https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 19 Sep 2026 02:06:43 +0000 https://vulnerability.circl.lu/sighting/5c091386-9b51-4cd6-98ab-4680ce9e5aba/export {"uuid": "5c091386-9b51-4cd6-98ab-4680ce9e5aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61682", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt4hfjpur2j", "content": "CVE-2026-61682 - kcp-dev\nIn a kcp system that uses a front\u2011proxy, the proxy does not remove identity information that a client includes in its request. This lets a regular user add headers that make the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kcpdev #Golang #CVE #infosec", "creation_timestamp": "2026-09-18T21:30:08.361299Z"} {"uuid": "5c091386-9b51-4cd6-98ab-4680ce9e5aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61682", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt4hfjpur2j", "content": "CVE-2026-61682 - kcp-dev\nIn a kcp system that uses a front\u2011proxy, the proxy does not remove identity information that a client includes in its request. This lets a regular user add headers that make the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kcpdev #Golang #CVE #infosec", "creation_timestamp": "2026-09-18T21:30:08.361299Z"} https://vulnerability.circl.lu/sighting/5c091386-9b51-4cd6-98ab-4680ce9e5aba/export Fri, 18 Sep 2026 21:30:08 +0000 https://vulnerability.circl.lu/sighting/d95d030a-e0a3-4bfd-9340-c0ffa39a8cb3/export {"uuid": "d95d030a-e0a3-4bfd-9340-c0ffa39a8cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61682", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvsr6nu3y42p", "content": "\ud83d\udea8 CVE-2026-61682 \u2014 CVSS 9.9 CRITICAL\n\nkcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61682\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T18:08:23.770029Z"} {"uuid": "d95d030a-e0a3-4bfd-9340-c0ffa39a8cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61682", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvsr6nu3y42p", "content": "\ud83d\udea8 CVE-2026-61682 \u2014 CVSS 9.9 CRITICAL\n\nkcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61682\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T18:08:23.770029Z"} https://vulnerability.circl.lu/sighting/d95d030a-e0a3-4bfd-9340-c0ffa39a8cb3/export Fri, 18 Sep 2026 18:08:23 +0000 https://vulnerability.circl.lu/sighting/bc5b9bd3-92b8-4a01-8f27-a74d55cea97c/export {"uuid": "bc5b9bd3-92b8-4a01-8f27-a74d55cea97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61686", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117237232555318534", "content": "CVE-2026-61686 - SolidInvoice pre-3.0.1 deserializes client-controlled 'context' prop via unserialize(), enabling authenticated RCE. CVSS 7.5. No patch? Update to 3.0.1 now if available, or isolate. https://www.valtersit.com/cve/CVE-2026-61686/ #CVE #infosec #SolidInvoice", "creation_timestamp": "2026-09-08T20:10:02.972762Z"} {"uuid": "bc5b9bd3-92b8-4a01-8f27-a74d55cea97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61686", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117237232555318534", "content": "CVE-2026-61686 - SolidInvoice pre-3.0.1 deserializes client-controlled 'context' prop via unserialize(), enabling authenticated RCE. CVSS 7.5. No patch? Update to 3.0.1 now if available, or isolate. https://www.valtersit.com/cve/CVE-2026-61686/ #CVE #infosec #SolidInvoice", "creation_timestamp": "2026-09-08T20:10:02.972762Z"} https://vulnerability.circl.lu/sighting/bc5b9bd3-92b8-4a01-8f27-a74d55cea97c/export Tue, 08 Sep 2026 20:10:02 +0000 https://vulnerability.circl.lu/sighting/a2dd5252-8765-4afe-a636-60a2053f6281/export {"uuid": "a2dd5252-8765-4afe-a636-60a2053f6281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61686", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muztcxfupy2g", "content": "CVE-2026-61686 - SolidInvoice pre-3.0.1 deserializes client-controlled 'context' prop via unserialize(), enabling authenticated RCE. CVSS 7.5. No patch? Update to 3.0.1 now if available, or isolate. https://www.valtersit.com/cve/CVE-2026-61686/ #CVE #infosec #SolidInvoice", "creation_timestamp": "2026-09-08T20:10:02.173125Z"} {"uuid": "a2dd5252-8765-4afe-a636-60a2053f6281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61686", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muztcxfupy2g", "content": "CVE-2026-61686 - SolidInvoice pre-3.0.1 deserializes client-controlled 'context' prop via unserialize(), enabling authenticated RCE. CVSS 7.5. No patch? Update to 3.0.1 now if available, or isolate. https://www.valtersit.com/cve/CVE-2026-61686/ #CVE #infosec #SolidInvoice", "creation_timestamp": "2026-09-08T20:10:02.173125Z"} https://vulnerability.circl.lu/sighting/a2dd5252-8765-4afe-a636-60a2053f6281/export Tue, 08 Sep 2026 20:10:02 +0000 https://vulnerability.circl.lu/sighting/29d63229-2c0d-444f-921b-d71c392625c3/export {"uuid": "29d63229-2c0d-444f-921b-d71c392625c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61686", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muq7mxsnog2r", "content": "Another Invoice Hole, Because Security Loves Monthly