https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 26 Aug 2026 18:47:56 +0000 https://vulnerability.circl.lu/sighting/f95db6e0-7340-4679-a55f-85470da6f489/export {"uuid": "f95db6e0-7340-4679-a55f-85470da6f489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-23T00:00:46.782807Z"} {"uuid": "f95db6e0-7340-4679-a55f-85470da6f489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-23T00:00:46.782807Z"} https://vulnerability.circl.lu/sighting/f95db6e0-7340-4679-a55f-85470da6f489/export Sun, 23 Aug 2026 00:00:46 +0000 https://vulnerability.circl.lu/sighting/9d0c22ae-c3a2-4ff2-bc20-3f22cd15c37e/export {"uuid": "9d0c22ae-c3a2-4ff2-bc20-3f22cd15c37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-23T00:00:45.846805Z"} {"uuid": "9d0c22ae-c3a2-4ff2-bc20-3f22cd15c37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-23T00:00:45.846805Z"} https://vulnerability.circl.lu/sighting/9d0c22ae-c3a2-4ff2-bc20-3f22cd15c37e/export Sun, 23 Aug 2026 00:00:45 +0000 https://vulnerability.circl.lu/sighting/4b33a1cb-2c30-47ed-9a77-3201285c6824/export {"uuid": "4b33a1cb-2c30-47ed-9a77-3201285c6824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-22T00:00:10.837661Z"} {"uuid": "4b33a1cb-2c30-47ed-9a77-3201285c6824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-22T00:00:10.837661Z"} https://vulnerability.circl.lu/sighting/4b33a1cb-2c30-47ed-9a77-3201285c6824/export Sat, 22 Aug 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/ac00791f-6f7e-4668-9c89-4d95d1892b98/export {"uuid": "ac00791f-6f7e-4668-9c89-4d95d1892b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-22T00:00:10.500072Z"} {"uuid": "ac00791f-6f7e-4668-9c89-4d95d1892b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-22T00:00:10.500072Z"} https://vulnerability.circl.lu/sighting/ac00791f-6f7e-4668-9c89-4d95d1892b98/export Sat, 22 Aug 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/6eece5d1-af66-4d35-9225-822ff9ddd443/export {"uuid": "6eece5d1-af66-4d35-9225-822ff9ddd443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-21T23:00:07.252178Z"} {"uuid": "6eece5d1-af66-4d35-9225-822ff9ddd443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2424", "content": "Critical Security Update Protects MSP Platforms From Active Account Takeover Attacks\n\nN-able has released an emergency hotfix to address CVE-2026-18577, a critical authentication bypass vulnerability affecting N-central servers running versions earlier than 2026.3.1.7.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-08-21T23:00:07.252178Z"} https://vulnerability.circl.lu/sighting/6eece5d1-af66-4d35-9225-822ff9ddd443/export Fri, 21 Aug 2026 23:00:07 +0000 https://vulnerability.circl.lu/sighting/4341c60c-9f19-4a1e-b927-3bf0799ecc8e/export {"uuid": "4341c60c-9f19-4a1e-b927-3bf0799ecc8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-21T23:00:06.847910Z"} {"uuid": "4341c60c-9f19-4a1e-b927-3bf0799ecc8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2453", "content": "\ud83d\udd34 CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited\n\nCISA, on August 5, 2026,\u00a0added\u00a0three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows:\n\nCVE-2026-9198\u00a0(CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.\n\nCVE-2026-34486\u00a0(CVS score: 7.5) - A missing encryption of sensitive data vulnerability in Apache Tomcat that allows a bypass of EncryptInterceptor, a cluster component that adds pre-shared key encryption to messages sent between cluster nodes.