-03T19:25:36.347006Z"} https://vulnerability.circl.lu/sighting/337b2a0b-3fef-4e78-9f5f-d0124a3bc5c2/export Sat, 03 Oct 2026 19:25:36 +0000