https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:56:41 +0000 https://vulnerability.circl.lu/sighting/3d06c11e-3a42-41d8-adba-692e37168a58/export {"uuid": "3d06c11e-3a42-41d8-adba-692e37168a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91776", "type": "seen", "source": "https://gist.github.com/alon710/09eddf226ff818caba74308b199b1f70", "content": "# CVE-2026-91776: CVE-2026-91776: Denial of Service via Unbounded Polymorphic Cache in jackson-databind\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-91776\n\n## Summary\nCVE-2026-91776 is a high-severity Denial of Service (DoS) vulnerability in the FasterXML jackson-databind library. The vulnerability is caused by uncontrolled resource consumption (CWE-400) where raw, unrecognized polymorphic type IDs are cached indefinitely without boundaries inside TypeDeserializerBase. When name-based polymorphic deserialization is configured with a fallback mechanism (such as a default implementation or custom problem handlers), remote attackers can send crafted payloads containing unique unknown type IDs, causing heap exhaustion, Garbage Collection (GC) overhead limit exhaustion, and an Out-of-Memory (OOM) crash.\n\n## TL;DR\nAn unauthenticated remote attacker can crash Java applications using Jackson-databind by transmitting JSON payloads with high-cardinality, unrecognized polymorphic type IDs, causing unbounded memory retention and JVM heap exhaustion.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS Severity**: 7.5 (High)\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n- **Vulnerability Class**: Uncontrolled Resource Consumption\n\n## Affected Systems\n\n- FasterXML jackson-databind versions 2.0.0 through 2.18.10\n- FasterXML jackson-databind versions 2.19.0 through 2.21.6\n- FasterXML jackson-databind versions 2.22.0 through 2.22.2\n- FasterXML jackson-databind versions 3.0.0 through 3.1.6\n- FasterXML jackson-databind versions 3.2.0 through 3.2.2\n- **jackson-databind**: >= 2.0.0, <= 2.18.10 (Fixed in: `2.18.11`)\n- **jackson-databind**: >= 2.19.0, <= 2.21.6 (Fixed in: `2.21.7`)\n- **jackson-databind**: >= 2.22.0, <= 2.22.2 (Fixed in: `2.22.3`)\n- **jackson-databind**: >= 3.0.0, <= 3.1.6 (Fixed in: `3.1.7`)\n- **jackson-databind**: >= 3.2.0, <= 3.2.2 (Fixed in: `3.2.3`)\n\n## Mitigation\n\n- Upgrade the jackson-databind library to a patched version immediately.\n- Refactor polymorphic type definitions to remove defaultImpl fallback configurations where possible.\n- Implement a custom TypeIdResolver that strictly validates type IDs against an allowlist before resolution.\n- Deploy WAF rules to drop payloads containing abnormally long polymorphic type identifiers.\n\n**Remediation Steps:**\n1. Analyze dependency structures (using Maven or Gradle) to identify references to vulnerable jackson-databind versions.\n2. Update Maven pom.xml or Gradle build.gradle files to specify a patched version (e.g., 2.18.11, 2.21.7, 2.22.3, 3.1.7, or 3.2.3).\n3. Run integration tests to confirm compatibility with the updated library, paying special attention to polymorphic deserialization tests.\n4. Deploy the updated build artifacts to staging and production environments.\n\n## References\n\n- [GitHub Security Advisory GHSA-wv8q-qhhj-9h54](https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54)\n- [FasterXML Jackson Databind Issue #6203](https://github.com/FasterXML/jackson-databind/issues/6203)\n- [Fix Commit 2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577](https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577)\n- [Wiz Vulnerability Database Entry for CVE-2026-91776](https://www.wiz.io/vulnerability-database/cve/cve-2026-91776)\n- [CVE-2026-91776 