https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 15 Aug 2026 12:14:11 +0000 https://vulnerability.circl.lu/sighting/7e93e9b1-c2f7-4f46-a85f-cb315444f32e/export {"uuid": "7e93e9b1-c2f7-4f46-a85f-cb315444f32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqwnfrn2ne22", "content": "CVE-2026-11826 - OpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master getData()\nCVE ID : CVE-2026-11826\n \n Published : July 18, 2026, 2:17 p.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/c...", "creation_timestamp": "2026-07-18T16:05:28.738053Z"} {"uuid": "7e93e9b1-c2f7-4f46-a85f-cb315444f32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqwnfrn2ne22", "content": "CVE-2026-11826 - OpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master getData()\nCVE ID : CVE-2026-11826\n \n Published : July 18, 2026, 2:17 p.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/c...", "creation_timestamp": "2026-07-18T16:05:28.738053Z"} https://vulnerability.circl.lu/sighting/7e93e9b1-c2f7-4f46-a85f-cb315444f32e/export Sat, 18 Jul 2026 16:05:28 +0000 https://vulnerability.circl.lu/sighting/10705b00-c1fa-4a47-a95c-391a59bb379a/export {"uuid": "10705b00-c1fa-4a47-a95c-391a59bb379a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11826", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjruanuz22", "content": "\ud83d\udfe0 CVE-2026-11826 - High (8.8)\n\nOpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modb...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-11826/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T15:00:39.599870Z"} {"uuid": "10705b00-c1fa-4a47-a95c-391a59bb379a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11826", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjruanuz22", "content": "\ud83d\udfe0 CVE-2026-11826 - High (8.8)\n\nOpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modb...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-11826/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T15:00:39.599870Z"} https://vulnerability.circl.lu/sighting/10705b00-c1fa-4a47-a95c-391a59bb379a/export Sat, 18 Jul 2026 15:00:39 +0000 https://vulnerability.circl.lu/sighting/7b665754-c5dd-47b0-ad6f-ec207353704d/export {"uuid": "7b665754-c5dd-47b0-ad6f-ec207353704d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11826", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqwjrnagnc2i", "content": "OpenPLC_v3 faces a HIGH severity heap overflow (CVE-2026-11826). Exploitable via crafted HTTP POST; causes PLC crash. No patch \u2014 limit access & upgrade to v4. https://radar.offseq.com/threat/cve-2026-11826-heap-based-buffer-overflow-in-openplcproject-openplcv3-ec8a841c0c4e3b26 #OffSeq #ICS #Security", "creation_timestamp": "2026-07-18T15:00:32.264055Z"} {"uuid": "7b665754-c5dd-47b0-ad6f-ec207353704d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11826", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqwjrnagnc2i", "content": "OpenPLC_v3 faces a HIGH severity heap overflow (CVE-2026-11826). Exploitable via crafted HTTP POST; causes PLC crash. No patch \u2014 limit access & upgrade to v4. https://radar.offseq.com/threat/cve-2026-11826-heap-based-buffer-overflow-in-openplcproject-openplcv3-ec8a841c0c4e3b26 #OffSeq #ICS #Security", "creation_timestamp": "2026-07-18T15:00:32.264055Z"} https://vulnerability.circl.lu/sighting/7b665754-c5dd-47b0-ad6f-ec207353704d/export Sat, 18 Jul 2026 15:00:32 +0000 https://vulnerability.circl.lu/sighting/d830e297-5e46-4b60-81d9-a40c94d933cb/export {"uuid": "d830e297-5e46-4b60-81d9-a40c94d933cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11826", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116941575267749808", "content": "CVE-2026-11826 | HIGH severity heap overflow in openplcproject OpenPLC_v3: Crafted HTTP POST to /modbus can crash the PLC process & corrupt config fields. No fix \u2014 migrate to v4 & restrict access. https://radar.offseq.com/threat/cve-2026-11826-heap-based-buffer-overflow-in-openplcproject-openplcv3-ec8a841c0c4e3b26 #OffSeq #ICS #Vulnerability #Infosec", "creation_timestamp": "2026-07-18T15:00:30.542004Z"} {"uuid": "d830e297-5e46-4b60-81d9-a40c94d933cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11826", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116941575267749808", "content": "CVE-2026-11826 | HIGH severity heap overflow in openplcproject OpenPLC_v3: Crafted HTTP POST to /modbus can crash the PLC process & corrupt config fields. No fix \u2014 migrate to v4 & restrict access. https://radar.offseq.com/threat/cve-2026-11826-heap-based-buffer-overflow-in-openplcproject-openplcv3-ec8a841c0c4e3b26 #OffSeq #ICS #Vulnerability #Infosec", "creation_timestamp": "2026-07-18T15:00:30.542004Z"} https://vulnerability.circl.lu/sighting/d830e297-5e46-4b60-81d9-a40c94d933cb/export Sat, 18 Jul 2026 15:00:30 +0000 https://vulnerability.circl.lu/sighting/6081cee6-13de-4387-b66b-f8b89c731ff4/export {"uuid": "6081cee6-13de-4387-b66b-f8b89c731ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11824", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqc3zlw55w23", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-11824 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/591 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-07-10T12:01:12.055784Z"} {"uuid": "6081cee6-13de-4387-b66b-f8b89c731ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11824", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqc3zlw55w23", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-11824 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/591 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-07-10T12:01:12.055784Z"} https://vulnerability.circl.lu/sighting/6081cee6-13de-4387-b66b-f8b89c731ff4/export Fri, 10 Jul 2026 12:01:12 +0000 https://vulnerability.circl.lu/sighting/71019fb2-e9ff-489c-a9a5-a3f0f8c5e0b3/export {"uuid": "71019fb2-e9ff-489c-a9a5-a3f0f8c5e0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqc3zkf2gn2f", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-11822 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/590 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-07-10T12:01:09.749275Z"} {"uuid": "71019fb2-e9ff-489c-a9a5-a3f0f8c5e0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mqc3zkf2gn2f", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-11822 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/590 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-07-10T12:01:09.749275Z"} https://vulnerability.circl.lu/sighting/71019fb2-e9ff-489c-a9a5-a3f0f8c5e0b3/export Fri, 10 Jul 2026 12:01:09 +0000 https://vulnerability.circl.lu/sighting/7afb1df0-973e-4544-8167-1b475db3c024/export {"uuid": "7afb1df0-973e-4544-8167-1b475db3c024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11827", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u5w5rz72o", "content": "\ud83d\udd17 CVE : CVE-2025-12506, CVE-2026-11827, CVE-2026-13151, CVE-2026-13320, CVE-2026-6352, CVE-2026-6896, CVE-2026-7492, CVE-2026-8472", "creation_timestamp": "2026-07-09T14:35:07.259463Z"} {"uuid": "7afb1df0-973e-4544-8167-1b475db3c024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11827", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u5w5rz72o", "content": "\ud83d\udd17 CVE : CVE-2025-12506, CVE-2026-11827, CVE-2026-13151, CVE-2026-13320, CVE-2026-6352, CVE-2026-6896, CVE-2026-7492, CVE-2026-8472", "creation_timestamp": "2026-07-09T14:35:07.259463Z"} https://vulnerability.circl.lu/sighting/7afb1df0-973e-4544-8167-1b475db3c024/export Thu, 09 Jul 2026 14:35:07 +0000 https://vulnerability.circl.lu/sighting/1be483e5-ea1f-44bf-ad6f-6308eb88dde3/export {"uuid": "1be483e5-ea1f-44bf-ad6f-6308eb88dde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11824", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq533eebkp2j", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-11824 impacts sqlite-libs in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/591\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-08T12:00:58.241920Z"} {"uuid": "1be483e5-ea1f-44bf-ad6f-6308eb88dde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11824", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq533eebkp2j", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-11824 impacts sqlite-libs in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/591\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-08T12:00:58.241920Z"} https://vulnerability.circl.lu/sighting/1be483e5-ea1f-44bf-ad6f-6308eb88dde3/export Wed, 08 Jul 2026 12:00:58 +0000 https://vulnerability.circl.lu/sighting/170bc349-810e-4320-97af-8ce206bbcd6b/export {"uuid": "170bc349-810e-4320-97af-8ce206bbcd6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq533cv3km2t", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-11822 impacts sqlite-libs in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/590\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-08T12:00:56.610381Z"} {"uuid": "170bc349-810e-4320-97af-8ce206bbcd6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq533cv3km2t", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-11822 impacts sqlite-libs in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/590\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-07-08T12:00:56.610381Z"} https://vulnerability.circl.lu/sighting/170bc349-810e-4320-97af-8ce206bbcd6b/export Wed, 08 Jul 2026 12:00:56 +0000 https://vulnerability.circl.lu/sighting/5ba567f5-bad3-4256-90b4-2bfaa68c9ec4/export {"uuid": "5ba567f5-bad3-4256-90b4-2bfaa68c9ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://gist.github.com/alon710/ed8bc6e2d4b9ba716afc36a52ec2f0d1", "content": "# CVE-2026-11822: CVE-2026-11822: Memory Corruption and Buffer Overflow in SQLite FTS5 Extension\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-06-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11822\n\n## Summary\nA memory corruption vulnerability exists in the FTS5 (Full-Text Search 5) extension of SQLite prior to version 3.53.2. An attacker can construct a malicious database file containing corrupt FTS5 page data. Querying this database triggers out-of-bounds reads and heap-based buffer overflows, potentially causing a crash or arbitrary code execution.