Paperwork\nPANIC 57% | Lag 0.0h | SolidInvoice versions before 3.0.1 expose a DataGrid LiveComponent issue tracked as CVE-2026-61686, \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-05T00:23:50.645379Z"} {"uuid": "29d63229-2c0d-444f-921b-d71c392625c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61686", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muq7mxsnog2r", "content": "Another Invoice Hole, Because Security Loves Monthly Paperwork\nPANIC 57% | Lag 0.0h | SolidInvoice versions before 3.0.1 expose a DataGrid LiveComponent issue tracked as CVE-2026-61686, \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-05T00:23:50.645379Z"} https://vulnerability.circl.lu/sighting/29d63229-2c0d-444f-921b-d71c392625c3/export Sat, 05 Sep 2026 00:23:50 +0000 https://vulnerability.circl.lu/sighting/041911c1-0003-4607-a1c7-e69997c1fea2/export {"uuid": "041911c1-0003-4607-a1c7-e69997c1fea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61686", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muq35hwnly2o", "content": "\ud83d\udfe0 CVE-2026-61686 - High (7.5)\n\nSolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the `DataGrid` LiveCom...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61686/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T23:03:31.199861Z"} {"uuid": "041911c1-0003-4607-a1c7-e69997c1fea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61686", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muq35hwnly2o", "content": "\ud83d\udfe0 CVE-2026-61686 - High (7.5)\n\nSolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the `DataGrid` LiveCom...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61686/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T23:03:31.199861Z"} https://vulnerability.circl.lu/sighting/041911c1-0003-4607-a1c7-e69997c1fea2/export Fri, 04 Sep 2026 23:03:31 +0000 https://vulnerability.circl.lu/sighting/dd889027-032b-4c90-8330-2e9c79910b73/export {"uuid": "dd889027-032b-4c90-8330-2e9c79910b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5vjwmhq2u", "content": "CVE-2026-61684 - FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token')\nCVE ID : CVE-2026-61684\n \n Published : July 15, 2026, 2:28 p.m. | 49\u00a0minutes ago\n \n Description : FastGPT is a knowledge-based AI applicatio...", "creation_timestamp": "2026-07-15T16:39:19.445062Z"} {"uuid": "dd889027-032b-4c90-8330-2e9c79910b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5vjwmhq2u", "content": "CVE-2026-61684 - FastGPT: Unauthenticated cross-tenant data access via forgeable plugin-invoke JWT (default INVOKE_TOKEN_SECRET='token')\nCVE ID : CVE-2026-61684\n \n Published : July 15, 2026, 2:28 p.m. | 49\u00a0minutes ago\n \n Description : FastGPT is a knowledge-based AI applicatio...", "creation_timestamp": "2026-07-15T16:39:19.445062Z"} https://vulnerability.circl.lu/sighting/dd889027-032b-4c90-8330-2e9c79910b73/export Wed, 15 Jul 2026 16:39:19 +0000 https://vulnerability.circl.lu/sighting/11853e74-c6fd-44de-bca0-9f1bc11e3dd5/export {"uuid": "11853e74-c6fd-44de-bca0-9f1bc11e3dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6168", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjemnvhmff2m", "content": "", "creation_timestamp": "2026-04-13T10:07:50.743671Z"} {"uuid": "11853e74-c6fd-44de-bca0-9f1bc11e3dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6168", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjemnvhmff2m", "content": "", "creation_timestamp": "2026-04-13T10:07:50.743671Z"} https://vulnerability.circl.lu/sighting/11853e74-c6fd-44de-bca0-9f1bc11e3dd5/export Mon, 13 Apr 2026 10:07:50 +0000 https://vulnerability.circl.lu/sighting/44656875-8c0d-4d2a-9fa7-93e54b95bdab/export {"uuid": "44656875-8c0d-4d2a-9fa7-93e54b95bdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6168", "type": "published-proof-of-concept", "source": "Telegram/YLPNHMuB-k1x_AHqc5D2GvbYPeJOZuyUprFLF6j-LW3oJB4", "content": "", "creation_timestamp": "2026-04-13T09:17:20.000000Z"} {"uuid": "44656875-8c0d-4d2a-9fa7-93e54b95bdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6168", "type": "published-proof-of-concept", "source": "Telegram/YLPNHMuB-k1x_AHqc5D2GvbYPeJOZuyUprFLF6j-LW3oJB4", "content": "", "creation_timestamp": "2026-04-13T09:17:20.000000Z"} https://vulnerability.circl.lu/sighting/44656875-8c0d-4d2a-9fa7-93e54b95bdab/export Mon, 13 Apr 2026 09:17:20 +0000 https://vulnerability.circl.lu/sighting/86af600a-73a9-4349-8de4-3b2df3d7305b/export {"uuid": "86af600a-73a9-4349-8de4-3b2df3d7305b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6168", "type": "seen", "source": "Telegram/bcMGQo5yfO9RORBGyfkr5CsGhdtRQYWZD2qi5kLjohdbd-Q", "content": "", "creation_timestamp": "2026-04-13T09:17:05.000000Z"} {"uuid": "86af600a-73a9-4349-8de4-3b2df3d7305b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6168", "type": "seen", "source": "Telegram/bcMGQo5yfO9RORBGyfkr5CsGhdtRQYWZD2qi5kLjohdbd-Q", "content": "", "creation_timestamp": "2026-04-13T09:17:05.000000Z"} https://vulnerability.circl.lu/sighting/86af600a-73a9-4349-8de4-3b2df3d7305b/export Mon, 13 Apr 2026 09:17:05 +0000