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-91776)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-91776) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-30T21:30:31.000000Z"} {"uuid": "3d06c11e-3a42-41d8-adba-692e37168a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91776", "type": "seen", "source": "https://gist.github.com/alon710/09eddf226ff818caba74308b199b1f70", "content": "# CVE-2026-91776: CVE-2026-91776: Denial of Service via Unbounded Polymorphic Cache in jackson-databind\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-91776\n\n## Summary\nCVE-2026-91776 is a high-severity Denial of Service (DoS) vulnerability in the FasterXML jackson-databind library. The vulnerability is caused by uncontrolled resource consumption (CWE-400) where raw, unrecognized polymorphic type IDs are cached indefinitely without boundaries inside TypeDeserializerBase. When name-based polymorphic deserialization is configured with a fallback mechanism (such as a default implementation or custom problem handlers), remote attackers can send crafted payloads containing unique unknown type IDs, causing heap exhaustion, Garbage Collection (GC) overhead limit exhaustion, and an Out-of-Memory (OOM) crash.\n\n## TL;DR\nAn unauthenticated remote attacker can crash Java applications using Jackson-databind by transmitting JSON payloads with high-cardinality, unrecognized polymorphic type IDs, causing unbounded memory retention and JVM heap exhaustion.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS Severity**: 7.5 (High)\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n- **Vulnerability Class**: Uncontrolled Resource Consumption\n\n## Affected Systems\n\n- FasterXML jackson-databind versions 2.0.0 through 2.18.10\n- FasterXML jackson-databind versions 2.19.0 through 2.21.6\n- FasterXML jackson-databind versions 2.22.0 through 2.22.2\n- FasterXML jackson-databind versions 3.0.0 through 3.1.6\n- FasterXML jackson-databind versions 3.2.0 through 3.2.2\n- **jackson-databind**: >= 2.0.0, <= 2.18.10 (Fixed in: `2.18.11`)\n- **jackson-databind**: >= 2.19.0, <= 2.21.6 (Fixed in: `2.21.7`)\n- **jackson-databind**: >= 2.22.0, <= 2.22.2 (Fixed in: `2.22.3`)\n- **jackson-databind**: >= 3.0.0, <= 3.1.6 (Fixed in: `3.1.7`)\n- **jackson-databind**: >= 3.2.0, <= 3.2.2 (Fixed in: `3.2.3`)\n\n## Mitigation\n\n- Upgrade the jackson-databind library to a patched version immediately.\n- Refactor polymorphic type definitions to remove defaultImpl fallback configurations where possible.\n- Implement a custom TypeIdResolver that strictly validates type IDs against an allowlist before resolution.\n- Deploy WAF rules to drop payloads containing abnormally long polymorphic type identifiers.\n\n**Remediation Steps:**\n1. Analyze dependency structures (using Maven or Gradle) to identify references to vulnerable jackson-databind versions.\n2. Update Maven pom.xml or Gradle build.gradle files to specify a patched version (e.g., 2.18.11, 2.21.7, 2.22.3, 3.1.7, or 3.2.3).\n3. Run integration tests to confirm compatibility with the updated library, paying special attention to polymorphic deserialization tests.\n4. Deploy the updated build artifacts to staging and production environments.\n\n## References\n\n- [GitHub Security Advisory GHSA-wv8q-qhhj-9h54](https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54)\n- [FasterXML Jackson Databind Issue #6203](https://github.com/FasterXML/jackson-databind/issues/6203)\n- [Fix Commit 2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577](https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577)\n- [Wiz Vulnerability Database Entry for CVE-2026-91776](https://www.wiz.io/vulnerability-database/cve/cve-2026-91776)\n- [CVE-2026-91776 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-91776)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-91776) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-30T21:30:31.000000Z"} https://vulnerability.circl.lu/sighting/3d06c11e-3a42-41d8-adba-692e37168a58/export Wed, 30 Sep 2026 21:30:31 +0000 https://vulnerability.circl.lu/sighting/493092f2-dca5-4128-9da2-4e021baefadd/export {"uuid": "493092f2-dca5-4128-9da2-4e021baefadd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91777", "type": "seen", "source": "https://gist.github.com/alon710/b2bed584e72773f226131a1df51cff3f", "content": "# CVE-2026-91777: CVE-2026-91777: Algorithmic Complexity Denial of Service in FasterXML jackson-databind\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-91777\n\n## Summary\nAn uncontrolled resource consumption vulnerability in FasterXML jackson-databind allows remote unauthenticated attackers to cause a Denial of Service (DoS) via crafted JSON payloads containing out-of-order forward references in identity-enabled collections or maps.\n\n## TL;DR\nA quadratic-time algorithmic complexity flaw in Jackson's forward-reference resolution mechanism allows unauthenticated remote attackers to trigger severe CPU thread starvation by submitting specialized JSON payloads containing out-of-order references.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS Score**: 7.5 (High)\n- **EPSS Score**: 0.0045\n- **Impact**: Denial of Service (CPU Exhaustion)\n- **Exploit Status**: Proof of Concept available\n- **KEV Status**: Not currently listed\n\n## Affected Systems\n\n- jackson-databind\n- **jackson-databind**: >= 2.5.0, < 2.18.11 (Fixed in: `2.18.11`)\n- **jackson-databind**: >= 2.19.0, < 2.21.7 (Fixed in: `2.21.7`)\n- **jackson-databind**: >= 2.22.0, < 2.22.3 (Fixed in: `2.22.3`)\n- **jackson-databind**: >= 3.0.0, < 3.1.7 (Fixed in: `3.1.7`)\n- **jackson-databind**: >= 3.2.0, < 3.2.3 (Fixed in: `3.2.3`)\n\n## Mitigation\n\n- Upgrade jackson-databind to 2.18.11, 2.21.7, 2.22.3, 3.1.7, or 3.2.3 depending on major version line\n- Enforce maximum request size limits on HTTP endpoints utilizing Jackson deserialization\n- Avoid the use of @JsonIdentityInfo on models accepting untrusted user-controlled input\n\n**Remediation Steps:**\n1. Identify all direct and transitive dependencies containing 'jackson-databind' within dependency trees.\n2. Update project configuration files (pom.xml, build.gradle) to explicitly target safe versions.\n3. Redeploy application environments and verify thread resource performance during ingestion of out-of-order object graphs.\n\n## References\n\n- [GitHub Security Advisory GHSA-cxp5-3px4-pw24](https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24)\n- [Fix Commit 37ad9b8](https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67)\n- [FasterXML databind Issue #6204](https://github.com/FasterXML/jackson-databind/issues/6204)\n- [NVD - CVE-2026-91777](https://nvd.nist.gov/vuln/detail/CVE-2026-91777)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-91777) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-30T20:30:31.000000Z"} {"uuid": "493092f2-dca5-4128-9da2-4e021baefadd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91777", "type": "seen", "source": "https://gist.github.com/alon710/b2bed584e72773f226131a1df51cff3f", "content": "# CVE-2026-91777: CVE-2026-91777: Algorithmic Complexity Denial of Service in FasterXML jackson-databind\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-91777\n\n## Summary\nAn uncontrolled resource consumption vulnerability in FasterXML jackson-databind allows remote unauthenticated attackers to cause a Denial of Service (DoS) via crafted JSON payloads containing out-of-order forward references in identity-enabled collections or maps.\n\n## TL;DR\nA quadratic-time algorithmic complexity flaw in Jackson's forward-reference resolution mechanism allows unauthenticated remote attackers to trigger severe CPU thread starvation by submitting specialized JSON payloads containing out-of-order references.