https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 16:28:42 +0000 https://vulnerability.circl.lu/sighting/0d4ff3ba-512c-4906-aaea-b6178febf715/export {"uuid": "0d4ff3ba-512c-4906-aaea-b6178febf715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78424", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117350117261594002", "content": "The severity is increased for this new vulnerability affecting SUSE NeuVector (CVE-2026-78424) https://vuldb.com/vuln/411039", "creation_timestamp": "2026-09-28T18:38:06.971320Z"} {"uuid": "0d4ff3ba-512c-4906-aaea-b6178febf715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78424", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117350117261594002", "content": "The severity is increased for this new vulnerability affecting SUSE NeuVector (CVE-2026-78424) https://vuldb.com/vuln/411039", "creation_timestamp": "2026-09-28T18:38:06.971320Z"} https://vulnerability.circl.lu/sighting/0d4ff3ba-512c-4906-aaea-b6178febf715/export Mon, 28 Sep 2026 18:38:06 +0000 https://vulnerability.circl.lu/sighting/1f48f6a0-7b9c-4b8d-b271-3cef88a93c59/export {"uuid": "1f48f6a0-7b9c-4b8d-b271-3cef88a93c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jfpz2wxp4zocg", "content": "CVE-2026-78424 - OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes\nCVE ID : CVE-2026-78424\n \n Published : Sept. 28, 2026, 11:44 a.m. | 46\u00a0minutes ago\n \n Description : Improper parameter handling in NeuVector allows any...", "creation_timestamp": "2026-09-28T13:15:24.773929Z"} {"uuid": "1f48f6a0-7b9c-4b8d-b271-3cef88a93c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jfpz2wxp4zocg", "content": "CVE-2026-78424 - OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes\nCVE ID : CVE-2026-78424\n \n Published : Sept. 28, 2026, 11:44 a.m. | 46\u00a0minutes ago\n \n Description : Improper parameter handling in NeuVector allows any...", "creation_timestamp": "2026-09-28T13:15:24.773929Z"} https://vulnerability.circl.lu/sighting/1f48f6a0-7b9c-4b8d-b271-3cef88a93c59/export Mon, 28 Sep 2026 13:15:24 +0000 https://vulnerability.circl.lu/sighting/0eb20c0e-a061-43d0-9dd6-afc1912f83da/export {"uuid": "0eb20c0e-a061-43d0-9dd6-afc1912f83da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78424", "type": "seen", "source": "https://t.me/tech_b0lt_Genona/7003", "content": "\u041d\u0430\u0448\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 R&D \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NeuVector \u2014 CVE-2026-78424. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 packet capture \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0438\u043b\u044c\u0442\u0440 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f OS Command Injection \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c enforcer \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0438\u0437\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u043e\u043c \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 namespaced Runtime Policies. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 worker \u043d\u043e\u0434\u044b Kubernetes, \u0430 \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d CVSS 9.4.\n\n\u041c\u044b \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c NeuVector 7 \u0430\u0432\u0433\u0443\u0441\u0442\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 5.6.2, 5.5.4 \u0438 5.4.11.", "creation_timestamp": "2026-09-17T16:00:04.803402Z"} {"uuid": "0eb20c0e-a061-43d0-9dd6-afc1912f83da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78424", "type": "seen", "source": "https://t.me/tech_b0lt_Genona/7003", "content": "\u041d\u0430\u0448\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 R&D \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NeuVector \u2014 CVE-2026-78424. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 packet capture \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0438\u043b\u044c\u0442\u0440 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f OS Command Injection \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c enforcer \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0438\u0437\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u043e\u043c \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 namespaced Runtime Policies. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 worker \u043d\u043e\u0434\u044b Kubernetes, \u0430 \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d CVSS 9.4.