https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 06 Aug 2026 04:43:03 +0000 https://vulnerability.circl.lu/sighting/540e8a17-e2ed-454c-90e7-db69cce3f290/export {"uuid": "540e8a17-e2ed-454c-90e7-db69cce3f290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfutk4u62a", "content": "CVE-2026-52891\nWekan's avatar upload feature allows hackers to execute server commands if they upload a file with malicious characters. This is a security risk because it could allow hackers to take control of your server. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:18:04.274959Z"} {"uuid": "540e8a17-e2ed-454c-90e7-db69cce3f290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfutk4u62a", "content": "CVE-2026-52891\nWekan's avatar upload feature allows hackers to execute server commands if they upload a file with malicious characters. This is a security risk because it could allow hackers to take control of your server. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:18:04.274959Z"} https://vulnerability.circl.lu/sighting/540e8a17-e2ed-454c-90e7-db69cce3f290/export Sat, 18 Jul 2026 04:18:04 +0000 https://vulnerability.circl.lu/sighting/534b1c66-1e5d-466c-97ee-b40d87f6fa54/export {"uuid": "534b1c66-1e5d-466c-97ee-b40d87f6fa54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpyal2izp2s", "content": "CVE-2026-52891 - Wekan: Shell Injection via Avatar Upload\nCVE ID : CVE-2026-52891\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : Wekan is open source kanban built with Meteor. Prior to 9.07, Wekan avatar upload functionality embeds user-supplied fil...", "creation_timestamp": "2026-07-16T00:30:46.914649Z"} {"uuid": "534b1c66-1e5d-466c-97ee-b40d87f6fa54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpyal2izp2s", "content": "CVE-2026-52891 - Wekan: Shell Injection via Avatar Upload\nCVE ID : CVE-2026-52891\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : Wekan is open source kanban built with Meteor. Prior to 9.07, Wekan avatar upload functionality embeds user-supplied fil...", "creation_timestamp": "2026-07-16T00:30:46.914649Z"} https://vulnerability.circl.lu/sighting/534b1c66-1e5d-466c-97ee-b40d87f6fa54/export Thu, 16 Jul 2026 00:30:46 +0000 https://vulnerability.circl.lu/sighting/33875bd1-2c6b-4cd7-9d2a-5d5f4227abe6/export {"uuid": "33875bd1-2c6b-4cd7-9d2a-5d5f4227abe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxqavaqm2i", "content": "CVE-2026-52893 - Wekan: OIDC Account Takeover via Unconditional Email-Based Account Merge in onCreateUser hook\nCVE ID : CVE-2026-52893\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : Wekan is open source kanban built with Meteor. Prior to 9.32, the W...", "creation_timestamp": "2026-07-16T00:21:39.248994Z"} {"uuid": "33875bd1-2c6b-4cd7-9d2a-5d5f4227abe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxqavaqm2i", "content": "CVE-2026-52893 - Wekan: OIDC Account Takeover via Unconditional Email-Based Account Merge in onCreateUser hook\nCVE ID : CVE-2026-52893\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : Wekan is open source kanban built with Meteor. Prior to 9.32, the W...", "creation_timestamp": "2026-07-16T00:21:39.248994Z"} https://vulnerability.circl.lu/sighting/33875bd1-2c6b-4cd7-9d2a-5d5f4227abe6/export Thu, 16 Jul 2026 00:21:39 +0000 https://vulnerability.circl.lu/sighting/485fa4cc-40f8-4b15-be09-c61c09a6d2dc/export {"uuid": "485fa4cc-40f8-4b15-be09-c61c09a6d2dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52893", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqptj4dkuq2w", "content": "CVE-2026-52893 - wekan\nWekan users are at risk if their email address is shared with an attacker using an OpenID Connect (OIDC) account. This vulnerability is fixed in Wekan version 9.32, so update to the latest\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wekan #CVE #infosec", "creation_timestamp": "2026-07-15T23:06:04.667647Z"} {"uuid": "485fa4cc-40f8-4b15-be09-c61c09a6d2dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52893", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqptj4dkuq2w", "content": "CVE-2026-52893 - wekan\nWekan users are at risk if their email address is shared with an attacker using an OpenID Connect (OIDC) account. This vulnerability is fixed in Wekan version 9.32, so update to the latest\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wekan #CVE #infosec", "creation_timestamp": "2026-07-15T23:06:04.667647Z"} https://vulnerability.circl.lu/sighting/485fa4cc-40f8-4b15-be09-c61c09a6d2dc/export Wed, 15 Jul 2026 23:06:04 +0000 https://vulnerability.circl.lu/sighting/d9b24df5-b0bc-434e-b83f-41d64a088c0c/export {"uuid": "d9b24df5-b0bc-434e-b83f-41d64a088c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5spsbr25", "content": "CVE-2026-52891 - wekan\nWekan, an open source project management tool, allows attackers to execute commands on the server by uploading a malicious avatar with special characters. This can lead to unauthorized access and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wekan #CVE #infosec", "creation_timestamp": "2026-07-15T22:06:04.313239Z"} {"uuid": "d9b24df5-b0bc-434e-b83f-41d64a088c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5spsbr25", "content": "CVE-2026-52891 - wekan\nWekan, an open source project management tool, allows attackers to execute commands on the server by uploading a malicious avatar with special characters. This can lead to unauthorized access and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wekan #CVE #infosec", "creation_timestamp": "2026-07-15T22:06:04.313239Z"} https://vulnerability.circl.lu/sighting/d9b24df5-b0bc-434e-b83f-41d64a088c0c/export Wed, 15 Jul 2026 22:06:04 +0000 https://vulnerability.circl.lu/sighting/10497d60-0a3b-42be-8c6d-b824dcdeaae3/export {"uuid": "10497d60-0a3b-42be-8c6d-b824dcdeaae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"} {"uuid": "10497d60-0a3b-42be-8c6d-b824dcdeaae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"} https://vulnerability.circl.lu/sighting/10497d60-0a3b-42be-8c6d-b824dcdeaae3/export Tue, 14 Apr 2026 15:49:19 +0000 https://vulnerability.circl.lu/sighting/5052afc8-fccc-4eb3-9d33-e83680d28770/export {"uuid": "5052afc8-fccc-4eb3-9d33-e83680d28770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"} {"uuid": "5052afc8-fccc-4eb3-9d33-e83680d28770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"} https://vulnerability.circl.lu/sighting/5052afc8-fccc-4eb3-9d33-e83680d28770/export Sun, 12 Apr 2026 20:00:00 +0000 https://vulnerability.circl.lu/sighting/89150368-deb4-4b45-b8c5-5e6448fa920c/export {"uuid": "89150368-deb4-4b45-b8c5-5e6448fa920c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mitfqm3ajc2c", "content": "", "creation_timestamp": "2026-04-06T13:48:51.145248Z"} {"uuid": "89150368-deb4-4b45-b8c5-5e6448fa920c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mitfqm3ajc2c", "content": "", "creation_timestamp": "2026-04-06T13:48:51.145248Z"} https://vulnerability.circl.lu/sighting/89150368-deb4-4b45-b8c5-5e6448fa920c/export Mon, 06 Apr 2026 13:48:51 +0000 https://vulnerability.circl.lu/sighting/1b7586fd-23b2-4bbd-aabf-3a20dacc3679/export {"uuid": "1b7586fd-23b2-4bbd-aabf-3a20dacc3679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"} {"uuid": "1b7586fd-23b2-4bbd-aabf-3a20dacc3679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"} https://vulnerability.circl.lu/sighting/1b7586fd-23b2-4bbd-aabf-3a20dacc3679/export Thu, 02 Apr 2026 17:00:00 +0000 https://vulnerability.circl.lu/sighting/47ec929a-8c4d-4521-a257-f0da66ddc939/export {"uuid": "47ec929a-8c4d-4521-a257-f0da66ddc939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"} {"uuid": "47ec929a-8c4d-4521-a257-f0da66ddc939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"} https://vulnerability.circl.lu/sighting/47ec929a-8c4d-4521-a257-f0da66ddc939/export Wed, 01 Apr 2026 18:00:00 +0000