https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 27 Sep 2026 20:52:08 +0000 https://vulnerability.circl.lu/sighting/bf13ece3-fbb0-4882-8ca8-9644333fde2d/export {"uuid": "bf13ece3-fbb0-4882-8ca8-9644333fde2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82399", "type": "seen", "source": "https://gist.github.com/alon710/b4f0369e3101a49089dd01d5083aac3c", "content": "# CVE-2026-82399: CVE-2026-82399: Resource Exhaustion Denial of Service in CoreDNS Custom Transports\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-82399\n\n## Summary\nCVE-2026-82399 is a resource management vulnerability in CoreDNS affecting custom DNS transport pathways. Prior to version 1.14.7, transports including DNS-over-HTTPS (DoH), DNS-over-QUIC (DoQ), and DNS-over-gRPC executed the resource-intensive unpack method of the underlying Go DNS library on raw, untrusted incoming payloads before validating the fixed 12-byte DNS header. An unauthenticated remote attacker can exploit this behavior by using nested DNS name compression pointers to trigger substantial heap allocations, leading to memory exhaustion and server termination.\n\n## TL;DR\nCoreDNS custom transports (DoH, DoQ, gRPC) processed raw payloads without validating the DNS header, enabling unauthenticated remote attackers to trigger out-of-memory crashes via nested DNS name compression pointers.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 7.5 (High)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n- **Vulnerability Type**: Denial of Service (DoS)\n\n## Affected Systems\n\n- CoreDNS deployments using custom transports (DoH, DoQ, gRPC)\n- **coredns**: >= v1.10.1, < v1.14.7 (Fixed in: `v1.14.7`)\n\n## Mitigation\n\n- Upgrade CoreDNS to 1.14.7 or higher\n- Configure WAF filtering on DoH endpoints to drop requests with high QDCOUNT\n- Disable unused custom transports (DoH, DoQ, gRPC) in the Corefile\n\n**Remediation Steps:**\n1. Verify the running CoreDNS version in production using 'coredns -version'.\n2. Update container image references in Kubernetes manifests to point to coredns/coredns:1.14.7.\n3. Apply the updated deployment configuration using kubectl or gitops pipelines.\n4. Establish monitoring rules on Go heap usage metrics to identify abnormal allocation spikes.\n\n## References\n\n- [GitHub Security Advisory GHSA-mrg3-qvqr-jw29](https://github.com/coredns/coredns/security/advisories/GHSA-mrg3-qvqr-jw29)\n- [NVD CVE-2026-82399 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-82399)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-82399) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-18T09:31:38.760284Z"} {"uuid": "bf13ece3-fbb0-4882-8ca8-9644333fde2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82399", "type": "seen", "source": "https://gist.github.com/alon710/b4f0369e3101a49089dd01d5083aac3c", "content": "# CVE-2026-82399: CVE-2026-82399: Resource Exhaustion Denial of Service in CoreDNS Custom Transports\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-82399\n\n## Summary\nCVE-2026-82399 is a resource management vulnerability in CoreDNS affecting custom DNS transport pathways. Prior to version 1.14.7, transports including DNS-over-HTTPS (DoH), DNS-over-QUIC (DoQ), and DNS-over-gRPC executed the resource-intensive unpack method of the underlying Go DNS library on raw, untrusted incoming payloads before validating the fixed 12-byte DNS header. An unauthenticated remote attacker can exploit this behavior by using nested DNS name compression pointers to trigger substantial heap allocations, leading to memory exhaustion and server termination.\n\n## TL;DR\nCoreDNS custom transports (DoH, DoQ, gRPC) processed raw payloads without validating the DNS header, enabling unauthenticated remote attackers to trigger out-of-memory crashes via nested DNS name compression pointers.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-770\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 7.5 (High)\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n- **Vulnerability Type**: Denial of Service (DoS)\n\n## Affected Systems\n\n- CoreDNS deployments using custom transports (DoH, DoQ, gRPC)\n- **coredns**: >= v1.10.1, < v1.14.7 (Fixed in: `v1.14.7`)\n\n## Mitigation\n\n- Upgrade CoreDNS to 1.14.7 or higher\n- Configure WAF filtering on DoH endpoints to drop requests with high QDCOUNT\n- Disable unused custom transports (DoH, DoQ, gRPC) in the Corefile\n\n**Remediation Steps:**\n1. Verify the running CoreDNS version in production using 'coredns -version'.\n2. Update container image references in Kubernetes manifests to point to coredns/coredns:1.14.7.\n3. Apply the updated deployment configuration using kubectl or gitops pipelines.\n4. Establish monitoring rules on Go heap usage metrics to identify abnormal allocation spikes.