https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 14 Aug 2026 05:33:51 +0000 https://vulnerability.circl.lu/sighting/955bf29e-84b6-4d2c-bf27-2169c8ebf8f2/export {"uuid": "955bf29e-84b6-4d2c-bf27-2169c8ebf8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71201", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3r2rzs5rcn4ns", "content": "[OSSA-2026-033] Ironic Portgroup shard filter bypasses project scope (CVE-2026-71201)", "creation_timestamp": "2026-08-05T16:32:14.755633Z"} {"uuid": "955bf29e-84b6-4d2c-bf27-2169c8ebf8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71201", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3r2rzs5rcn4ns", "content": "[OSSA-2026-033] Ironic Portgroup shard filter bypasses project scope (CVE-2026-71201)", "creation_timestamp": "2026-08-05T16:32:14.755633Z"} https://vulnerability.circl.lu/sighting/955bf29e-84b6-4d2c-bf27-2169c8ebf8f2/export Wed, 05 Aug 2026 16:32:14 +0000 https://vulnerability.circl.lu/sighting/fd9f305d-a150-4717-8877-4bcf97ae3b37/export {"uuid": "fd9f305d-a150-4717-8877-4bcf97ae3b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71206", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117042587175345568", "content": "CVE-2026-71206 - Auth flaw in Shiori. Deleted/demoted users keep owner-level access via unrevoked JWT tokens. CVSS 8.3. No patch yet. Audit and rotate tokens immediately. #CVE #infosec #Shiori\nhttps://www.valtersit.com/cve/CVE-2026-71206/", "creation_timestamp": "2026-08-05T11:09:14.844772Z"} {"uuid": "fd9f305d-a150-4717-8877-4bcf97ae3b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71206", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117042587175345568", "content": "CVE-2026-71206 - Auth flaw in Shiori. Deleted/demoted users keep owner-level access via unrevoked JWT tokens. CVSS 8.3. No patch yet. Audit and rotate tokens immediately. #CVE #infosec #Shiori\nhttps://www.valtersit.com/cve/CVE-2026-71206/", "creation_timestamp": "2026-08-05T11:09:14.844772Z"} https://vulnerability.circl.lu/sighting/fd9f305d-a150-4717-8877-4bcf97ae3b37/export Wed, 05 Aug 2026 11:09:14 +0000 https://vulnerability.circl.lu/sighting/3cbd033e-f82a-4b13-9d98-611fe2759427/export {"uuid": "3cbd033e-f82a-4b13-9d98-611fe2759427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71206", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msdfahr6m52a", "content": "CVE-2026-71206 - Auth flaw in Shiori. Deleted/demoted users keep owner-level access via unrevoked JWT tokens. CVSS 8.3. No patch yet. Audit and rotate tokens immediately. #CVE #infosec #Shiori\n\nhttps://www.valtersit.com/cve/CVE-2026-71206/", "creation_timestamp": "2026-08-05T11:09:08.810415Z"} {"uuid": "3cbd033e-f82a-4b13-9d98-611fe2759427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71206", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msdfahr6m52a", "content": "CVE-2026-71206 - Auth flaw in Shiori. Deleted/demoted users keep owner-level access via unrevoked JWT tokens. CVSS 8.3. No patch yet. Audit and rotate tokens immediately. #CVE #infosec #Shiori\n\nhttps://www.valtersit.com/cve/CVE-2026-71206/", "creation_timestamp": "2026-08-05T11:09:08.810415Z"} https://vulnerability.circl.lu/sighting/3cbd033e-f82a-4b13-9d98-611fe2759427/export Wed, 05 Aug 2026 11:09:08 +0000 https://vulnerability.circl.lu/sighting/29723980-23df-4cd8-b298-692612d05b37/export {"uuid": "29723980-23df-4cd8-b298-692612d05b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71207", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msd7b22cji2a", "content": "CVE-2026-71207\nAn attacker can log in without a password by submitting a special input to the login form. This is because the system doesn't properly check user input. Additionally, the system has hardcoded admin credentials\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T09:22:05.453061Z"} {"uuid": "29723980-23df-4cd8-b298-692612d05b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71207", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msd7b22cji2a", "content": "CVE-2026-71207\nAn attacker can log in without a password by submitting a special input to the login form. This is because the system doesn't properly check user input. Additionally, the system has hardcoded admin credentials\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T09:22:05.453061Z"} https://vulnerability.circl.lu/sighting/29723980-23df-4cd8-b298-692612d05b37/export Wed, 05 Aug 2026 09:22:05 +0000 https://vulnerability.circl.lu/sighting/a06df1e8-53bd-4538-99ba-b4bf1e41e3b9/export {"uuid": "a06df1e8-53bd-4538-99ba-b4bf1e41e3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7120", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrbtkns52k2t", "content": "\ud83d\udea8 Medium-severity security fix in @fastify/static@10.1.2 just released!\n\nPatches CVE-2026-7120: @fastify/static vulnerable to authorization bypass via non-canonical URL paths.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-07-23T02:54:54.077666Z"} {"uuid": "a06df1e8-53bd-4538-99ba-b4bf1e41e3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7120", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrbtkns52k2t", "content": "\ud83d\udea8 Medium-severity security fix in @fastify/static@10.1.2 just released!\n\nPatches CVE-2026-7120: @fastify/static vulnerable to authorization bypass via non-canonical URL paths.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-07-23T02:54:54.077666Z"} https://vulnerability.circl.lu/sighting/a06df1e8-53bd-4538-99ba-b4bf1e41e3b9/export Thu, 23 Jul 2026 02:54:54 +0000