https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 12:11:05 +0000 https://vulnerability.circl.lu/sighting/efccf5d6-9354-4695-9b6a-dd3d3061ee49/export {"uuid": "efccf5d6-9354-4695-9b6a-dd3d3061ee49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35339", "type": "seen", "source": "https://gist.github.com/alon710/194b323308c6542ff0a22bb475e2c02f", "content": "# CVE-2026-35339: CVE-2026-35339: Incorrect Exit Status Propagation in Rust uutils/coreutils chmod Recursive Execution\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-07-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-35339\n\n## Summary\nCVE-2026-35339 is a logic vulnerability in the Rust-written `uutils/coreutils` implementation of the `chmod` utility. When executing recursively (`-R` or `--recursive`) over multiple target paths, the utility fails to accumulate the overall exit status, overwriting error codes from early failures with the status of the final target. This results in false-success exit codes (0), potentially leading security automation and deployment scripts to assume permission modifications succeeded when they actually failed.\n\n## TL;DR\nA 'last-file-wins' logic vulnerability in Rust-based `chmod -R` permits silent failures, returning exit code 0 even if previous targets failed. This bypasses automated permission checks in scripts and CI/CD pipelines.\n\n## Technical Details\n\n- **CWE ID**: CWE-253 (Incorrect Check of Function Return Value)\n- **Attack Vector**: Local (AV:L)\n- **CVSS v3.1**: 5.5 (Medium)\n- **EPSS Score**: 0.00142 (3.90th percentile)\n- **Impact**: Integrity Loss (Silent permission-application bypasses)\n- **Exploit Status**: No public weaponized exploits available\n- **CISA KEV Status**: Not listed\n\n## Affected Systems\n\n- uutils/coreutils\n- **coreutils**: < 0.6.0 (Fixed in: `0.6.0`)\n\n## Mitigation\n\n- Upgrade uutils/coreutils to version 0.6.0 or later.\n- Deconstruct multi-argument recursive chmod operations in scripts into separate commands or chain them with explicit logical operators.\n- Implement defensive post-execution verification checks using test operators or find to validate that target permissions match expectations.\n\n**Remediation Steps:**\n1. Identify systems or container images using Rust uutils/coreutils.\n2. Update coreutils package to version 0.6.0 or higher.\n3. For active CI/CD pipelines, audit bash scripts or Ansible playbooks that invoke chmod with multiple recursive directory targets.\n4. Modify multi-target invocations to single-target invocations linked with '&&' if immediate upgrades are not possible.\n\n## References\n\n- [CVE-2026-35339 Record](https://www.cve.org/CVERecord?id=CVE-2026-35339)\n- [GitHub Pull Request 9793](https://github.com/uutils/coreutils/pull/9793)\n- [Security Fix Commit](https://github.com/uutils/coreutils/commit/abd581f62e97d0b147306ac40eac13af71c6fbba)\n- [uutils coreutils 0.6.0 Release](https://github.com/uutils/coreutils/releases/tag/0.6.0)\n- [Wiz Vulnerability Database Entry](https://www.wiz.io/vulnerability-database/cve/cve-2026-35339)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-35339) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T19:41:46.111341Z"} {"uuid": "efccf5d6-9354-4695-9b6a-dd3d3061ee49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35339", "type": "seen", "source": "https://gist.github.com/alon710/194b323308c6542ff0a22bb475e2c02f", "content": "# CVE-2026-35339: CVE-2026-35339: Incorrect Exit Status Propagation in Rust uutils/coreutils chmod Recursive Execution\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-07-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-35339\n\n## Summary\nCVE-2026-35339 is a logic vulnerability in the Rust-written `uutils/coreutils` implementation of the `chmod` utility. When executing recursively (`-R` or `--recursive`) over multiple target paths, the utility fails to accumulate the overall exit status, overwriting error codes from early failures with the status of the final target. This results in false-success exit codes (0), potentially leading security automation and deployment scripts to assume permission modifications succeeded when they actually failed.