CVE•Published 2026-07-27•Modified 2026-07-27•0 articles on news•5 live references•NVD data
CVE-2026-17530
Vulnerability data via NVD (ingested)
CVSS v3.1
6.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS percentile
—
Weaknesses (CWE)
Description
A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function _build_handoff_toolset of the file AstrBot/astrbot/core/astr_agent_tool_exec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The patch is identified as d23011262e8e75e1ec41b0f1f0091493a022327e. A patch should be applied to remediate this issue.
Timeline
Published 2026-07-27
Modified 2026-07-27
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
More intel sources (5)
Shodan report
vuln:CVE-2026-17530Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-17530Censys host search filtered to this CVE id.
grep.app
CVE-2026-17530Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-17530GitHub code search for direct mentions.
Google dork
"CVE-2026-17530" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (5)
CVE-2026-175305 repos
Mr-xn/Penetration_Testing_POCHTML
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypas…
Threekiii/Awesome-POCJava
一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.
Ostorlab/KEVunknown
Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
GODofExploit/exploit-arsenalPython
277 standalone dependency-free Python 3 CVE exploits, each validated end-to-end against the real vulnerable software with a write-up and a screenshot of the live run. 86 in the CIS…
sangam14/my-awesome-starsunknown
my personal gitstars
We haven't classified any articles referencing CVE-2026-17530 yet. The external references above still apply.