https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 21 Jul 2026 11:48:04 +0000 https://vulnerability.circl.lu/sighting/31ee8286-1ed9-49d0-8b5c-b3bcbb5fd14e/export {"uuid": "31ee8286-1ed9-49d0-8b5c-b3bcbb5fd14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41857", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrjmo5vc2b", "content": "\u05d4\u05ea\u05e7\u05e4\u05ea CVE-2026-41857: \u05e1\u05db\u05e0\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05dc\u05d1\u05d5\u05e9 \u05d3\u05d9\u05e8\u05e7\u05d8\u05d5\u05e8 \u05d5\u05de\u05e2\u05e8\u05db\u05d5\u05ea \u05e7\u05dc\u05d0\u05d5\u05d3\n\n\n\nhttps://khesef.xyz/posts/B74EFD22-6904-428A-AADF-71DA9E417EBC", "creation_timestamp": "2026-07-16T08:03:14.404208Z"} {"uuid": "31ee8286-1ed9-49d0-8b5c-b3bcbb5fd14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41857", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrjmo5vc2b", "content": "\u05d4\u05ea\u05e7\u05e4\u05ea CVE-2026-41857: \u05e1\u05db\u05e0\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05dc\u05d1\u05d5\u05e9 \u05d3\u05d9\u05e8\u05e7\u05d8\u05d5\u05e8 \u05d5\u05de\u05e2\u05e8\u05db\u05d5\u05ea \u05e7\u05dc\u05d0\u05d5\u05d3\n\n\n\nhttps://khesef.xyz/posts/B74EFD22-6904-428A-AADF-71DA9E417EBC", "creation_timestamp": "2026-07-16T08:03:14.404208Z"} https://vulnerability.circl.lu/sighting/31ee8286-1ed9-49d0-8b5c-b3bcbb5fd14e/export Thu, 16 Jul 2026 08:03:14 +0000 https://vulnerability.circl.lu/sighting/7fa7a423-2d64-4398-b040-9ff45a6cb3df/export {"uuid": "7fa7a423-2d64-4398-b040-9ff45a6cb3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41857", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk5sspugi22", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-41857: \u041a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 BOSH Director\n\n\n\nhttps://kripta.biz/posts/8538CF81-6E4E-4A9D-9A64-3F7343DA875A", "creation_timestamp": "2026-07-13T16:54:29.155959Z"} {"uuid": "7fa7a423-2d64-4398-b040-9ff45a6cb3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41857", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk5sspugi22", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-41857: \u041a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 BOSH Director\n\n\n\nhttps://kripta.biz/posts/8538CF81-6E4E-4A9D-9A64-3F7343DA875A", "creation_timestamp": "2026-07-13T16:54:29.155959Z"} https://vulnerability.circl.lu/sighting/7fa7a423-2d64-4398-b040-9ff45a6cb3df/export Mon, 13 Jul 2026 16:54:29 +0000 https://vulnerability.circl.lu/sighting/f5b298c2-8a0f-44b0-99be-93abc84a2fa3/export {"uuid": "f5b298c2-8a0f-44b0-99be-93abc84a2fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq77bti3g22t", "content": "CVE-2026-41857 - BOSH CLI Shell Injection\nCVE ID : CVE-2026-41857\n \n Published : July 9, 2026, 6:16 a.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs...", "creation_timestamp": "2026-07-09T08:21:29.977226Z"} {"uuid": "f5b298c2-8a0f-44b0-99be-93abc84a2fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq77bti3g22t", "content": "CVE-2026-41857 - BOSH CLI Shell Injection\nCVE ID : CVE-2026-41857\n \n Published : July 9, 2026, 6:16 a.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs...", "creation_timestamp": "2026-07-09T08:21:29.977226Z"} https://vulnerability.circl.lu/sighting/f5b298c2-8a0f-44b0-99be-93abc84a2fa3/export Thu, 09 Jul 2026 08:21:29 +0000 https://vulnerability.circl.lu/sighting/998be5b5-f722-48bf-a7f4-d3f74ffdc869/export {"uuid": "998be5b5-f722-48bf-a7f4-d3f74ffdc869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41855", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgur23ar62d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-41855 \u0432 Spring JMS: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DA716E2C-B046-415A-AE60-4CB52233D6F0", "creation_timestamp": "2026-06-29T16:09:15.256283Z"} {"uuid": "998be5b5-f722-48bf-a7f4-d3f74ffdc869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41855", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgur23ar62d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-41855 \u0432 Spring JMS: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DA716E2C-B046-415A-AE60-4CB52233D6F0", "creation_timestamp": "2026-06-29T16:09:15.256283Z"} https://vulnerability.circl.lu/sighting/998be5b5-f722-48bf-a7f4-d3f74ffdc869/export Mon, 29 Jun 2026 16:09:15 +0000 https://vulnerability.circl.lu/sighting/4d022705-31c0-40c9-ae61-4a729f9636a3/export {"uuid": "4d022705-31c0-40c9-ae61-4a729f9636a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41856", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mofrmmqg672x", "content": "\ud83d\udd17 CVE : CVE-2026-41001, CVE-2026-41699, CVE-2026-41700, CVE-2026-41856", "creation_timestamp": "2026-06-16T12:15:15.014265Z"} {"uuid": "4d022705-31c0-40c9-ae61-4a729f9636a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41856", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mofrmmqg672x", "content": "\ud83d\udd17 CVE : CVE-2026-41001, CVE-2026-41699, CVE-2026-41700, CVE-2026-41856", "creation_timestamp": "2026-06-16T12:15:15.014265Z"} https://vulnerability.circl.lu/sighting/4d022705-31c0-40c9-ae61-4a729f9636a3/export Tue, 16 Jun 2026 12:15:15 +0000 https://vulnerability.circl.lu/sighting/df0acd39-7052-4fc8-b2a1-70dda62b8c30/export {"uuid": "df0acd39-7052-4fc8-b2a1-70dda62b8c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41856", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116730653982449979", "content": "\ud83d\udd12 HIGH severity: Spring for GraphQL (v1.0.0 \u2013 2.0.3) is affected by CVE-2026-41856 \u2014 improper access control can bypass security annotations, risking unauthorized access. Review your authorization logic ASAP. https://radar.offseq.com/threat/cve-2026-41856-cwe-284-improper-access-control-in--4879e7fe #OffSeq #SpringSecurity #GraphQL", "creation_timestamp": "2026-06-11T09:00:29.905279Z"} {"uuid": "df0acd39-7052-4fc8-b2a1-70dda62b8c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41856", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116730653982449979", "content": "\ud83d\udd12 HIGH severity: Spring for GraphQL (v1.0.0 \u2013 2.0.3) is affected by CVE-2026-41856 \u2014 improper access control can bypass security annotations, risking unauthorized access. Review your authorization logic ASAP. https://radar.offseq.com/threat/cve-2026-41856-cwe-284-improper-access-control-in--4879e7fe #OffSeq #SpringSecurity #GraphQL", "creation_timestamp": "2026-06-11T09:00:29.905279Z"} https://vulnerability.circl.lu/sighting/df0acd39-7052-4fc8-b2a1-70dda62b8c30/export Thu, 11 Jun 2026 09:00:29 +0000 https://vulnerability.circl.lu/sighting/cec747a7-022d-4b5e-ad04-b1e3a6af14cf/export {"uuid": "cec747a7-022d-4b5e-ad04-b1e3a6af14cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41856", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnyufqlyyh2r", "content": "Spring for GraphQL faces a HIGH severity flaw (CVE-2026-41856) \u2014 security annotations may be ignored, risking unauthorized access. Review auth logic ASAP. Versions 1.0.0 \u2013 2.0.3 affected. https://radar.offseq.com/threat/cve-2026-41856-cwe-284-improper-access-control-in--4879e7fe #OffSeq #SpringSe...", "creation_timestamp": "2026-06-11T09:00:29.202536Z"} {"uuid": "cec747a7-022d-4b5e-ad04-b1e3a6af14cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41856", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnyufqlyyh2r", "content": "Spring for GraphQL faces a HIGH severity flaw (CVE-2026-41856) \u2014 security annotations may be ignored, risking unauthorized access. Review auth logic ASAP. Versions 1.0.0 \u2013 2.0.3 affected. https://radar.offseq.com/threat/cve-2026-41856-cwe-284-improper-access-control-in--4879e7fe #OffSeq #SpringSe...", "creation_timestamp": "2026-06-11T09:00:29.202536Z"} https://vulnerability.circl.lu/sighting/cec747a7-022d-4b5e-ad04-b1e3a6af14cf/export Thu, 11 Jun 2026 09:00:29 +0000 https://vulnerability.circl.lu/sighting/3aa39cd2-48f7-4449-b0c0-16b0dcc45705/export {"uuid": "3aa39cd2-48f7-4449-b0c0-16b0dcc45705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41856", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyr3dgend2x", "content": "\ud83d\udfe0 CVE-2026-41856 - High (7.5)\n\nThe Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41856/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T08:00:59.240717Z"} {"uuid": "3aa39cd2-48f7-4449-b0c0-16b0dcc45705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41856", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyr3dgend2x", "content": "\ud83d\udfe0 CVE-2026-41856 - High (7.5)\n\nThe Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41856/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T08:00:59.240717Z"} https://vulnerability.circl.lu/sighting/3aa39cd2-48f7-4449-b0c0-16b0dcc45705/export Thu, 11 Jun 2026 08:00:59 +0000 https://vulnerability.circl.lu/sighting/14b8ebd3-66f0-42fa-a48c-ea726f672369/export {"uuid": "14b8ebd3-66f0-42fa-a48c-ea726f672369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41855", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mntmtfbnrf2y", "content": "\ud83d\udfe0 CVE-2026-41855 - High (8.1)\n\nIn an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2Message...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41855/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T07:01:39.136082Z"} {"uuid": "14b8ebd3-66f0-42fa-a48c-ea726f672369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41855", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mntmtfbnrf2y", "content": "\ud83d\udfe0 CVE-2026-41855 - High (8.1)\n\nIn an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2Message...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41855/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T07:01:39.136082Z"} https://vulnerability.circl.lu/sighting/14b8ebd3-66f0-42fa-a48c-ea726f672369/export Tue, 09 Jun 2026 07:01:39 +0000 https://vulnerability.circl.lu/sighting/0420ce74-a367-4571-a2b8-f9b8f7dcb2d6/export {"uuid": "0420ce74-a367-4571-a2b8-f9b8f7dcb2d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mntmt63scm2i", "content": "\ud83d\udfe0 CVE-2026-41850 - High (7.5)\n\nApplications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulner...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T07:01:31.093011Z"} {"uuid": "0420ce74-a367-4571-a2b8-f9b8f7dcb2d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mntmt63scm2i", "content": "\ud83d\udfe0 CVE-2026-41850 - High (7.5)\n\nApplications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulner...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T07:01:31.093011Z"} https://vulnerability.circl.lu/sighting/0420ce74-a367-4571-a2b8-f9b8f7dcb2d6/export Tue, 09 Jun 2026 07:01:31 +0000