\n\n## References\n\n- [GitHub Security Advisory GHSA-mrg3-qvqr-jw29](https://github.com/coredns/coredns/security/advisories/GHSA-mrg3-qvqr-jw29)\n- [NVD CVE-2026-82399 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-82399)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-82399) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-18T09:31:38.760284Z"} https://vulnerability.circl.lu/sighting/bf13ece3-fbb0-4882-8ca8-9644333fde2d/export Fri, 18 Sep 2026 09:31:38 +0000 https://vulnerability.circl.lu/sighting/453bdcfb-6ad3-45ed-9023-df20e52918e0/export {"uuid": "453bdcfb-6ad3-45ed-9023-df20e52918e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82399", "type": "published-proof-of-concept", "source": "https://github.com/coredns/coredns/security/advisories/GHSA-mrg3-qvqr-jw29", "content": "", "creation_timestamp": "2026-09-17T22:35:17.218460Z"} {"uuid": "453bdcfb-6ad3-45ed-9023-df20e52918e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82399", "type": "published-proof-of-concept", "source": "https://github.com/coredns/coredns/security/advisories/GHSA-mrg3-qvqr-jw29", "content": "", "creation_timestamp": "2026-09-17T22:35:17.218460Z"} https://vulnerability.circl.lu/sighting/453bdcfb-6ad3-45ed-9023-df20e52918e0/export Thu, 17 Sep 2026 22:35:17 +0000 https://vulnerability.circl.lu/sighting/ea70b9c6-009a-424f-b6c9-a40263ba90e6/export {"uuid": "ea70b9c6-009a-424f-b6c9-a40263ba90e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8239", "type": "published-proof-of-concept", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "content": "", "creation_timestamp": "2026-09-03T00:00:43.074355Z"} {"uuid": "ea70b9c6-009a-424f-b6c9-a40263ba90e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8239", "type": "published-proof-of-concept", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "content": "", "creation_timestamp": "2026-09-03T00:00:43.074355Z"} https://vulnerability.circl.lu/sighting/ea70b9c6-009a-424f-b6c9-a40263ba90e6/export Thu, 03 Sep 2026 00:00:43 +0000 https://vulnerability.circl.lu/sighting/6ca9240e-5ab1-431c-8457-4feb6c0eebc0/export {"uuid": "6ca9240e-5ab1-431c-8457-4feb6c0eebc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82393", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-vq4v-j7r6-jq4m", "content": "", "creation_timestamp": "2026-09-02T16:35:40.219472Z"} {"uuid": "6ca9240e-5ab1-431c-8457-4feb6c0eebc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82393", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-vq4v-j7r6-jq4m", "content": "", "creation_timestamp": "2026-09-02T16:35:40.219472Z"} https://vulnerability.circl.lu/sighting/6ca9240e-5ab1-431c-8457-4feb6c0eebc0/export Wed, 02 Sep 2026 16:35:40 +0000 https://vulnerability.circl.lu/sighting/65b9c0bb-e33d-454d-ac25-5fb07b7e68b0/export {"uuid": "65b9c0bb-e33d-454d-ac25-5fb07b7e68b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82395", "type": "seen", "source": "https://gist.github.com/alon710/50fd67f360d5ae23eb1087ad318df483", "content": "# CVE-2026-82395: CVE-2026-82395: Insecure Direct Object Reference (IDOR) in Sulu CMS Media Move Authorization\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-82395\n\n## Summary\nSulu CMS, an open-source PHP content management system based on the Symfony framework, is affected by an Insecure Direct Object Reference (IDOR) vulnerability within its media relocation API. Authenticated users with restricted edit permissions can relocate media out of secure, unauthorized collections into folders they control, bypassing access controls entirely. This security issue is tracked under CVE-2026-82395 and GHSA-h6cx-gjxx-v25c.\n\n## TL;DR\nAn IDOR vulnerability in Sulu CMS allows low-privileged users with edit rights on at least one collection to steal restricted media files by moving them into accessible folders.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-639 / CWE-863\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.00246\n- **EPSS Percentile**: 15.73%\n- **Impact**: Partial Confidentiality & Integrity Loss\n- **Exploit Status**: PoC (Functional Integration Test Available)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Sulu CMS\n- **Sulu CMS**: < 2.6.25 (Fixed in: `2.6.25`)\n- **Sulu CMS**: >= 3.0.0-alpha1, < 3.0.8 (Fixed in: `3.0.8`)\n\n## Mitigation\n\n- Upgrade Sulu CMS to version 2.6.25 or 3.0.8.\n- Monitor administrative API move requests for cross-collection references.\n- Review database and audit logs for unauthorized media relocations.\n\n**Remediation Steps:**\n1. Assess current Sulu CMS deployment version.\n2. If using the 2.x branch, update dependencies to version 2.6.25.\n3. If using the 3.x branch, update dependencies to version 3.0.8.\n4. Flush backend caches and verify access control lists are operational.