\n\n## TL;DR\nA 'last-file-wins' logic vulnerability in Rust-based `chmod -R` permits silent failures, returning exit code 0 even if previous targets failed. This bypasses automated permission checks in scripts and CI/CD pipelines.\n\n## Technical Details\n\n- **CWE ID**: CWE-253 (Incorrect Check of Function Return Value)\n- **Attack Vector**: Local (AV:L)\n- **CVSS v3.1**: 5.5 (Medium)\n- **EPSS Score**: 0.00142 (3.90th percentile)\n- **Impact**: Integrity Loss (Silent permission-application bypasses)\n- **Exploit Status**: No public weaponized exploits available\n- **CISA KEV Status**: Not listed\n\n## Affected Systems\n\n- uutils/coreutils\n- **coreutils**: < 0.6.0 (Fixed in: `0.6.0`)\n\n## Mitigation\n\n- Upgrade uutils/coreutils to version 0.6.0 or later.\n- Deconstruct multi-argument recursive chmod operations in scripts into separate commands or chain them with explicit logical operators.\n- Implement defensive post-execution verification checks using test operators or find to validate that target permissions match expectations.\n\n**Remediation Steps:**\n1. Identify systems or container images using Rust uutils/coreutils.\n2. Update coreutils package to version 0.6.0 or higher.\n3. For active CI/CD pipelines, audit bash scripts or Ansible playbooks that invoke chmod with multiple recursive directory targets.\n4. Modify multi-target invocations to single-target invocations linked with '&&' if immediate upgrades are not possible.\n\n## References\n\n- [CVE-2026-35339 Record](https://www.cve.org/CVERecord?id=CVE-2026-35339)\n- [GitHub Pull Request 9793](https://github.com/uutils/coreutils/pull/9793)\n- [Security Fix Commit](https://github.com/uutils/coreutils/commit/abd581f62e97d0b147306ac40eac13af71c6fbba)\n- [uutils coreutils 0.6.0 Release](https://github.com/uutils/coreutils/releases/tag/0.6.0)\n- [Wiz Vulnerability Database Entry](https://www.wiz.io/vulnerability-database/cve/cve-2026-35339)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-35339) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T19:41:46.111341Z"} https://vulnerability.circl.lu/sighting/efccf5d6-9354-4695-9b6a-dd3d3061ee49/export Mon, 06 Jul 2026 19:41:46 +0000 https://vulnerability.circl.lu/sighting/fd303294-4957-4055-a775-f311c65a7ccd/export {"uuid": "fd303294-4957-4055-a775-f311c65a7ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35338", "type": "published-proof-of-concept", "source": "https://github.com/uutils/coreutils/security/advisories/GHSA-4c7q-4928-8445", "content": "", "creation_timestamp": "2026-07-06T18:35:04.498391Z"} {"uuid": "fd303294-4957-4055-a775-f311c65a7ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35338", "type": "published-proof-of-concept", "source": "https://github.com/uutils/coreutils/security/advisories/GHSA-4c7q-4928-8445", "content": "", "creation_timestamp": "2026-07-06T18:35:04.498391Z"} https://vulnerability.circl.lu/sighting/fd303294-4957-4055-a775-f311c65a7ccd/export Mon, 06 Jul 2026 18:35:04 +0000 https://vulnerability.circl.lu/sighting/ddd1d916-c4d3-4942-a328-0380a6efcf5b/export {"uuid": "ddd1d916-c4d3-4942-a328-0380a6efcf5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35338", "type": "seen", "source": "https://gist.github.com/alon710/1cf52ea2dbf4e032410868a401b20900", "content": "# CVE-2026-35338: CVE-2026-35338: Path Validation Bypass in uutils/coreutils chmod --preserve-root Option\n\n> **CVSS Score:** 7.3\n> **Published:** 2026-07-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-35338\n\n## Summary\nA path validation bypass vulnerability exists in the chmod utility of uutils/coreutils before version 0.6.0. The '--preserve-root' safety mechanism relies on a literal string comparison, allowing local users to bypass root directory protection via unnormalized paths (such as '/../' or symbolic links) and recursively alter system-wide permissions.