https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 14 Jul 2026 13:51:09 +0000 https://vulnerability.circl.lu/sighting/bc95c3a3-6f26-431e-ad77-b8d37b39e352/export {"uuid": "bc95c3a3-6f26-431e-ad77-b8d37b39e352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54353", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqlz6wpwhh2k", "content": "\ud83d\udccc CVE-2026-54353 - Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist th... https://www.cyberhub.blog/cves/CVE-2026-54353", "creation_timestamp": "2026-07-14T10:37:07.090093Z"} {"uuid": "bc95c3a3-6f26-431e-ad77-b8d37b39e352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54353", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqlz6wpwhh2k", "content": "\ud83d\udccc CVE-2026-54353 - Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist th... https://www.cyberhub.blog/cves/CVE-2026-54353", "creation_timestamp": "2026-07-14T10:37:07.090093Z"} https://vulnerability.circl.lu/sighting/bc95c3a3-6f26-431e-ad77-b8d37b39e352/export Tue, 14 Jul 2026 10:37:07 +0000 https://vulnerability.circl.lu/sighting/f11f577f-70c6-467d-a8c8-ef95b1d8d1e7/export {"uuid": "f11f577f-70c6-467d-a8c8-ef95b1d8d1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://t.me/GithubRedTeam/92275", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54350-Budibase-NoSQL-Injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 01:19:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54350 \u2014 Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.481810Z"} {"uuid": "f11f577f-70c6-467d-a8c8-ef95b1d8d1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://t.me/GithubRedTeam/92275", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54350-Budibase-NoSQL-Injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 01:19:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54350 \u2014 Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.481810Z"} https://vulnerability.circl.lu/sighting/f11f577f-70c6-467d-a8c8-ef95b1d8d1e7/export Tue, 14 Jul 2026 00:00:19 +0000 https://vulnerability.circl.lu/sighting/ebafe9fa-2047-49fa-ac24-ab769cf95a9c/export {"uuid": "ebafe9fa-2047-49fa-ac24-ab769cf95a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://t.me/GithubRedTeam/92275", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54350-Budibase-NoSQL-Injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 01:19:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54350 \u2014 Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.025909Z"} {"uuid": "ebafe9fa-2047-49fa-ac24-ab769cf95a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://t.me/GithubRedTeam/92275", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54350-Budibase-NoSQL-Injection\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 01:19:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54350 \u2014 Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.025909Z"} https://vulnerability.circl.lu/sighting/ebafe9fa-2047-49fa-ac24-ab769cf95a9c/export Mon, 13 Jul 2026 22:00:11 +0000 https://vulnerability.circl.lu/sighting/9a93dbf4-06ec-4bb3-a9fc-29bc7848f7f4/export {"uuid": "9a93dbf4-06ec-4bb3-a9fc-29bc7848f7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5435", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mqf6dud3zz25", "content": "[Backport staging-26.05] glibc: fix CVE-2026-5435 and CVE-2026-6238\n\nhttps://github.com/NixOS/nixpkgs/pull/540777\n\n#security", "creation_timestamp": "2026-07-11T17:20:42.722187Z"} {"uuid": "9a93dbf4-06ec-4bb3-a9fc-29bc7848f7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5435", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mqf6dud3zz25", "content": "[Backport staging-26.05] glibc: fix CVE-2026-5435 and CVE-2026-6238\n\nhttps://github.com/NixOS/nixpkgs/pull/540777\n\n#security", "creation_timestamp": "2026-07-11T17:20:42.722187Z"} https://vulnerability.circl.lu/sighting/9a93dbf4-06ec-4bb3-a9fc-29bc7848f7f4/export Sat, 11 Jul 2026 17:20:42 +0000 https://vulnerability.circl.lu/sighting/c974d78c-b5c2-4d72-bf50-020c10a27760/export {"uuid": "c974d78c-b5c2-4d72-bf50-020c10a27760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mplhihbycq2r", "content": "\ud83d\udea8 Patch Alert: CVE-2026-54352 is a high-severity vulnerability affecting widely-used software. This flaw can allow unauthorized remote code execution, putting sensitive data at risk. Our team urges you to patch this vulnerability immediately to mitigate potential threats. Staying ahead of threats\u2026", "creation_timestamp": "2026-07-01T11:55:08.001881Z"} {"uuid": "c974d78c-b5c2-4d72-bf50-020c10a27760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mplhihbycq2r", "content": "\ud83d\udea8 Patch Alert: CVE-2026-54352 is a high-severity vulnerability affecting widely-used software. This flaw can allow unauthorized remote code execution, putting sensitive data at risk. Our team