https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 28 Aug 2026 23:44:06 +0000 https://vulnerability.circl.lu/sighting/20e12dd1-72e2-4572-a93f-5fc776271654/export {"uuid": "20e12dd1-72e2-4572-a93f-5fc776271654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/TyxHaxNOYZewY16WupfPzLILXONmDjxPuLwVALABem5R50xg", "content": "", "creation_timestamp": "2026-08-28T15:00:05.299603Z"} {"uuid": "20e12dd1-72e2-4572-a93f-5fc776271654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/TyxHaxNOYZewY16WupfPzLILXONmDjxPuLwVALABem5R50xg", "content": "", "creation_timestamp": "2026-08-28T15:00:05.299603Z"} https://vulnerability.circl.lu/sighting/20e12dd1-72e2-4572-a93f-5fc776271654/export Fri, 28 Aug 2026 15:00:05 +0000 https://vulnerability.circl.lu/sighting/b06e5731-a1a6-4deb-85dd-b30b68a1a732/export {"uuid": "b06e5731-a1a6-4deb-85dd-b30b68a1a732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mu52gkyljp2i", "content": "\ud83d\udce2 [VULN] Next.js : deux failles critiques permettent une ex\u00e9cution de code \u00e0 distance sans authentification - CVE-2026-75604\n\nLe 25 ao\u00fbt 2026, Vercel a publi\u00e9 plusieurs nouvelles versions de Next.js : 15.5.24 et 16.3.3. L'objectif ?\n\n#CVE #Cyberveille", "creation_timestamp": "2026-08-28T09:30:07.075701Z"} {"uuid": "b06e5731-a1a6-4deb-85dd-b30b68a1a732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mu52gkyljp2i", "content": "\ud83d\udce2 [VULN] Next.js : deux failles critiques permettent une ex\u00e9cution de code \u00e0 distance sans authentification - CVE-2026-75604\n\nLe 25 ao\u00fbt 2026, Vercel a publi\u00e9 plusieurs nouvelles versions de Next.js : 15.5.24 et 16.3.3. L'objectif ?\n\n#CVE #Cyberveille", "creation_timestamp": "2026-08-28T09:30:07.075701Z"} https://vulnerability.circl.lu/sighting/b06e5731-a1a6-4deb-85dd-b30b68a1a732/export Fri, 28 Aug 2026 09:30:07 +0000 https://vulnerability.circl.lu/sighting/0d5eb292-41be-402f-9ab6-4c4a7614b3e7/export {"uuid": "0d5eb292-41be-402f-9ab6-4c4a7614b3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu4xp2d6lp2k", "content": "\ud83e\udd16 Next.js: Vercel patches two critical unauthenticated RCEs \u2014 crafted AVIF images and a Windows path traversal (CVE-2026-75604). Upgrade affected versions.\nhttps://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "creation_timestamp": "2026-08-28T08:41:10.543898Z"} {"uuid": "0d5eb292-41be-402f-9ab6-4c4a7614b3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu4xp2d6lp2k", "content": "\ud83e\udd16 Next.js: Vercel patches two critical unauthenticated RCEs \u2014 crafted AVIF images and a Windows path traversal (CVE-2026-75604). Upgrade affected versions.\nhttps://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "creation_timestamp": "2026-08-28T08:41:10.543898Z"} https://vulnerability.circl.lu/sighting/0d5eb292-41be-402f-9ab6-4c4a7614b3e7/export Fri, 28 Aug 2026 08:41:10 +0000 https://vulnerability.circl.lu/sighting/966fd94e-3e51-461c-bc43-81992584b848/export {"uuid": "966fd94e-3e51-461c-bc43-81992584b848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "content": "Credit: Hacktron\nVercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem.\n\nThe Windows path traversal, tracked as CVE-2026-75604&", "creation_timestamp": "2026-08-28T01:00:44.937603Z"} {"uuid": "966fd94e-3e51-461c-bc43-81992584b848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "content": "Credit: Hacktron\nVercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem.\n\nThe Windows path traversal, tracked as CVE-2026-75604&", "creation_timestamp": "2026-08-28T01:00:44.937603Z"} https://vulnerability.circl.lu/sighting/966fd94e-3e51-461c-bc43-81992584b848/export Fri, 28 Aug 2026 01:00:44 +0000 https://vulnerability.circl.lu/sighting/6a3c044f-de10-4839-8740-850d996463b6/export {"uuid": "6a3c044f-de10-4839-8740-850d996463b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-28T00:00:52.976185Z"} {"uuid": "6a3c044f-de10-4839-8740-850d996463b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-28T00:00:52.976185Z"} https://vulnerability.circl.lu/sighting/6a3c044f-de10-4839-8740-850d996463b6/export Fri, 28 Aug 2026 00:00:52 +0000 https://vulnerability.circl.lu/sighting/d40f4eaf-3391-4c76-bf6b-630fb14666eb/export {"uuid": "d40f4eaf-3391-4c76-bf6b-630fb14666eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-28T00:00:51.186329Z"} {"uuid": "d40f4eaf-3391-4c76-bf6b-630fb14666eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-28T00:00:51.186329Z"} https://vulnerability.circl.lu/sighting/d40f4eaf-3391-4c76-bf6b-630fb14666eb/export Fri, 28 Aug 2026 00:00:51 +0000 https://vulnerability.circl.lu/sighting/5b5338eb-9b9a-4e77-8d72-eb817efdaee3/export {"uuid": "5b5338eb-9b9a-4e77-8d72-eb817efdaee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/captainsmok3r_official/492", "content": "two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.", "creation_timestamp": "2026-08-28T00:00:11.151921Z"} {"uuid": "5b5338eb-9b9a-4e77-8d72-eb817efdaee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/captainsmok3r_official/492", "content": "two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.", "creation_timestamp": "2026-08-28T00:00:11.151921Z"} https://vulnerability.circl.lu/sighting/5b5338eb-9b9a-4e77-8d72-eb817efdaee3/export Fri, 28 Aug 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/48692862-1d8f-4069-9e85-083ad6ddf186/export {"uuid": "48692862-1d8f-4069-9e85-083ad6ddf186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/493", "content": "poc: https://github.com/rafabd1/CVE-2026-75604-poc", "creation_timestamp": "2026-08-28T00:00:11.103217Z"} {"uuid": "48692862-1d8f-4069-9e85-083ad6ddf186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/493", "content": "poc: https://github.com/rafabd1/CVE-2026-75604-poc", "creation_timestamp": "2026-08-28T00:00:11.103217Z"} https://vulnerability.circl.lu/sighting/48692862-1d8f-4069-9e85-083ad6ddf186/export Fri, 28 Aug 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/300383d1-d600-4ed2-9ca3-c082754ea266/export {"uuid": "300383d1-d600-4ed2-9ca3-c082754ea266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/captainsmok3r_official/492", "content": "two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.", "creation_timestamp": "2026-08-27T22:00:05.937513Z"} {"uuid": "300383d1-d600-4ed2-9ca3-c082754ea266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://t.me/captainsmok3r_official/492", "content": "two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.", "creation_timestamp": "2026-08-27T22:00:05.937513Z"} https://vulnerability.circl.lu/sighting/300383d1-d600-4ed2-9ca3-c082754ea266/export Thu, 27 Aug 2026 22:00:05 +0000 https://vulnerability.circl.lu/sighting/a5672d7a-c897-4f5d-bf75-300aa27aa39e/export {"uuid": "a5672d7a-c897-4f5d-bf75-300aa27aa39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/493", "content": "poc: https://github.com/rafabd1/CVE-2026-75604-poc", "creation_timestamp": "2026-08-27T22:00:05.890900Z"} {"uuid": "a5672d7a-c897-4f5d-bf75-300aa27aa39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/493", "content": "poc: https://github.com/rafabd1/CVE-2026-75604-poc", "creation_timestamp": "2026-08-27T22:00:05.890900Z"} https://vulnerability.circl.lu/sighting/a5672d7a-c897-4f5d-bf75-300aa27aa39e/export Thu, 27 Aug 2026 22:00:05 +0000