\n\n## TL;DR\nA vulnerability in uutils/coreutils chmod allows local bypass of '--preserve-root' safety checks using unnormalized paths like '/../', leading to recursive root permission destruction.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Local (AV:L)\n- **CVSS v3.1 Score**: 7.3\n- **EPSS Score**: 0.00175\n- **EPSS Percentile**: 7.13%\n- **Impact**: Local Denial of Service / Structural Permissions Failure\n- **Exploit Status**: Proof of Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- uutils/coreutils (chmod recursive execution)\n- **uutils/coreutils**: < 0.6.0 (Fixed in: `0.6.0`)\n\n## Mitigation\n\n- Upgrade uutils/coreutils to version 0.6.0 or higher.\n- Deploy shell auditing/monitoring rules to detect recursive execution parameters referencing parent paths.\n- Implement MAC policies (AppArmor, SELinux) to restrict recursive chmod permissions on system critical directories.\n\n**Remediation Steps:**\n1. Identify environments utilizing uutils/coreutils (commonly used in Rust-based container base images or alternative coreutils installations).\n2. Check current installed version via `chmod --version` or system package manager.\n3. Update the package to at least 0.6.0. If installing via Cargo, execute `cargo install uutils-coreutils --locked`.\n4. Verify compliance by attempting a non-destructive verification: run `chmod -R --preserve-root 755 /../` using an unprivileged user to confirm that the safe block triggers immediately.\n\n## References\n\n- [CVE org Entry](https://www.cve.org/CVERecord?id=CVE-2026-35338)\n- [uutils/coreutils Release Tag 0.6.0](https://github.com/uutils/coreutils/releases/tag/0.6.0)\n- [Security Fix Pull Request #10033](https://github.com/uutils/coreutils/pull/10033)\n- [Official Fix Commit](https://github.com/uutils/coreutils/commit/413055b378fa6fe2299c5e5f538c8e6e841ab810)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-35338) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T18:12:26.916500Z"} {"uuid": "ddd1d916-c4d3-4942-a328-0380a6efcf5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35338", "type": "seen", "source": "https://gist.github.com/alon710/1cf52ea2dbf4e032410868a401b20900", "content": "# CVE-2026-35338: CVE-2026-35338: Path Validation Bypass in uutils/coreutils chmod --preserve-root Option\n\n> **CVSS Score:** 7.3\n> **Published:** 2026-07-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-35338\n\n## Summary\nA path validation bypass vulnerability exists in the chmod utility of uutils/coreutils before version 0.6.0. The '--preserve-root' safety mechanism relies on a literal string comparison, allowing local users to bypass root directory protection via unnormalized paths (such as '/../' or symbolic links) and recursively alter system-wide permissions.\n\n## TL;DR\nA vulnerability in uutils/coreutils chmod allows local bypass of '--preserve-root' safety checks using unnormalized paths like '/../', leading to recursive root permission destruction.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Local (AV:L)\n- **CVSS v3.1 Score**: 7.3\n- **EPSS Score**: 0.00175\n- **EPSS Percentile**: 7.13%\n- **Impact**: Local Denial of Service / Structural Permissions Failure\n- **Exploit Status**: Proof of Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- uutils/coreutils (chmod recursive execution)\n- **uutils/coreutils**: < 0.6.0 (Fixed in: `0.6.0`)\n\n## Mitigation\n\n- Upgrade uutils/coreutils to version 0.6.0 or higher.\n- Deploy shell auditing/monitoring rules to detect recursive execution parameters referencing parent paths.\n- Implement MAC policies (AppArmor, SELinux) to restrict recursive chmod permissions on system critical directories.\n\n**Remediation Steps:**\n1. Identify environments utilizing uutils/coreutils (commonly used in Rust-based container base images or alternative coreutils installations).\n2. Check current installed version via `chmod --version` or system package manager.\n3. Update the package to at least 0.6.0. If installing via Cargo, execute `cargo install uutils-coreutils --locked`.