\n\n\u041c\u044b \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c NeuVector 7 \u0430\u0432\u0433\u0443\u0441\u0442\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 5.6.2, 5.5.4 \u0438 5.4.11.", "creation_timestamp": "2026-09-17T16:00:04.803402Z"} https://vulnerability.circl.lu/sighting/0eb20c0e-a061-43d0-9dd6-afc1912f83da/export Thu, 17 Sep 2026 16:00:04 +0000 https://vulnerability.circl.lu/sighting/88a696bc-7d8c-45bd-bb46-3921243a6a97/export {"uuid": "88a696bc-7d8c-45bd-bb46-3921243a6a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78428", "type": "seen", "source": "https://gist.github.com/ichintu/708cde2930dab870a608709053650d91", "content": "This daily intelligence digest covers three critical security vulnerabilities, AI governance and civic technology trends, and a community research request. Key highlights include:\n\n\u2022 **Security Alerts:** A HIGH-severity SSO session misassignment flaw in Nuevector (CVE-2026-78428), a HIGH-severity unauthenticated XSS and file manipulation vulnerability in a WordPress plugin (CVE-2026-86801), and an actively exploited critical flaw in Cisco Identity Services Engine (ISE).\n\u2022 **AI Governance & Democracy:** A roundup of 16 enterprise AI/LLM governance platforms focused on compliance, risk monitoring, and security. Additionally, an article explores how candidates can leverage open-source AI tools to foster authentic voter engagement and strengthen democratic processes, countering election-related AI misinformation.\n\u2022 **Community Request:** A Reddit post seeking 100 survey responses for a cybersecurity thesis, with 15 days remaining.\n\nAll items were published around September 17, 2026.", "creation_timestamp": "2026-09-17T12:01:36.431169Z"} {"uuid": "88a696bc-7d8c-45bd-bb46-3921243a6a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78428", "type": "seen", "source": "https://gist.github.com/ichintu/708cde2930dab870a608709053650d91", "content": "This daily intelligence digest covers three critical security vulnerabilities, AI governance and civic technology trends, and a community research request. Key highlights include:\n\n\u2022 **Security Alerts:** A HIGH-severity SSO session misassignment flaw in Nuevector (CVE-2026-78428), a HIGH-severity unauthenticated XSS and file manipulation vulnerability in a WordPress plugin (CVE-2026-86801), and an actively exploited critical flaw in Cisco Identity Services Engine (ISE).\n\u2022 **AI Governance & Democracy:** A roundup of 16 enterprise AI/LLM governance platforms focused on compliance, risk monitoring, and security. Additionally, an article explores how candidates can leverage open-source AI tools to foster authentic voter engagement and strengthen democratic processes, countering election-related AI misinformation.\n\u2022 **Community Request:** A Reddit post seeking 100 survey responses for a cybersecurity thesis, with 15 days remaining.\n\nAll items were published around September 17, 2026.", "creation_timestamp": "2026-09-17T12:01:36.431169Z"} https://vulnerability.circl.lu/sighting/88a696bc-7d8c-45bd-bb46-3921243a6a97/export Thu, 17 Sep 2026 12:01:36 +0000 https://vulnerability.circl.lu/sighting/69b51398-02a1-4301-beee-062986889ca7/export {"uuid": "69b51398-02a1-4301-beee-062986889ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78428", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvpitiznqw2e", "content": "\ud83d\udfe0 CVE-2026-78428 - High (8)\n\nFor users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78428/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T11:01:01.969562Z"} {"uuid": "69b51398-02a1-4301-beee-062986889ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78428", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvpitiznqw2e", "content": "\ud83d\udfe0 CVE-2026-78428 - High (8)\n\nFor users authenticated through SAML or OpenID Connect (OIDC), this vulnerability can result in o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78428/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T11:01:01.969562Z"} https://vulnerability.circl.lu/sighting/69b51398-02a1-4301-beee-062986889ca7/export Thu, 17 Sep 2026 11:01:01 +0000 https://vulnerability.circl.lu/sighting/5e0c9398-e9db-4786-a0ee-94ef4e205241/export {"uuid": "5e0c9398-e9db-4786-a0ee-94ef4e205241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7842", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moww3fmi5f2f", "content": "CVE-2026-7842 - Infility Global\nCVE ID : CVE-2026-7842\n \n Published : June 23, 2026, 6 a.m. | 1\u00a0hour, 44\u00a0minutes ago\n \n Description : The Infility Global Infility Global WordPress plugin before 2.15.20 for WordPress does not sanitize or validate the orderby and order parameter...", "creation_timestamp": "2026-06-23T07:50:21.004995Z"} {"uuid": "5e0c9398-e9db-4786-a0ee-94ef4e205241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7842", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moww3fmi5f2f", "content": "CVE-2026-7842 - Infility Global\nCVE ID : CVE-2026-7842\n \n Published : June 23, 2026, 6 a.m. | 1\u00a0hour, 44\u00a0minutes ago\n \n Description : The Infility Global Infility Global WordPress plugin before 2.15.20 for WordPress does not sanitize or validate the orderby and order parameter...", "creation_timestamp": "2026-06-23T07:50:21.004995Z"} https://vulnerability.circl.lu/sighting/5e0c9398-e9db-4786-a0ee-94ef4e205241/export Tue, 23 Jun 2026 07:50:21 +0000