\n\n## TL;DR\nA vulnerability in SQLite FTS5 allows local attackers to cause memory corruption and arbitrary code execution by querying a maliciously crafted database file.\n\n## Technical Details\n\n- **CWE ID**: CWE-122, CWE-125\n- **Attack Vector**: Local\n- **CVSS**: 7.8 (High)\n- **EPSS Score**: 0.00175\n- **Exploit Status**: None / Proof-of-Concept not publicly available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js\n- Echo framework\n- Debian Linux\n- Ubuntu Linux\n- Alma Linux\n- Photon OS\n- openSUSE\n- Chromium-based browsers\n- **SQLite**: < 3.53.2 (Fixed in: `3.53.2`)\n\n## Mitigation\n\n- Upgrade SQLite to version 3.53.2 or later\n- Compile SQLite with -DSQLITE_ENABLE_FTS5=0 to disable the vulnerable module\n- Implement sandbox controls on processes loading SQLite databases\n\n**Remediation Steps:**\n1. Identify all applications compiling or dynamically linking SQLite\n2. Apply the official patch or upgrade to SQLite 3.53.2\n3. Verify FTS5 compilation flags if upgrade is not possible\n\n## References\n\n- [Official SQLite Release Log (v3.53.2)](https://sqlite.org/releaselog/3_53_2.html)\n- [SQLite Branch 3.53 Patch Commit (061febcf41ca)](https://sqlite.org/src/info/061febcf41ca)\n- [SQLite Trunk Patch Commit (4a5ad516ea93)](https://sqlite.org/src/info/4a5ad516ea93)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension)\n- [Wiz Vulnerability Database Profile](https://www.wiz.io/vulnerability-database/cve/cve-2026-11822)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-11822)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11822) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T07:59:30.709028Z"} {"uuid": "5ba567f5-bad3-4256-90b4-2bfaa68c9ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11822", "type": "seen", "source": "https://gist.github.com/alon710/ed8bc6e2d4b9ba716afc36a52ec2f0d1", "content": "# CVE-2026-11822: CVE-2026-11822: Memory Corruption and Buffer Overflow in SQLite FTS5 Extension\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-06-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-11822\n\n## Summary\nA memory corruption vulnerability exists in the FTS5 (Full-Text Search 5) extension of SQLite prior to version 3.53.2. An attacker can construct a malicious database file containing corrupt FTS5 page data. Querying this database triggers out-of-bounds reads and heap-based buffer overflows, potentially causing a crash or arbitrary code execution.\n\n## TL;DR\nA vulnerability in SQLite FTS5 allows local attackers to cause memory corruption and arbitrary code execution by querying a maliciously crafted database file.\n\n## Technical Details\n\n- **CWE ID**: CWE-122, CWE-125\n- **Attack Vector**: Local\n- **CVSS**: 7.8 (High)\n- **EPSS Score**: 0.00175\n- **Exploit Status**: None / Proof-of-Concept not publicly available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js\n- Echo framework\n- Debian Linux\n- Ubuntu Linux\n- Alma Linux\n- Photon OS\n- openSUSE\n- Chromium-based browsers\n- **SQLite**: < 3.53.2 (Fixed in: `3.53.2`)\n\n## Mitigation\n\n- Upgrade SQLite to version 3.53.2 or later\n- Compile SQLite with -DSQLITE_ENABLE_FTS5=0 to disable the vulnerable module\n- Implement sandbox controls on processes loading SQLite databases\n\n**Remediation Steps:**\n1. Identify all applications compiling or dynamically linking SQLite\n2. Apply the official patch or upgrade to SQLite 3.53.2\n3. Verify FTS5 compilation flags if upgrade is not possible\n\n## References\n\n- [Official SQLite Release Log (v3.53.2)](https://sqlite.org/releaselog/3_53_2.html)\n- [SQLite Branch 3.53 Patch Commit (061febcf41ca)](https://sqlite.org/src/info/061febcf41ca)\n- [SQLite Trunk Patch Commit (4a5ad516ea93)](https://sqlite.org/src/info/4a5ad516ea93)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension)\n- [Wiz Vulnerability Database Profile](https://www.wiz.io/vulnerability-database/cve/cve-2026-11822)\n- [CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-11822)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-11822) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T07:59:30.709028Z"} https://vulnerability.circl.lu/sighting/5ba567f5-bad3-4256-90b4-2bfaa68c9ec4/export Mon, 06 Jul 2026 07:59:30 +0000