\n4. Verify compliance by attempting a non-destructive verification: run `chmod -R --preserve-root 755 /../` using an unprivileged user to confirm that the safe block triggers immediately.\n\n## References\n\n- [CVE org Entry](https://www.cve.org/CVERecord?id=CVE-2026-35338)\n- [uutils/coreutils Release Tag 0.6.0](https://github.com/uutils/coreutils/releases/tag/0.6.0)\n- [Security Fix Pull Request #10033](https://github.com/uutils/coreutils/pull/10033)\n- [Official Fix Commit](https://github.com/uutils/coreutils/commit/413055b378fa6fe2299c5e5f538c8e6e841ab810)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-35338) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T18:12:26.916500Z"} https://vulnerability.circl.lu/sighting/ddd1d916-c4d3-4942-a328-0380a6efcf5b/export Mon, 06 Jul 2026 18:12:26 +0000 https://vulnerability.circl.lu/sighting/04118765-7dab-49b0-ad0a-c664ba1574c7/export {"uuid": "04118765-7dab-49b0-ad0a-c664ba1574c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35330", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3monxd4umlc2y", "content": "\ud83d\udd12 Vulnerabilidades cr\u00edticas no StrongSwan (CVE-2026-35330 com CVSS 9.2) afetam vers\u00f5es \u2264 5.9.13. Guia pr\u00e1tico para administradores openSUSE: como verificar, atualizar com script automatizado e mitigar com iptables/AppArmor. Saiba mais: -> tinyurl.com/5xm58zkj #SUSE", "creation_timestamp": "2026-06-19T18:18:38.283848Z"} {"uuid": "04118765-7dab-49b0-ad0a-c664ba1574c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35330", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3monxd4umlc2y", "content": "\ud83d\udd12 Vulnerabilidades cr\u00edticas no StrongSwan (CVE-2026-35330 com CVSS 9.2) afetam vers\u00f5es \u2264 5.9.13. Guia pr\u00e1tico para administradores openSUSE: como verificar, atualizar com script automatizado e mitigar com iptables/AppArmor. Saiba mais: -> tinyurl.com/5xm58zkj #SUSE", "creation_timestamp": "2026-06-19T18:18:38.283848Z"} https://vulnerability.circl.lu/sighting/04118765-7dab-49b0-ad0a-c664ba1574c7/export Fri, 19 Jun 2026 18:18:38 +0000 https://vulnerability.circl.lu/sighting/92f46432-1cc8-4d9d-8d40-dc392cdc3a1f/export {"uuid": "92f46432-1cc8-4d9d-8d40-dc392cdc3a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35330", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3monxd47ons2y", "content": "\ud83d\udd12 Vulnerabilidades cr\u00edticas no StrongSwan (CVE-2026-35330 com CVSS 9.2) afetam vers\u00f5es \u2264 5.9.13. Guia pr\u00e1tico para administradores openSUSE: como verificar, atualizar com script automatizado e mitigar com iptables/AppArmor. Saiba mais: -> tinyurl.com/5xm58zkj #SUSE", "creation_timestamp": "2026-06-19T18:18:37.769355Z"} {"uuid": "92f46432-1cc8-4d9d-8d40-dc392cdc3a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35330", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3monxd47ons2y", "content": "\ud83d\udd12 Vulnerabilidades cr\u00edticas no StrongSwan (CVE-2026-35330 com CVSS 9.2) afetam vers\u00f5es \u2264 5.9.13. Guia pr\u00e1tico para administradores openSUSE: como verificar, atualizar com script automatizado e mitigar com iptables/AppArmor. Saiba mais: -> tinyurl.com/5xm58zkj #SUSE", "creation_timestamp": "2026-06-19T18:18:37.769355Z"} https://vulnerability.circl.lu/sighting/92f46432-1cc8-4d9d-8d40-dc392cdc3a1f/export Fri, 19 Jun 2026 18:18:37 +0000 https://vulnerability.circl.lu/sighting/6eb2fa70-6137-4749-848a-d8422e282e90/export {"uuid": "6eb2fa70-6137-4749-848a-d8422e282e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35330", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3montyktjlc2l", "content": "\ud83d\udd12 Vulnerabilidades cr\u00edticas no StrongSwan (CVE-2026-35330 com CVSS 9.2) afetam vers\u00f5es \u2264 5.9.13. Guia pr\u00e1tico para administradores openSUSE: como verificar, atualizar com script automatizado e mitigar com iptables/AppArmor. Saiba mais: -> tinyurl.com/5xm58zkj #SUSE", "creation_timestamp": "2026-06-19T17:19:01.857837Z"} {"uuid": "6eb2fa70-6137-4749-848a-d8422e282e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35330", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3montyktjlc2l", "content": "\ud83d\udd12 