<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T11:13:02.798532+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08efd559-8a6c-4867-a4a6-5f22b75fc4c0/export</id>
    <title>08efd559-8a6c-4867-a4a6-5f22b75fc4c0</title>
    <updated>2026-09-17T11:13:02.813073+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08efd559-8a6c-4867-a4a6-5f22b75fc4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-36934", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mvk7tittxs2m", "content": "Original text: \"A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave\" \u2014 Seth Jenkins, Google Project Zero (14 January 2026). Sequel to Part 1: Decoding Dolby. Bug: CVE-2025-36934. Part 3: less\nhttps://core-jmp.org/2026/09/pixel-9-0-click-part-2-bigwave-cve-2025-36934/", "creation_timestamp": "2026-09-15T08:36:38.933530Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08efd559-8a6c-4867-a4a6-5f22b75fc4c0/export"/>
    <published>2026-09-15T08:36:38.933530+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/26c8a434-438c-4dd5-8420-357fbb301a6e/export</id>
    <title>26c8a434-438c-4dd5-8420-357fbb301a6e</title>
    <updated>2026-09-17T11:13:02.814736+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "26c8a434-438c-4dd5-8420-357fbb301a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-36911", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muttwo6hk72l", "content": "CVE-2025-36911 is trending. Hype score 6, currently #5 on cvemon.\n\nIn key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's conversations and\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-36911", "creation_timestamp": "2026-09-06T11:05:05.138318Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/26c8a434-438c-4dd5-8420-357fbb301a6e/export"/>
    <published>2026-09-06T11:05:05.138318+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/39b06b0b-1066-472a-beab-64cfb322a56d/export</id>
    <title>39b06b0b-1066-472a-beab-64cfb322a56d</title>
    <updated>2026-09-17T11:13:02.814830+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "39b06b0b-1066-472a-beab-64cfb322a56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-36939", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-26T00:00:22.699025Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/39b06b0b-1066-472a-beab-64cfb322a56d/export"/>
    <published>2026-08-26T00:00:22.699025+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/86ab2caf-d0ed-4585-bc08-76c88d7e2f4c/export</id>
    <title>86ab2caf-d0ed-4585-bc08-76c88d7e2f4c</title>
    <updated>2026-09-17T11:13:02.814903+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "86ab2caf-d0ed-4585-bc08-76c88d7e2f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-36939", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.780800Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/86ab2caf-d0ed-4585-bc08-76c88d7e2f4c/export"/>
    <published>2026-08-25T09:00:04.780800+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/25b6805d-9d33-4743-8db8-5d7d2eba4189/export</id>
    <title>25b6805d-9d33-4743-8db8-5d7d2eba4189</title>
    <updated>2026-09-17T11:13:02.814970+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "25b6805d-9d33-4743-8db8-5d7d2eba4189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-36001", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99432", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a patch-CVE-2025-36001\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gduma-phData\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 03:04:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPatch: SSRF via import (GitLab CE/EE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-25T00:00:25.410613Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/25b6805d-9d33-4743-8db8-5d7d2eba4189/export"/>
    <published>2026-08-25T00:00:25.410613+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5de184a2-c994-497c-ad00-9157815405d8/export</id>
    <title>5de184a2-c994-497c-ad00-9157815405d8</title>
    <updated>2026-09-17T11:13:02.815044+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5de184a2-c994-497c-ad00-9157815405d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-36939", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtu23o2qgo23", "content": "CVE-2025-36939 - nest\nIf someone with permission on your Thread network sends specially crafted messages, OpenThread may stop working, leading to a denial of service. The problem is caused by errors in how\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nest #google #CVE #infosec", "creation_timestamp": "2026-08-24T19:30:03.873952Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5de184a2-c994-497c-ad00-9157815405d8/export"/>
    <published>2026-08-24T19:30:03.873952+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/32935014-8345-4cb7-96ee-dca0ff377865/export</id>
    <title>32935014-8345-4cb7-96ee-dca0ff377865</title>
    <updated>2026-09-17T11:13:02.815117+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "32935014-8345-4cb7-96ee-dca0ff377865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-36939", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttvjrqe5s2u", "content": "\ud83d\udea8 CVE-2025-36939 \u2014 CVSS 10 CRITICAL\n\nMultiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the sa...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2025-36939\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T18:08:28.404658Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/32935014-8345-4cb7-96ee-dca0ff377865/export"/>
    <published>2026-08-24T18:08:28.404658+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d53ae9a5-9b8c-4bb0-ad7e-dac0fb12299d/export</id>
    <title>d53ae9a5-9b8c-4bb0-ad7e-dac0fb12299d</title>
    <updated>2026-09-17T11:13:02.815185+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d53ae9a5-9b8c-4bb0-ad7e-dac0fb12299d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-36940", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117151577840589826", "content": "A severe vulnerability was disclosed for Google Fuchsia (CVE-2025-36940) https://vuldb.com/vuln/394733", "creation_timestamp": "2026-08-24T17:06:57.020436Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d53ae9a5-9b8c-4bb0-ad7e-dac0fb12299d/export"/>
    <published>2026-08-24T17:06:57.020436+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb7f4f2f-ec99-4a2c-a48d-777c409f3f4f/export</id>
    <title>fb7f4f2f-ec99-4a2c-a48d-777c409f3f4f</title>
    <updated>2026-09-17T11:13:02.815257+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb7f4f2f-ec99-4a2c-a48d-777c409f3f4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-36001", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99432", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a patch-CVE-2025-36001\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gduma-phData\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 03:04:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPatch: SSRF via import (GitLab CE/EE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T08:00:03.604154Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb7f4f2f-ec99-4a2c-a48d-777c409f3f4f/export"/>
    <published>2026-08-24T08:00:03.604154+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/081513c0-78e0-43c6-939a-0516a87e8583/export</id>
    <title>081513c0-78e0-43c6-939a-0516a87e8583</title>
    <updated>2026-09-17T11:13:02.815329+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "081513c0-78e0-43c6-939a-0516a87e8583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-36255", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117129778872954937", "content": "A new vulnerability with increased severity was disclosed for IBM DS8A00 and DS8900F (CVE-2025-36255) https://vuldb.com/vuln/393447", "creation_timestamp": "2026-08-20T20:43:09.363584Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/081513c0-78e0-43c6-939a-0516a87e8583/export"/>
    <published>2026-08-20T20:43:09.363584+00:00</published>
  </entry>
</feed>