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS Score**: 7.5 (High)\n- **EPSS Score**: 0.0045\n- **Impact**: Denial of Service (CPU Exhaustion)\n- **Exploit Status**: Proof of Concept available\n- **KEV Status**: Not currently listed\n\n## Affected Systems\n\n- jackson-databind\n- **jackson-databind**: >= 2.5.0, < 2.18.11 (Fixed in: `2.18.11`)\n- **jackson-databind**: >= 2.19.0, < 2.21.7 (Fixed in: `2.21.7`)\n- **jackson-databind**: >= 2.22.0, < 2.22.3 (Fixed in: `2.22.3`)\n- **jackson-databind**: >= 3.0.0, < 3.1.7 (Fixed in: `3.1.7`)\n- **jackson-databind**: >= 3.2.0, < 3.2.3 (Fixed in: `3.2.3`)\n\n## Mitigation\n\n- Upgrade jackson-databind to 2.18.11, 2.21.7, 2.22.3, 3.1.7, or 3.2.3 depending on major version line\n- Enforce maximum request size limits on HTTP endpoints utilizing Jackson deserialization\n- Avoid the use of @JsonIdentityInfo on models accepting untrusted user-controlled input\n\n**Remediation Steps:**\n1. Identify all direct and transitive dependencies containing 'jackson-databind' within dependency trees.\n2. Update project configuration files (pom.xml, build.gradle) to explicitly target safe versions.\n3. Redeploy application environments and verify thread resource performance during ingestion of out-of-order object graphs.\n\n## References\n\n- [GitHub Security Advisory GHSA-cxp5-3px4-pw24](https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24)\n- [Fix Commit 37ad9b8](https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67)\n- [FasterXML databind Issue #6204](https://github.com/FasterXML/jackson-databind/issues/6204)\n- [NVD - CVE-2026-91777](https://nvd.nist.gov/vuln/detail/CVE-2026-91777)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-91777) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-30T20:30:31.000000Z"} https://vulnerability.circl.lu/sighting/493092f2-dca5-4128-9da2-4e021baefadd/export Wed, 30 Sep 2026 20:30:31 +0000 https://vulnerability.circl.lu/sighting/cd9f29b1-4318-456b-90f9-bfc2422bbb82/export {"uuid": "cd9f29b1-4318-456b-90f9-bfc2422bbb82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91777", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-cxp5-3px4-pw24", "content": "", "creation_timestamp": "2026-09-30T15:37:24.000000Z"} {"uuid": "cd9f29b1-4318-456b-90f9-bfc2422bbb82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91777", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-cxp5-3px4-pw24", "content": "", "creation_timestamp": "2026-09-30T15:37:24.000000Z"} https://vulnerability.circl.lu/sighting/cd9f29b1-4318-456b-90f9-bfc2422bbb82/export Wed, 30 Sep 2026 15:37:24 +0000 https://vulnerability.circl.lu/sighting/a64bd15f-3755-4703-a7a1-b4bf53a4db08/export {"uuid": "a64bd15f-3755-4703-a7a1-b4bf53a4db08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91776", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wv8q-qhhj-9h54", "content": "", "creation_timestamp": "2026-09-30T15:36:55.000000Z"} {"uuid": "a64bd15f-3755-4703-a7a1-b4bf53a4db08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91776", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wv8q-qhhj-9h54", "content": "", "creation_timestamp": "2026-09-30T15:36:55.000000Z"} https://vulnerability.circl.lu/sighting/a64bd15f-3755-4703-a7a1-b4bf53a4db08/export Wed, 30 Sep 2026 15:36:55 +0000 https://vulnerability.circl.lu/sighting/89b47461-2628-44fa-ba57-3712672d84d7/export {"uuid": "89b47461-2628-44fa-ba57-3712672d84d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91771", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw6ia35uou2i", "content": "CVE-2026-91771: path traversal in Weights & Biases wandb before 0.29.0 lets a malicious backend write files outside the download dir, potentially RCE via shell startup or Python import paths. CVSS 8.8. Patch still under https://www.valtersit.com/cve/CVE-2026-91771/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-23T10:00:05.241917Z"} {"uuid": "89b47461-2628-44fa-ba57-3712672d84d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91771", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw6ia35uou2i", "content": "CVE-2026-91771: path traversal in Weights & Biases wandb before 0.29.0 lets a malicious backend write files outside the download dir, potentially RCE via shell startup or Python import paths. CVSS 8.8. Patch still under https://www.valtersit.com/cve/CVE-2026-91771/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-23T10:00:05.241917Z"} https://vulnerability.circl.lu/sighting/89b47461-2628-44fa-ba57-3712672d84d7/export Wed, 23 Sep 2026 10:00:05 +0000 https://vulnerability.circl.lu/sighting/4d449a0f-5629-4618-a866-7a2e091bc262/export {"uuid": "4d449a0f-5629-4618-a866-7a2e091bc262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91771", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117319689983483202", "content": "CVE-2026-91771: path traversal in Weights & Biases wandb before 0.29.0 lets a malicious backend write files outside the download dir, potentially RCE via shell startup or Python import paths. CVSS 8.8. Patch still under https://www.valtersit.com/cve/CVE-2026-91771/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-23T09:40:14.291042Z"} {"uuid": "4d449a0f-5629-4618-a866-7a2e091bc262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91771", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117319689983483202", "content": "CVE-2026-91771: path traversal in Weights & Biases wandb before 0.29.0 lets a malicious backend write files outside the download dir, potentially RCE via shell startup or Python import paths. CVSS 8.8. Patch still under https://www.valtersit.com/cve/CVE-2026-91771/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-23T09:40:14.291042Z"} https://vulnerability.circl.lu/sighting/4d449a0f-5629-4618-a866-7a2e091bc262/export Wed, 23 Sep 2026 09:40:14 +0000 https://vulnerability.circl.lu/sighting/a87868bc-3b4d-411d-a1c6-4968991c05d2/export {"uuid": "a87868bc-3b4d-411d-a1c6-4968991c05d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91771", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvknyp247722", "content": "CVE-2026-91771\nThe wandb library (versions before 0.29.0) does not check the file names it receives when downloading files. An attacker who can control the server could trick the library into saving files in any location on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-15T12:50:04.870644Z"} {"uuid": "a87868bc-3b4d-411d-a1c6-4968991c05d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91771", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvknyp247722", "content": "CVE-2026-91771\nThe wandb library (versions before 0.29.0) does not check the file names it receives when downloading files. An attacker who can control the server could trick the library into saving files in any location on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-15T12:50:04.870644Z"} https://vulnerability.circl.lu/sighting/a87868bc-3b4d-411d-a1c6-4968991c05d2/export Tue, 15 Sep 2026 12:50:04 +0000 https://vulnerability.circl.lu/sighting/bb250cfd-8a80-4310-a383-0b8278128711/export {"uuid": "bb250cfd-8a80-4310-a383-0b8278128711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91771", "type": "seen", "source": "https://gist.github.com/ichintu/ab20711bf02f5b35c139371e41389621", "content": "This daily threat intelligence digest highlights three high-impact vulnerabilities:\n\n\u2022 **CVE-2026-91771 (Weights & Biases, 8.8):** Path traversal in `File.download` (wandb < 0.29.0) allows attackers to write files outside intended directories, potentially enabling remote code execution.\n\u2022 **CVE-2026-90843 (SabyasachiRana WebMap, 8.3):** Remote OS command injection in the `nmap_newscan` function. Publicly exploited; a silent patch is available.\n\u2022 **CVE-2026-85706 (GitLab, 10.0):** Critical unauthenticated path traversal in the repository commits API affects GitLab CE/EE (versions prior to 19.1.8, 19.2.6, and 19.3.2). Enables arbitrary file reads, risking credential theft and CI/CD compromise. Actively exploited, CISA KEV-listed, and patched.