Vulnerabilidades cr\u00edticas no StrongSwan (CVE-2026-35330 com CVSS 9.2) afetam vers\u00f5es \u2264 5.9.13. Guia pr\u00e1tico para administradores openSUSE: como verificar, atualizar com script automatizado e mitigar com iptables/AppArmor. Saiba mais: -> tinyurl.com/5xm58zkj #SUSE", "creation_timestamp": "2026-06-19T17:19:01.857837Z"} https://vulnerability.circl.lu/sighting/6eb2fa70-6137-4749-848a-d8422e282e90/export Fri, 19 Jun 2026 17:19:01 +0000 https://vulnerability.circl.lu/sighting/b6910a2f-14d7-4230-a63c-82ad0e745615/export {"uuid": "b6910a2f-14d7-4230-a63c-82ad0e745615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35330", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3montyk74b22l", "content": "\ud83d\udd12 Vulnerabilidades cr\u00edticas no StrongSwan (CVE-2026-35330 com CVSS 9.2) afetam vers\u00f5es \u2264 5.9.13. Guia pr\u00e1tico para administradores openSUSE: como verificar, atualizar com script automatizado e mitigar com iptables/AppArmor. Saiba mais: -> tinyurl.com/5xm58zkj #SUSE", "creation_timestamp": "2026-06-19T17:19:01.318488Z"} {"uuid": "b6910a2f-14d7-4230-a63c-82ad0e745615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35330", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3montyk74b22l", "content": "\ud83d\udd12 Vulnerabilidades cr\u00edticas no StrongSwan (CVE-2026-35330 com CVSS 9.2) afetam vers\u00f5es \u2264 5.9.13. Guia pr\u00e1tico para administradores openSUSE: como verificar, atualizar com script automatizado e mitigar com iptables/AppArmor. Saiba mais: -> tinyurl.com/5xm58zkj #SUSE", "creation_timestamp": "2026-06-19T17:19:01.318488Z"} https://vulnerability.circl.lu/sighting/b6910a2f-14d7-4230-a63c-82ad0e745615/export Fri, 19 Jun 2026 17:19:01 +0000 https://vulnerability.circl.lu/sighting/c8e0036d-4077-46ae-9c6d-66132e2ec511/export {"uuid": "c8e0036d-4077-46ae-9c6d-66132e2ec511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35330", "type": "published-proof-of-concept", "source": "Telegram/K_yHCshI6yZBJj8Foftsx5hfP7GLhbMmJ81CYC3g7d-oupU", "content": "", "creation_timestamp": "2026-05-14T11:00:13.000000Z"} {"uuid": "c8e0036d-4077-46ae-9c6d-66132e2ec511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35330", "type": "published-proof-of-concept", "source": "Telegram/K_yHCshI6yZBJj8Foftsx5hfP7GLhbMmJ81CYC3g7d-oupU", "content": "", "creation_timestamp": "2026-05-14T11:00:13.000000Z"} https://vulnerability.circl.lu/sighting/c8e0036d-4077-46ae-9c6d-66132e2ec511/export Thu, 14 May 2026 11:00:13 +0000 https://vulnerability.circl.lu/sighting/db001283-d76d-42af-908f-986b8c8ccfd8/export {"uuid": "db001283-d76d-42af-908f-986b8c8ccfd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35333", "type": "published-proof-of-concept", "source": "Telegram/K_yHCshI6yZBJj8Foftsx5hfP7GLhbMmJ81CYC3g7d-oupU", "content": "", "creation_timestamp": "2026-05-14T11:00:13.000000Z"} {"uuid": "db001283-d76d-42af-908f-986b8c8ccfd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35333", "type": "published-proof-of-concept", "source": "Telegram/K_yHCshI6yZBJj8Foftsx5hfP7GLhbMmJ81CYC3g7d-oupU", "content": "", "creation_timestamp": "2026-05-14T11:00:13.000000Z"} https://vulnerability.circl.lu/sighting/db001283-d76d-42af-908f-986b8c8ccfd8/export Thu, 14 May 2026 11:00:13 +0000 https://vulnerability.circl.lu/sighting/e0e3661a-6adc-4a1f-9438-191968d55250/export {"uuid": "e0e3661a-6adc-4a1f-9438-191968d55250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35334", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk675r76zg27", "content": "", "creation_timestamp": "2026-04-23T14:15:24.554409Z"} {"uuid": "e0e3661a-6adc-4a1f-9438-191968d55250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35334", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk675r76zg27", "content": "", "creation_timestamp": "2026-04-23T14:15:24.554409Z"} https://vulnerability.circl.lu/sighting/e0e3661a-6adc-4a1f-9438-191968d55250/export Thu, 23 Apr 2026 14:15:24 +0000