https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 12 Sep 2026 22:50:48 +0000 https://vulnerability.circl.lu/sighting/96ac7d59-a9ad-4b2a-866f-fe86d2073c52/export {"uuid": "96ac7d59-a9ad-4b2a-866f-fe86d2073c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "published-proof-of-concept", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-16T00:00:22.114597Z"} {"uuid": "96ac7d59-a9ad-4b2a-866f-fe86d2073c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "published-proof-of-concept", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-16T00:00:22.114597Z"} https://vulnerability.circl.lu/sighting/96ac7d59-a9ad-4b2a-866f-fe86d2073c52/export Sun, 16 Aug 2026 00:00:22 +0000 https://vulnerability.circl.lu/sighting/4d6c1f64-b20b-40d0-8be3-ab18d20397b9/export {"uuid": "4d6c1f64-b20b-40d0-8be3-ab18d20397b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "seen", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-15T08:00:06.996380Z"} {"uuid": "4d6c1f64-b20b-40d0-8be3-ab18d20397b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "seen", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-15T08:00:06.996380Z"} https://vulnerability.circl.lu/sighting/4d6c1f64-b20b-40d0-8be3-ab18d20397b9/export Sat, 15 Aug 2026 08:00:06 +0000 https://vulnerability.circl.lu/sighting/82e53677-6699-4330-acf4-3337a11d44fd/export {"uuid": "82e53677-6699-4330-acf4-3337a11d44fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/423", "content": "CVE-2026-33267 \u2014 Apache Traffic Server untrusted @ header \u2192 internal metadata spoof\nsource: https://github.com/boreas37/cve-2026-33267-poc", "creation_timestamp": "2026-08-15T00:00:47.741485Z"} {"uuid": "82e53677-6699-4330-acf4-3337a11d44fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/423", "content": "CVE-2026-33267 \u2014 Apache Traffic Server untrusted @ header \u2192 internal metadata spoof\nsource: https://github.com/boreas37/cve-2026-33267-poc", "creation_timestamp": "2026-08-15T00:00:47.741485Z"} https://vulnerability.circl.lu/sighting/82e53677-6699-4330-acf4-3337a11d44fd/export Sat, 15 Aug 2026 00:00:47 +0000 https://vulnerability.circl.lu/sighting/ca7ec1c9-2331-47e3-ae53-31a7e5af2f6d/export {"uuid": "ca7ec1c9-2331-47e3-ae53-31a7e5af2f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/423", "content": "CVE-2026-33267 \u2014 Apache Traffic Server untrusted @ header \u2192 internal metadata spoof\nsource: https://github.com/boreas37/cve-2026-33267-poc", "creation_timestamp": "2026-08-14T13:00:03.683095Z"} {"uuid": "ca7ec1c9-2331-47e3-ae53-31a7e5af2f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/423", "content": "CVE-2026-33267 \u2014 Apache Traffic Server untrusted @ header \u2192 internal metadata spoof\nsource: https://github.com/boreas37/cve-2026-33267-poc", "creation_timestamp": "2026-08-14T13:00:03.683095Z"} https://vulnerability.circl.lu/sighting/ca7ec1c9-2331-47e3-ae53-31a7e5af2f6d/export Fri, 14 Aug 2026 13:00:03 +0000 https://vulnerability.circl.lu/sighting/d99b5152-123e-41bd-bb53-230342c20abb/export {"uuid": "d99b5152-123e-41bd-bb53-230342c20abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97768", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-33267-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 17:49:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-33267 \u2014 Apache Traffic Server @ header internal-metadata spoof (CVSS 10.0). Verified: @ headers leak to plugins on 10.1.2, stripped on 10.1.4\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T00:00:06.813063Z"} {"uuid": "d99b5152-123e-41bd-bb53-230342c20abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97768", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-33267-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 17:49:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-33267 \u2014 Apache Traffic Server @ header internal-metadata spoof (CVSS 10.0). Verified: @ headers leak to plugins on 10.1.2, stripped on 10.1.4\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T00:00:06.813063Z"} https://vulnerability.circl.lu/sighting/d99b5152-123e-41bd-bb53-230342c20abb/export Thu, 13 Aug 2026 00:00:06 +0000 https://vulnerability.circl.lu/sighting/fc4ff259-248e-4bce-a684-6fd136061a16/export {"uuid": "fc4ff259-248e-4bce-a684-6fd136061a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "seen", "source": "https://t.me/GithubRedTeam/97768", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-33267-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 17:49:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-33267 \u2014 Apache Traffic Server @ header internal-metadata spoof (CVSS 10.0). Verified: @ headers leak to plugins on 10.1.2, stripped on 10.1.4\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T19:00:03.535759Z"} {"uuid": "fc4ff259-248e-4bce-a684-6fd136061a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "seen", "source": "https://t.me/GithubRedTeam/97768", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-33267-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 17:49:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-33267 \u2014 Apache Traffic Server @ header internal-metadata spoof (CVSS 10.0). Verified: @ headers leak to plugins on 10.1.2, stripped on 10.1.4\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T19:00:03.535759Z"} https://vulnerability.circl.lu/sighting/fc4ff259-248e-4bce-a684-6fd136061a16/export Wed, 12 Aug 2026 19:00:03 +0000 https://vulnerability.circl.lu/sighting/e454f61e-1b6c-4ade-a878-b15ca516613b/export {"uuid": "e454f61e-1b6c-4ade-a878-b15ca516613b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrriaopnw32v", "content": "\u26a0\ufe0f PATCH NOW\n\nApache Traffic Server has a critical flaw (CVE-2026-33267, CVSS 10) that lets an attacker smuggle hidden requests through the proxy and forge the internal data it trusts.\n\nAffects 9.2.0-9.2.14 and 10.1.0-10.1.3.\n\nFix: upgrade to 9.2.15 or 10.1.4.", "creation_timestamp": "2026-07-29T08:15:02.812674Z"} {"uuid": "e454f61e-1b6c-4ade-a878-b15ca516613b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrriaopnw32v", "content": "\u26a0\ufe0f PATCH NOW\n\nApache Traffic Server has a critical flaw (CVE-2026-33267, CVSS 10) that lets an attacker smuggle hidden requests through the proxy and forge the internal data it trusts.\n\nAffects 9.2.0-9.2.14 and 10.1.0-10.1.3.\n\nFix: upgrade to 9.2.15 or 10.1.4.", "creation_timestamp": "2026-07-29T08:15:02.812674Z"} https://vulnerability.circl.lu/sighting/e454f61e-1b6c-4ade-a878-b15ca516613b/export Wed, 29 Jul 2026 08:15:02 +0000 https://vulnerability.circl.lu/sighting/e697ea1e-756d-4e77-9b18-a816b2cdd22d/export {"uuid": "e697ea1e-756d-4e77-9b18-a816b2cdd22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrrgxocsiq2v", "content": "CVE-2026-33267 - apache traffic server\nApache Traffic Server versions 9.2.0 to 9.2.14 and 10.1.0 to 10.1.3 have a security issue. An attacker could manipulate certain headers to make the server think\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-29T07:52:05.731122Z"} {"uuid": "e697ea1e-756d-4e77-9b18-a816b2cdd22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33267", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrrgxocsiq2v", "content": "CVE-2026-33267 - apache traffic server\nApache Traffic Server versions 9.2.0 to 9.2.14 and 10.1.0 to 10.1.3 have a security issue. An attacker could manipulate certain headers to make the server think\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-29T07:52:05.731122Z"} https://vulnerability.circl.lu/sighting/e697ea1e-756d-4e77-9b18-a816b2cdd22d/export Wed, 29 Jul 2026 07:52:05 +0000