\n\nAlso added to the KEV catalog is CVE-2026-18556 (CVSS score: 8.2), an authentication bypass vulnerability in N-able N-central. It's worth noting that an incomplete fix for this issue prompted N-able to issue a fresh patch, which is tracked as CVE-2026-18577 (CVSS score: 8.2).", "creation_timestamp": "2026-08-21T23:00:06.847910Z"} https://vulnerability.circl.lu/sighting/4341c60c-9f19-4a1e-b927-3bf0799ecc8e/export Fri, 21 Aug 2026 23:00:06 +0000 https://vulnerability.circl.lu/sighting/59250c60-9572-4316-b830-5c6020fe4fe2/export {"uuid": "59250c60-9572-4316-b830-5c6020fe4fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mthdd6fcux2o", "content": "CVE-2026-18577, an auth bypass in N-able $NABL N-central, is under active exploitation. Attackers breaching the platform IT providers use to remotely manage client networks can pivot into clients via N-central's own Take Control feature. Huntress traced one breach to nine client orgs.", "creation_timestamp": "2026-08-19T18:10:42.671564Z"} {"uuid": "59250c60-9572-4316-b830-5c6020fe4fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mthdd6fcux2o", "content": "CVE-2026-18577, an auth bypass in N-able $NABL N-central, is under active exploitation. Attackers breaching the platform IT providers use to remotely manage client networks can pivot into clients via N-central's own Take Control feature. Huntress traced one breach to nine client orgs.", "creation_timestamp": "2026-08-19T18:10:42.671564Z"} https://vulnerability.circl.lu/sighting/59250c60-9572-4316-b830-5c6020fe4fe2/export Wed, 19 Aug 2026 18:10:42 +0000 https://vulnerability.circl.lu/sighting/4239921d-f461-4d9d-9c8c-8aaf2f5d8d76/export {"uuid": "4239921d-f461-4d9d-9c8c-8aaf2f5d8d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/quasagroup.bsky.social/post/3mtdrugluwk2r", "content": "N-central exige un segundo parche: la primera correcci\u00f3n no bast\u00f3\nquasa.io/es/media/n-c...\nFuentes: Quasa Media, El aviso de seguridad de N-able, La ficha de CVE-2026-18577 en Rapid7, La investigaci\u00f3n actualizada de Huntress / Escritor: Slava Vasipenok", "creation_timestamp": "2026-08-18T08:20:17.493111Z"} {"uuid": "4239921d-f461-4d9d-9c8c-8aaf2f5d8d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/quasagroup.bsky.social/post/3mtdrugluwk2r", "content": "N-central exige un segundo parche: la primera correcci\u00f3n no bast\u00f3\nquasa.io/es/media/n-c...\nFuentes: Quasa Media, El aviso de seguridad de N-able, La ficha de CVE-2026-18577 en Rapid7, La investigaci\u00f3n actualizada de Huntress / Escritor: Slava Vasipenok", "creation_timestamp": "2026-08-18T08:20:17.493111Z"} https://vulnerability.circl.lu/sighting/4239921d-f461-4d9d-9c8c-8aaf2f5d8d76/export Tue, 18 Aug 2026 08:20:17 +0000 https://vulnerability.circl.lu/sighting/dea2879e-d364-4427-b35a-989fb049744d/export {"uuid": "dea2879e-d364-4427-b35a-989fb049744d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msydby42sr2r", "content": "\ud83d\udce2 CVE-2026-18577 : Bypass d'authentification N-able N-central exploit\u00e9 activement\n\nCet article analyse CVE-2026-18577, une vuln\u00e9rabilit\u00e9 de bypass d'authentification affectant la plateforme de Remote Monitoring and Management (RMM)\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#NAbleNCentral #RMM #Cyberveille", "creation_timestamp": "2026-08-13T19:00:07.359589Z"} {"uuid": "dea2879e-d364-4427-b35a-989fb049744d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msydby42sr2r", "content": "\ud83d\udce2 CVE-2026-18577 : Bypass d'authentification N-able N-central exploit\u00e9 activement\n\nCet article analyse CVE-2026-18577, une vuln\u00e9rabilit\u00e9 de bypass d'authentification affectant la plateforme de Remote Monitoring and Management (RMM)\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#NAbleNCentral #RMM #Cyberveille", "creation_timestamp": "2026-08-13T19:00:07.359589Z"} https://vulnerability.circl.lu/sighting/dea2879e-d364-4427-b35a-989fb049744d/export Thu, 13 Aug 2026 19:00:07 +0000 https://vulnerability.circl.lu/sighting/abb80674-ffed-4d8b-91c2-9fcbc11fcdcb/export {"uuid": "abb80674-ffed-4d8b-91c2-9fcbc11fcdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-034", "content": "", "creation_timestamp": "2026-08-13T08:45:33.353585Z"} {"uuid": "abb80674-ffed-4d8b-91c2-9fcbc11fcdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18577", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-034", "content": "", "creation_timestamp": "2026-08-13T08:45:33.353585Z"} https://vulnerability.circl.lu/sighting/abb80674-ffed-4d8b-91c2-9fcbc11fcdcb/export Thu, 13 Aug 2026 08:45:33 +0000