https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:33:21 +0000 https://vulnerability.circl.lu/sighting/d6368810-1384-4e8d-b0d4-cb459b9acd10/export {"uuid": "d6368810-1384-4e8d-b0d4-cb459b9acd10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94494", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117399988427354009", "content": "CVE-2026-94494: jshERP up to 3.6 tenant isolation bypass lets any authenticated user read other tenants' data via GET /tenant/info by iterating IDs. CVSS 5. No patch yet - restrict endpoint access and monitor now. https://www.valtersit.com/cve/CVE-2026-94494/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-10-07T14:01:24.064661Z"} {"uuid": "d6368810-1384-4e8d-b0d4-cb459b9acd10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94494", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117399988427354009", "content": "CVE-2026-94494: jshERP up to 3.6 tenant isolation bypass lets any authenticated user read other tenants' data via GET /tenant/info by iterating IDs. CVSS 5. No patch yet - restrict endpoint access and monitor now. https://www.valtersit.com/cve/CVE-2026-94494/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-10-07T14:01:24.064661Z"} https://vulnerability.circl.lu/sighting/d6368810-1384-4e8d-b0d4-cb459b9acd10/export Wed, 07 Oct 2026 14:01:24 +0000