\n\n## References\n\n- [Sulu CMS Security Advisory GHSA-h6cx-gjxx-v25c](https://github.com/sulu/sulu/security/advisories/GHSA-h6cx-gjxx-v25c)\n- [Patch Commit](https://github.com/sulu/sulu/commit/2b959de75d61b98433e42db462c246ed9e4ce793)\n- [NVD Record for CVE-2026-82395](https://nvd.nist.gov/vuln/detail/CVE-2026-82395)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-82395) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T15:33:29.308492Z"} {"uuid": "65b9c0bb-e33d-454d-ac25-5fb07b7e68b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82395", "type": "seen", "source": "https://gist.github.com/alon710/50fd67f360d5ae23eb1087ad318df483", "content": "# CVE-2026-82395: CVE-2026-82395: Insecure Direct Object Reference (IDOR) in Sulu CMS Media Move Authorization\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-82395\n\n## Summary\nSulu CMS, an open-source PHP content management system based on the Symfony framework, is affected by an Insecure Direct Object Reference (IDOR) vulnerability within its media relocation API. Authenticated users with restricted edit permissions can relocate media out of secure, unauthorized collections into folders they control, bypassing access controls entirely. This security issue is tracked under CVE-2026-82395 and GHSA-h6cx-gjxx-v25c.\n\n## TL;DR\nAn IDOR vulnerability in Sulu CMS allows low-privileged users with edit rights on at least one collection to steal restricted media files by moving them into accessible folders.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-639 / CWE-863\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.00246\n- **EPSS Percentile**: 15.73%\n- **Impact**: Partial Confidentiality & Integrity Loss\n- **Exploit Status**: PoC (Functional Integration Test Available)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Sulu CMS\n- **Sulu CMS**: < 2.6.25 (Fixed in: `2.6.25`)\n- **Sulu CMS**: >= 3.0.0-alpha1, < 3.0.8 (Fixed in: `3.0.8`)\n\n## Mitigation\n\n- Upgrade Sulu CMS to version 2.6.25 or 3.0.8.\n- Monitor administrative API move requests for cross-collection references.\n- Review database and audit logs for unauthorized media relocations.\n\n**Remediation Steps:**\n1. Assess current Sulu CMS deployment version.\n2. If using the 2.x branch, update dependencies to version 2.6.25.\n3. If using the 3.x branch, update dependencies to version 3.0.8.\n4. Flush backend caches and verify access control lists are operational.\n\n## References\n\n- [Sulu CMS Security Advisory GHSA-h6cx-gjxx-v25c](https://github.com/sulu/sulu/security/advisories/GHSA-h6cx-gjxx-v25c)\n- [Patch Commit](https://github.com/sulu/sulu/commit/2b959de75d61b98433e42db462c246ed9e4ce793)\n- [NVD Record for CVE-2026-82395](https://nvd.nist.gov/vuln/detail/CVE-2026-82395)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-82395) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T15:33:29.308492Z"} https://vulnerability.circl.lu/sighting/65b9c0bb-e33d-454d-ac25-5fb07b7e68b0/export Wed, 02 Sep 2026 15:33:29 +0000 https://vulnerability.circl.lu/sighting/d87ea209-3f0c-4cb2-a31b-93a36a215d25/export {"uuid": "d87ea209-3f0c-4cb2-a31b-93a36a215d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8239", "type": "seen", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "content": "", "creation_timestamp": "2026-09-02T01:00:14.152032Z"} {"uuid": "d87ea209-3f0c-4cb2-a31b-93a36a215d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8239", "type": "seen", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "content": "", "creation_timestamp": "2026-09-02T01:00:14.152032Z"} https://vulnerability.circl.lu/sighting/d87ea209-3f0c-4cb2-a31b-93a36a215d25/export Wed, 02 Sep 2026 01:00:14 +0000 https://vulnerability.circl.lu/sighting/632a30b7-caee-4456-9a12-c071d4afe35c/export {"uuid": "632a30b7-caee-4456-9a12-c071d4afe35c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82393", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mufz4nnl6z2o", "content": "\ud83d\udfe0 CVE-2026-82393 - High (7.5)\n\npnpm is a package manager. Prior to 10.34.5 and 11.11.0, pnpm accepts a scoped path traversal in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82393/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-31T23:00:39.605949Z"} {"uuid": "632a30b7-caee-4456-9a12-c071d4afe35c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82393", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mufz4nnl6z2o", "content": "\ud83d\udfe0 CVE-2026-82393 - High (7.5)\n\npnpm is a package manager. Prior to 10.34.5 and 11.11.0, pnpm accepts a scoped path traversal in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82393/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-31T23:00:39.605949Z"} https://vulnerability.circl.lu/sighting/632a30b7-caee-4456-9a12-c071d4afe35c/export Mon, 31 Aug 2026 23:00:39 +0000