<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-29T15:55:07.690789+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/69e3efe9-d1ee-40d1-a443-d14cefcf6635/export</id>
    <title>69e3efe9-d1ee-40d1-a443-d14cefcf6635</title>
    <updated>2026-08-29T15:55:07.720815+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "69e3efe9-d1ee-40d1-a443-d14cefcf6635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10053", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mtvmnkb6vh2b", "content": "569,000 emails. One Telegram channel. Zero hype.\n\nGolf Canada breach.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-10053-gitlab-rce-via-package-registry-path-traversal-poc/\n\nby Yazoul AI #InfoSec #DataBreach", "creation_timestamp": "2026-08-25T10:34:51.092807Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/69e3efe9-d1ee-40d1-a443-d14cefcf6635/export"/>
    <published>2026-08-25T10:34:51.092807+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/019c5dfe-4dee-4aec-b047-b89f770eb8d6/export</id>
    <title>019c5dfe-4dee-4aec-b047-b89f770eb8d6</title>
    <updated>2026-08-29T15:55:07.722865+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "019c5dfe-4dee-4aec-b047-b89f770eb8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "published-proof-of-concept", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "content": "", "creation_timestamp": "2026-08-25T00:00:09.647784Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/019c5dfe-4dee-4aec-b047-b89f770eb8d6/export"/>
    <published>2026-08-25T00:00:09.647784+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/19bb50ca-ba5a-4f10-9bd8-a9a5376ee442/export</id>
    <title>19bb50ca-ba5a-4f10-9bd8-a9a5376ee442</title>
    <updated>2026-08-29T15:55:07.723073+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "19bb50ca-ba5a-4f10-9bd8-a9a5376ee442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "published-proof-of-concept", "source": "Telegram/WmTYVBgmVan3mzvjl6-Xk0siaOAEpVUjrVkE0CKXWUqRTfo", "content": "", "creation_timestamp": "2026-08-25T00:00:07.985341Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/19bb50ca-ba5a-4f10-9bd8-a9a5376ee442/export"/>
    <published>2026-08-25T00:00:07.985341+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/468b4aaf-6dab-438b-9268-c49c9c55b6f7/export</id>
    <title>468b4aaf-6dab-438b-9268-c49c9c55b6f7</title>
    <updated>2026-08-29T15:55:07.723236+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "468b4aaf-6dab-438b-9268-c49c9c55b6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "Telegram/WmTYVBgmVan3mzvjl6-Xk0siaOAEpVUjrVkE0CKXWUqRTfo", "content": "", "creation_timestamp": "2026-08-24T21:00:05.894614Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/468b4aaf-6dab-438b-9268-c49c9c55b6f7/export"/>
    <published>2026-08-24T21:00:05.894614+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/03c94015-a29f-4ff2-9172-1a32f6c3b0fb/export</id>
    <title>03c94015-a29f-4ff2-9172-1a32f6c3b0fb</title>
    <updated>2026-08-29T15:55:07.723387+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "03c94015-a29f-4ff2-9172-1a32f6c3b0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "content": "", "creation_timestamp": "2026-08-24T21:00:04.448910Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/03c94015-a29f-4ff2-9172-1a32f6c3b0fb/export"/>
    <published>2026-08-24T21:00:04.448910+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/057906ca-f99d-4503-b54a-2e8383412b0f/export</id>
    <title>057906ca-f99d-4503-b54a-2e8383412b0f</title>
    <updated>2026-08-29T15:55:07.723540+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "057906ca-f99d-4503-b54a-2e8383412b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtr5r2fkma23", "content": "A logged-in GitLab user can abuse the package registry to write files across a self-managed server (CVE-2026-10053, CVSS 8.5).\n\nA public test lab just proved the flaw is real.\n\nFix: update self-managed GitLab to 19.2.2, 19.1.4, or 19.0.6.", "creation_timestamp": "2026-08-23T15:57:44.411268Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/057906ca-f99d-4503-b54a-2e8383412b0f/export"/>
    <published>2026-08-23T15:57:44.411268+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8d164673-b7aa-4c7d-9ab0-c6c5f0799e41/export</id>
    <title>8d164673-b7aa-4c7d-9ab0-c6c5f0799e41</title>
    <updated>2026-08-29T15:55:07.723700+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8d164673-b7aa-4c7d-9ab0-c6c5f0799e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtqtjmvt5u2h", "content": "GitLab CE/EE\uff08\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\uff09\u3067\u3001\u30d1\u30c3\u30b1\u30fc\u30b8\u30ec\u30b8\u30b9\u30c8\u30ea\u306e\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u304c\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-10053 CVSS 8.5 | HIGH", "creation_timestamp": "2026-08-23T12:54:37.202707Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8d164673-b7aa-4c7d-9ab0-c6c5f0799e41/export"/>
    <published>2026-08-23T12:54:37.202707+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/948e7382-f1e5-487b-805e-613d48a11f83/export</id>
    <title>948e7382-f1e5-487b-805e-613d48a11f83</title>
    <updated>2026-08-29T15:55:07.723848+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "948e7382-f1e5-487b-805e-613d48a11f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtqnaqn2nc22", "content": "\ud83d\udfe0 CVE-2026-10053 - High (8.5)\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10053/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T11:02:17.481126Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/948e7382-f1e5-487b-805e-613d48a11f83/export"/>
    <published>2026-08-23T11:02:17.481126+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6e2d9789-1045-4ad4-8cb2-0d252a414d77/export</id>
    <title>6e2d9789-1045-4ad4-8cb2-0d252a414d77</title>
    <updated>2026-08-29T15:55:07.724026+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6e2d9789-1045-4ad4-8cb2-0d252a414d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7jtrbmgtky4zp", "content": "CVE-2026-10053 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab\nCVE ID : CVE-2026-10053\n \n Published : Aug. 23, 2026, 10:16 a.m. | 18\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions fr...", "creation_timestamp": "2026-08-23T10:41:32.024958Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6e2d9789-1045-4ad4-8cb2-0d252a414d77/export"/>
    <published>2026-08-23T10:41:32.024958+00:00</published>
  </entry>
</feed>