urges you to patch this vulnerability immediately to mitigate potential threats. Staying ahead of threats\u2026", "creation_timestamp": "2026-07-01T11:55:08.001881Z"} https://vulnerability.circl.lu/sighting/c974d78c-b5c2-4d72-bf50-020c10a27760/export Wed, 01 Jul 2026 11:55:08 +0000 https://vulnerability.circl.lu/sighting/9c5e4e6d-5a26-4abf-b92c-08851a6412b6/export {"uuid": "9c5e4e6d-5a26-4abf-b92c-08851a6412b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkqov5yzy2e", "content": "\ud83d\udccc CVE-2026-54352 - Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 accepts a bu... https://www.cyberhub.blog/cves/CVE-2026-54352", "creation_timestamp": "2026-07-01T05:07:07.931884Z"} {"uuid": "9c5e4e6d-5a26-4abf-b92c-08851a6412b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkqov5yzy2e", "content": "\ud83d\udccc CVE-2026-54352 - Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/static.ts:24 accepts a bu... https://www.cyberhub.blog/cves/CVE-2026-54352", "creation_timestamp": "2026-07-01T05:07:07.931884Z"} https://vulnerability.circl.lu/sighting/9c5e4e6d-5a26-4abf-b92c-08851a6412b6/export Wed, 01 Jul 2026 05:07:07 +0000 https://vulnerability.circl.lu/sighting/39cb3027-75b5-49ae-82f1-950d44f237a9/export {"uuid": "39cb3027-75b5-49ae-82f1-950d44f237a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkoz7vcyb2v", "content": "\ud83d\udccc CVE-2026-54350 - Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every document of the ... https://www.cyberhub.blog/cves/CVE-2026-54350", "creation_timestamp": "2026-07-01T04:37:06.418844Z"} {"uuid": "39cb3027-75b5-49ae-82f1-950d44f237a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkoz7vcyb2v", "content": "\ud83d\udccc CVE-2026-54350 - Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every document of the ... https://www.cyberhub.blog/cves/CVE-2026-54350", "creation_timestamp": "2026-07-01T04:37:06.418844Z"} https://vulnerability.circl.lu/sighting/39cb3027-75b5-49ae-82f1-950d44f237a9/export Wed, 01 Jul 2026 04:37:06 +0000 https://vulnerability.circl.lu/sighting/303f1266-9228-423e-a516-31e1832f237e/export {"uuid": "303f1266-9228-423e-a516-31e1832f237e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54353", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7ixoj6o2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54353 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/78E8EE3C-6247-44FE-80AE-E4FA0311257B", "creation_timestamp": "2026-06-29T19:21:35.342900Z"} {"uuid": "303f1266-9228-423e-a516-31e1832f237e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54353", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7ixoj6o2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54353 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/78E8EE3C-6247-44FE-80AE-E4FA0311257B", "creation_timestamp": "2026-06-29T19:21:35.342900Z"} https://vulnerability.circl.lu/sighting/303f1266-9228-423e-a516-31e1832f237e/export Mon, 29 Jun 2026 19:21:35 +0000 https://vulnerability.circl.lu/sighting/4bd519e5-ece9-431d-95c2-107754e82649/export {"uuid": "4bd519e5-ece9-431d-95c2-107754e82649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7i7q34h23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54350 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f low-code \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6D0407B1-154E-4436-8AC0-2556A2FEF94F", "creation_timestamp": "2026-06-29T19:21:10.431203Z"} {"uuid": "4bd519e5-ece9-431d-95c2-107754e82649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54350", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7i7q34h23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54350 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f low-code \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6D0407B1-154E-4436-8AC0-2556A2FEF94F", "creation_timestamp": "2026-06-29T19:21:10.431203Z"} https://vulnerability.circl.lu/sighting/4bd519e5-ece9-431d-95c2-107754e82649/export Mon, 29 Jun 2026 19:21:10 +0000 https://vulnerability.circl.lu/sighting/1764ae23-1174-47e8-a669-72f6ff7c4b89/export {"uuid": "1764ae23-1174-47e8-a669-72f6ff7c4b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph77k3sah23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54352 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A0DB0CCD-330D-495C-8969-C700C2628D60", "creation_timestamp": "2026-06-29T19:16:19.132727Z"} {"uuid": "1764ae23-1174-47e8-a669-72f6ff7c4b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54352", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph77k3sah23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54352 \u0432 Budibase: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A0DB0CCD-330D-495C-8969-C700C2628D60", "creation_timestamp": "2026-06-29T19:16:19.132727Z"} https://vulnerability.circl.lu/sighting/1764ae23-1174-47e8-a669-72f6ff7c4b89/export Mon, 29 Jun 2026 19:16:19 +0000