https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 30 Aug 2026 05:56:52 +0000 https://vulnerability.circl.lu/sighting/cef773e8-6b7d-4756-a01d-d6c7dc72fa40/export {"uuid": "cef773e8-6b7d-4756-a01d-d6c7dc72fa40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59270", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117168404346872818", "content": "wat\nhttps://spring.io/security/cve-2026-59270\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces.\nAn attacker who could reach the LDAP listener port could authenticate using the well-known administrative bind DN, and then read or modify entries in the in-memory directory.", "creation_timestamp": "2026-08-27T16:26:07.541643Z"} {"uuid": "cef773e8-6b7d-4756-a01d-d6c7dc72fa40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-59270", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117168404346872818", "content": "wat\nhttps://spring.io/security/cve-2026-59270\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces.\nAn attacker who could reach the LDAP listener port could authenticate using the well-known administrative bind DN, and then read or modify entries in the in-memory directory.", "creation_timestamp": "2026-08-27T16:26:07.541643Z"} https://vulnerability.circl.lu/sighting/cef773e8-6b7d-4756-a01d-d6c7dc72fa40/export Thu, 27 Aug 2026 16:26:07 +0000 https://vulnerability.circl.lu/sighting/0cfc22a2-92e6-447a-ae62-b712b8a777f3/export {"uuid": "0cfc22a2-92e6-447a-ae62-b712b8a777f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2qo56isw25", "content": "CVE-2026-59270 - spring security\nThe built\u2011in LDAP service in Spring Security automatically creates an admin account and makes it reachable from any network address. This can let anyone on the network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#springsecurity #spring #CVE #infosec", "creation_timestamp": "2026-08-27T11:30:04.798531Z"} {"uuid": "0cfc22a2-92e6-447a-ae62-b712b8a777f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2qo56isw25", "content": "CVE-2026-59270 - spring security\nThe built\u2011in LDAP service in Spring Security automatically creates an admin account and makes it reachable from any network address. This can let anyone on the network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#springsecurity #spring #CVE #infosec", "creation_timestamp": "2026-08-27T11:30:04.798531Z"} https://vulnerability.circl.lu/sighting/0cfc22a2-92e6-447a-ae62-b712b8a777f3/export Thu, 27 Aug 2026 11:30:04 +0000 https://vulnerability.circl.lu/sighting/3f953c26-20a6-45f7-bd9c-27c1b19d1d98/export {"uuid": "3f953c26-20a6-45f7-bd9c-27c1b19d1d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2fdded362p", "content": "\ud83d\udea8 CVE-2026-59270 \u2014 CVSS 9.4 CRITICAL\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-59270\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T08:07:10.676759Z"} {"uuid": "3f953c26-20a6-45f7-bd9c-27c1b19d1d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2fdded362p", "content": "\ud83d\udea8 CVE-2026-59270 \u2014 CVSS 9.4 CRITICAL\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-59270\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T08:07:10.676759Z"} https://vulnerability.circl.lu/sighting/3f953c26-20a6-45f7-bd9c-27c1b19d1d98/export Thu, 27 Aug 2026 08:07:10 +0000 https://vulnerability.circl.lu/sighting/56a1d215-d80c-4471-8d09-cd22f66ded56/export {"uuid": "56a1d215-d80c-4471-8d09-cd22f66ded56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2bmivlm522", "content": "\ud83d\udd34 CVE-2026-59270 - Critical (9.4)\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59270/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T07:00:44.127956Z"} {"uuid": "56a1d215-d80c-4471-8d09-cd22f66ded56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2bmivlm522", "content": "\ud83d\udd34 CVE-2026-59270 - Critical (9.4)\n\nSpring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59270/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T07:00:44.127956Z"} https://vulnerability.circl.lu/sighting/56a1d215-d80c-4471-8d09-cd22f66ded56/export Thu, 27 Aug 2026 07:00:44 +0000 https://vulnerability.circl.lu/sighting/4b0517ee-3253-4dd2-9681-5c23270bf040/export {"uuid": "4b0517ee-3253-4dd2-9681-5c23270bf040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5kitdocbckhlp", "content": "CVE-2026-59270 - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces\nCVE ID : CVE-2026-59270\n \n Published : Aug. 27, 2026, 6:17 a.m. | 18\u00a0minutes ago\n \n Description : Spring Security's embedded UnboundID LDAP serve...", "creation_timestamp": "2026-08-27T06:51:14.424048Z"} {"uuid": "4b0517ee-3253-4dd2-9681-5c23270bf040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5kitdocbckhlp", "content": "CVE-2026-59270 - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces\nCVE ID : CVE-2026-59270\n \n Published : Aug. 27, 2026, 6:17 a.m. | 18\u00a0minutes ago\n \n Description : Spring Security's embedded UnboundID LDAP serve...", "creation_timestamp": "2026-08-27T06:51:14.424048Z"} https://vulnerability.circl.lu/sighting/4b0517ee-3253-4dd2-9681-5c23270bf040/export Thu, 27 Aug 2026 06:51:14 +0000 https://vulnerability.circl.lu/sighting/bc235a39-4fc5-4c2b-80d1-e7a2b96f3e3b/export {"uuid": "bc235a39-4fc5-4c2b-80d1-e7a2b96f3e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtletiqouz2p", "content": "Spring Security CVE-2026-59270 lets attackers get full admin over LDAP without login. #SpringSecurity #LDAP #Vulnerability #CVESecurity #Cybersecurity #DevSecOps https://thedailytechfeed.com/critical-spring-security-flaw-opens-ldap-servers-to-admin-takeover/", "creation_timestamp": "2026-08-21T08:48:24.049196Z"} {"uuid": "bc235a39-4fc5-4c2b-80d1-e7a2b96f3e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtletiqouz2p", "content": "Spring Security CVE-2026-59270 lets attackers get full admin over LDAP without login. #SpringSecurity #LDAP #Vulnerability #CVESecurity #Cybersecurity #DevSecOps https://thedailytechfeed.com/critical-spring-security-flaw-opens-ldap-servers-to-admin-takeover/", "creation_timestamp": "2026-08-21T08:48:24.049196Z"} https://vulnerability.circl.lu/sighting/bc235a39-4fc5-4c2b-80d1-e7a2b96f3e3b/export Fri, 21 Aug 2026 08:48:24 +0000 https://vulnerability.circl.lu/sighting/cf2a38d5-279c-4a72-b906-09f2e6d236b9/export {"uuid": "cf2a38d5-279c-4a72-b906-09f2e6d236b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkonlidy62q", "content": "Four Spring Security vulnerabilities were disclosed, led by CVE-2026-59270 (CVSS 9.4). Attackers can read or modify entries in the in-memory directory.\n\n#SpringSecurity #CVE202659270 #LDAP #WebAuthn #DPoP #AppSec", "creation_timestamp": "2026-08-21T02:11:25.821898Z"} {"uuid": "cf2a38d5-279c-4a72-b906-09f2e6d236b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59270", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkonlidy62q", "content": "Four Spring Security vulnerabilities were disclosed, led by CVE-2026-59270 (CVSS 9.4). Attackers can read or modify entries in the in-memory directory.\n\n#SpringSecurity #CVE202659270 #LDAP #WebAuthn #DPoP #AppSec", "creation_timestamp": "2026-08-21T02:11:25.821898Z"} https://vulnerability.circl.lu/sighting/cf2a38d5-279c-4a72-b906-09f2e6d236b9/export Fri, 21 Aug 2026 02:11:25 +0000