https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 03:38:15 +0000 https://vulnerability.circl.lu/sighting/3f888075-a601-426d-a104-32c397fbaab8/export {"uuid": "3f888075-a601-426d-a104-32c397fbaab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84941", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv7c3dsxxp25", "content": "TP-Link's Omada Controller, the console many businesses use to run their networks, has a patched flaw (CVE-2026-84941).\n\nA logged-in admin who manages SAML sign-on can read files off the controller host.\n\nSelf-hosted? Update to 6.2.14.11 or the July 11 build.", "creation_timestamp": "2026-09-11T00:17:32.608965Z"} {"uuid": "3f888075-a601-426d-a104-32c397fbaab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84941", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv7c3dsxxp25", "content": "TP-Link's Omada Controller, the console many businesses use to run their networks, has a patched flaw (CVE-2026-84941).\n\nA logged-in admin who manages SAML sign-on can read files off the controller host.\n\nSelf-hosted? Update to 6.2.14.11 or the July 11 build.", "creation_timestamp": "2026-09-11T00:17:32.608965Z"} https://vulnerability.circl.lu/sighting/3f888075-a601-426d-a104-32c397fbaab8/export Fri, 11 Sep 2026 00:17:32 +0000 https://vulnerability.circl.lu/sighting/0ba442a5-3efc-4895-b5e9-f5c771a032ac/export {"uuid": "0ba442a5-3efc-4895-b5e9-f5c771a032ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84941", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv7bbib3be2b", "content": "CVE-2026-84941: TP-Link Systems disclosed an XML external entity flaw in the Omada Software Controller SAML single sign-on feature, letting an authenticated user with SAML configuration rights read sensitive information. Fixed in version 6.2.14.11.", "creation_timestamp": "2026-09-11T00:03:03.772896Z"} {"uuid": "0ba442a5-3efc-4895-b5e9-f5c771a032ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84941", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv7bbib3be2b", "content": "CVE-2026-84941: TP-Link Systems disclosed an XML external entity flaw in the Omada Software Controller SAML single sign-on feature, letting an authenticated user with SAML configuration rights read sensitive information. Fixed in version 6.2.14.11.", "creation_timestamp": "2026-09-11T00:03:03.772896Z"} https://vulnerability.circl.lu/sighting/0ba442a5-3efc-4895-b5e9-f5c771a032ac/export Fri, 11 Sep 2026 00:03:03 +0000 https://vulnerability.circl.lu/sighting/8b42c862-eb1e-451a-b8cb-8d83e215fe56/export {"uuid": "8b42c862-eb1e-451a-b8cb-8d83e215fe56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84942", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mv3pjyorpa2e", "content": "CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards #patchmanagement", "creation_timestamp": "2026-09-09T14:07:42.756836Z"} {"uuid": "8b42c862-eb1e-451a-b8cb-8d83e215fe56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84942", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mv3pjyorpa2e", "content": "CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards #patchmanagement", "creation_timestamp": "2026-09-09T14:07:42.756836Z"} https://vulnerability.circl.lu/sighting/8b42c862-eb1e-451a-b8cb-8d83e215fe56/export Wed, 09 Sep 2026 14:07:42 +0000 https://vulnerability.circl.lu/sighting/2959321b-fc21-4202-b401-98a80bc368b3/export {"uuid": "2959321b-fc21-4202-b401-98a80bc368b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84942", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4pfz2c7oosalz", "content": "CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards\nCVE ID : CVE-2026-84942\n \n Published : Sept. 8, 2026, 8:18 p.m. | 39\u00a0minutes ago\n \n Description : Improper input validation in the Vega expression function implementation ...", "creation_timestamp": "2026-09-08T21:10:46.583043Z"} {"uuid": "2959321b-fc21-4202-b401-98a80bc368b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84942", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4pfz2c7oosalz", "content": "CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards\nCVE ID : CVE-2026-84942\n \n Published : Sept. 8, 2026, 8:18 p.m. | 39\u00a0minutes ago\n \n Description : Improper input validation in the Vega expression function implementation ...", "creation_timestamp": "2026-09-08T21:10:46.583043Z"} https://vulnerability.circl.lu/sighting/2959321b-fc21-4202-b401-98a80bc368b3/export Tue, 08 Sep 2026 21:10:46 +0000 https://vulnerability.circl.lu/sighting/829986ea-3019-4f44-a86a-67e0c90e3eb6/export {"uuid": "829986ea-3019-4f44-a86a-67e0c90e3eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84942", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muzw5gzwya2s", "content": "\ud83d\udfe0 CVE-2026-84942 - High (8.7)\n\nImproper input validation in the Vega expression function implementation in OpenSearch Dashboards...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84942/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T21:00:39.416264Z"} {"uuid": "829986ea-3019-4f44-a86a-67e0c90e3eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84942", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muzw5gzwya2s", "content": "\ud83d\udfe0 CVE-2026-84942 - High (8.7)\n\nImproper input validation in the Vega expression function implementation in OpenSearch Dashboards...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84942/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T21:00:39.416264Z"} https://vulnerability.circl.lu/sighting/829986ea-3019-4f44-a86a-67e0c90e3eb6/export Tue, 08 Sep 2026 21:00:39 +0000 https://vulnerability.circl.lu/sighting/27909379-909d-4707-8679-0d59c489187d/export {"uuid": "27909379-909d-4707-8679-0d59c489187d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2pozg5y57hhxy", "content": "CVE-2026-84947 - undici vulnerable to response truncation via oversized chunked responses in the dump interceptor\nCVE ID : CVE-2026-84947\n \n Published : 4. September 2026 16:53 | 29\u00a0Minuten ago\n \n Description : undici's dump interceptor reads and discards a response body up to...", "creation_timestamp": "2026-09-04T17:47:50.592155Z"} {"uuid": "27909379-909d-4707-8679-0d59c489187d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2pozg5y57hhxy", "content": "CVE-2026-84947 - undici vulnerable to response truncation via oversized chunked responses in the dump interceptor\nCVE ID : CVE-2026-84947\n \n Published : 4. September 2026 16:53 | 29\u00a0Minuten ago\n \n Description : undici's dump interceptor reads and discards a response body up to...", "creation_timestamp": "2026-09-04T17:47:50.592155Z"} https://vulnerability.circl.lu/sighting/27909379-909d-4707-8679-0d59c489187d/export Fri, 04 Sep 2026 17:47:50 +0000 https://vulnerability.circl.lu/sighting/a3001651-3819-4764-9bd9-adc8f12b6fce/export {"uuid": "a3001651-3819-4764-9bd9-adc8f12b6fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84947", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mupgl5yzrk2w", "content": "\ud83d\udea8 Low-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84947: undici vulnerable to response truncation via oversized chunked responses in the dump interceptor\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T16:55:30.763818Z"} {"uuid": "a3001651-3819-4764-9bd9-adc8f12b6fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84947", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mupgl5yzrk2w", "content": "\ud83d\udea8 Low-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84947: undici vulnerable to response truncation via oversized chunked responses in the dump interceptor\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T16:55:30.763818Z"} https://vulnerability.circl.lu/sighting/a3001651-3819-4764-9bd9-adc8f12b6fce/export Fri, 04 Sep 2026 16:55:30 +0000