https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 06 Aug 2026 19:20:28 +0000 https://vulnerability.circl.lu/sighting/ca9a42c5-2e04-4f69-a0d4-dc409d460390/export {"uuid": "ca9a42c5-2e04-4f69-a0d4-dc409d460390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1728", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msftk7zf5n2t", "content": "WSO2 API Manager (4.0.0 \u2013 4.6.0) faces CRITICAL CVE-2026-1728 \u2014 improper privilege management lets low-priv tokens hit admin APIs. Restrict access, monitor tokens, check vendor updates. https://radar.offseq.com/threat/cve-2026-1728-cwe-269-improper-privilege-management-in-wso2-wso2-api-manager-fe...", "creation_timestamp": "2026-08-06T10:30:28.849911Z"} {"uuid": "ca9a42c5-2e04-4f69-a0d4-dc409d460390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1728", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msftk7zf5n2t", "content": "WSO2 API Manager (4.0.0 \u2013 4.6.0) faces CRITICAL CVE-2026-1728 \u2014 improper privilege management lets low-priv tokens hit admin APIs. Restrict access, monitor tokens, check vendor updates. https://radar.offseq.com/threat/cve-2026-1728-cwe-269-improper-privilege-management-in-wso2-wso2-api-manager-fe...", "creation_timestamp": "2026-08-06T10:30:28.849911Z"} https://vulnerability.circl.lu/sighting/ca9a42c5-2e04-4f69-a0d4-dc409d460390/export Thu, 06 Aug 2026 10:30:28 +0000 https://vulnerability.circl.lu/sighting/7f0e6538-d2f6-4dbc-9a5b-c88d1ae23128/export {"uuid": "7f0e6538-d2f6-4dbc-9a5b-c88d1ae23128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1728", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117048097240170332", "content": "CVE-2026-1728 | CRITICAL: WSO2 API Manager (v4.0.0 \u2013 4.6.0) has an improper privilege management flaw. Low-privileged user tokens can access admin REST APIs \u2014 possible admin account takeover. Patch status unknown. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-1728-cwe-269-improper-privilege-management-in-wso2-wso2-api-manager-fea4a27d18a06e70 #OffSeq #WSO2 #Vuln", "creation_timestamp": "2026-08-06T10:30:26.992462Z"} {"uuid": "7f0e6538-d2f6-4dbc-9a5b-c88d1ae23128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1728", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117048097240170332", "content": "CVE-2026-1728 | CRITICAL: WSO2 API Manager (v4.0.0 \u2013 4.6.0) has an improper privilege management flaw. Low-privileged user tokens can access admin REST APIs \u2014 possible admin account takeover. Patch status unknown. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-1728-cwe-269-improper-privilege-management-in-wso2-wso2-api-manager-fea4a27d18a06e70 #OffSeq #WSO2 #Vuln", "creation_timestamp": "2026-08-06T10:30:26.992462Z"} https://vulnerability.circl.lu/sighting/7f0e6538-d2f6-4dbc-9a5b-c88d1ae23128/export Thu, 06 Aug 2026 10:30:26 +0000 https://vulnerability.circl.lu/sighting/e8476b31-9d91-47c6-86c8-118039c408e4/export {"uuid": "e8476b31-9d91-47c6-86c8-118039c408e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1728", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msfopqzrcd2f", "content": "CVE-2026-1728\nLow-privilege user tokens can be used to access sensitive admin features in WSO2 products, potentially allowing an attacker to take control of the entire system. This requires the attacker to already have a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T09:04:04.926629Z"} {"uuid": "e8476b31-9d91-47c6-86c8-118039c408e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1728", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msfopqzrcd2f", "content": "CVE-2026-1728\nLow-privilege user tokens can be used to access sensitive admin features in WSO2 products, potentially allowing an attacker to take control of the entire system. This requires the attacker to already have a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T09:04:04.926629Z"} https://vulnerability.circl.lu/sighting/e8476b31-9d91-47c6-86c8-118039c408e4/export Thu, 06 Aug 2026 09:04:04 +0000 https://vulnerability.circl.lu/sighting/3510c168-ac54-4850-9313-a75afa411dc6/export {"uuid": "3510c168-ac54-4850-9313-a75afa411dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dpb5ohyaumqjd", "content": "CVE-2026-1728 - Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeover\nCVE ID : CVE-2026-1728\n \n Published : Aug. 6, 2026, 7:33 a.m. | 47\u00a0minutes ago\n \n Description : Tokens issued to a low-privileged user are not sufficiently restri...", "creation_timestamp": "2026-08-06T08:28:33.662313Z"} {"uuid": "3510c168-ac54-4850-9313-a75afa411dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dpb5ohyaumqjd", "content": "CVE-2026-1728 - Privilege Escalation via System REST APIs in Multiple WSO2 Products Permits Admin Account Takeover\nCVE ID : CVE-2026-1728\n \n Published : Aug. 6, 2026, 7:33 a.m. | 47\u00a0minutes ago\n \n Description : Tokens issued to a low-privileged user are not sufficiently restri...", "creation_timestamp": "2026-08-06T08:28:33.662313Z"} https://vulnerability.circl.lu/sighting/3510c168-ac54-4850-9313-a75afa411dc6/export Thu, 06 Aug 2026 08:28:33 +0000