\n\n**Recommended Actions:** Prioritize immediate GitLab patching. Hunt logs for malicious API requests, rotate any potentially exposed credentials, and enforce strict access controls and API monitoring across all affected platforms.", "creation_timestamp": "2026-09-15T04:02:20.076578Z"} {"uuid": "bb250cfd-8a80-4310-a383-0b8278128711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91771", "type": "seen", "source": "https://gist.github.com/ichintu/ab20711bf02f5b35c139371e41389621", "content": "This daily threat intelligence digest highlights three high-impact vulnerabilities:\n\n\u2022 **CVE-2026-91771 (Weights & Biases, 8.8):** Path traversal in `File.download` (wandb < 0.29.0) allows attackers to write files outside intended directories, potentially enabling remote code execution.\n\u2022 **CVE-2026-90843 (SabyasachiRana WebMap, 8.3):** Remote OS command injection in the `nmap_newscan` function. Publicly exploited; a silent patch is available.\n\u2022 **CVE-2026-85706 (GitLab, 10.0):** Critical unauthenticated path traversal in the repository commits API affects GitLab CE/EE (versions prior to 19.1.8, 19.2.6, and 19.3.2). Enables arbitrary file reads, risking credential theft and CI/CD compromise. Actively exploited, CISA KEV-listed, and patched.\n\n**Recommended Actions:** Prioritize immediate GitLab patching. Hunt logs for malicious API requests, rotate any potentially exposed credentials, and enforce strict access controls and API monitoring across all affected platforms.", "creation_timestamp": "2026-09-15T04:02:20.076578Z"} https://vulnerability.circl.lu/sighting/bb250cfd-8a80-4310-a383-0b8278128711/export Tue, 15 Sep 2026 04:02:20 +0000 https://vulnerability.circl.lu/sighting/afbd2205-07f3-43f4-9c30-29a4312252f0/export {"uuid": "afbd2205-07f3-43f4-9c30-29a4312252f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91771", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvjqfgnwax2z", "content": "\ud83d\udfe0 CVE-2026-91771 - High (8.8)\n\nWeights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-91771/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-15T04:00:21.433673Z"} {"uuid": "afbd2205-07f3-43f4-9c30-29a4312252f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91771", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvjqfgnwax2z", "content": "\ud83d\udfe0 CVE-2026-91771 - High (8.8)\n\nWeights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-91771/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-15T04:00:21.433673Z"} https://vulnerability.circl.lu/sighting/afbd2205-07f3-43f4-9c30-29a4312252f0/export Tue, 15 Sep 2026 04:00:21 +0000 https://vulnerability.circl.lu/sighting/75ee210e-7182-418a-a420-176baf19c16f/export {"uuid": "75ee210e-7182-418a-a420-176baf19c16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9177", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrs73bdmgs2i", "content": "CVE-2026-9177 - Server-Side Template Injection in SecureTransport's Apache Velocity mail templates\nCVE ID : CVE-2026-9177\n \n Published : July 29, 2026, 1:46 p.m. | 41\u00a0minutes ago\n \n Description : A Server-Side Template Injection (SSTI) vulnerability was identified \nin the mail...", "creation_timestamp": "2026-07-29T15:03:36.185587Z"} {"uuid": "75ee210e-7182-418a-a420-176baf19c16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9177", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrs73bdmgs2i", "content": "CVE-2026-9177 - Server-Side Template Injection in SecureTransport's Apache Velocity mail templates\nCVE ID : CVE-2026-9177\n \n Published : July 29, 2026, 1:46 p.m. | 41\u00a0minutes ago\n \n Description : A Server-Side Template Injection (SSTI) vulnerability was identified \nin the mail...", "creation_timestamp": "2026-07-29T15:03:36.185587Z"} https://vulnerability.circl.lu/sighting/75ee210e-7182-418a-a420-176baf19c16f/export Wed, 29 Jul 2026 15:03:36 +0000