<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-02T12:04:08.913888+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/779700e3-0480-47ee-bfdd-8371ae923e7d/export</id>
    <title>779700e3-0480-47ee-bfdd-8371ae923e7d</title>
    <updated>2026-10-02T12:04:08.937200+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "779700e3-0480-47ee-bfdd-8371ae923e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103764", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwubzuelk52u", "content": "\ud83d\udea8 CVE-2026-103764 \u2014 CVSS 9.3 CRITICAL\n\nMooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHead...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103764\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T02:07:48.171888Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/779700e3-0480-47ee-bfdd-8371ae923e7d/export"/>
    <published>2026-10-02T02:07:48.171888+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/35548776-4966-4608-af8d-ee225772fc3a/export</id>
    <title>35548776-4966-4608-af8d-ee225772fc3a</title>
    <updated>2026-10-02T12:04:08.940108+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "35548776-4966-4608-af8d-ee225772fc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3klqltosnkv4y", "content": "CVE-2026-103764 - Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport\nCVE ID : CVE-2026-103764\n \n Published : Oct. 2, 2026, 12:16 a.m. | 43\u00a0minutes ago\n \n Description : Mooncake transfer engine before 0.3.13 contains an untruste...", "creation_timestamp": "2026-10-02T01:44:55.061213Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/35548776-4966-4608-af8d-ee225772fc3a/export"/>
    <published>2026-10-02T01:44:55.061213+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4bf88e14-dc3b-4f2c-84f4-7575bea46da9/export</id>
    <title>4bf88e14-dc3b-4f2c-84f4-7575bea46da9</title>
    <updated>2026-10-02T12:04:08.940213+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4bf88e14-dc3b-4f2c-84f4-7575bea46da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103764", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwu5j24kfu2c", "content": "\ud83d\udd34 CVE-2026-103764 - Critical (9.8)\n\nMooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-103764/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-02T00:46:49.679471Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4bf88e14-dc3b-4f2c-84f4-7575bea46da9/export"/>
    <published>2026-10-02T00:46:49.679471+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9bd896fc-ae74-4974-a03c-099aa287c32f/export</id>
    <title>9bd896fc-ae74-4974-a03c-099aa287c32f</title>
    <updated>2026-10-02T12:04:08.940294+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9bd896fc-ae74-4974-a03c-099aa287c32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-103764", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwu2whj7dz2f", "content": "CRITICAL: CVE-2026-103764 in kvcache-ai Mooncake (&amp;lt;0.3.13) lets unauthenticated users read/write memory \u2014 data leaks &amp;amp; code execution possible. Patch to 0.3.13+ ASAP! https://radar.offseq.com/threat/cve-2026-103764-untrusted-pointer-dereference-in-kvcache-ai-mooncake-1cbac989f2110be6 #OffSeq #CVE...", "creation_timestamp": "2026-10-02T00:00:38.491463Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9bd896fc-ae74-4974-a03c-099aa287c32f/export"/>
    <published>2026-10-02T00:00:38.491463+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/699de330-c03a-488e-93f3-41829fa928b6/export</id>
    <title>699de330-c03a-488e-93f3-41829fa928b6</title>
    <updated>2026-10-02T12:04:08.940365+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "699de330-c03a-488e-93f3-41829fa928b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-103764", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117368372293171263", "content": "CRITICAL CVE-2026-103764 in kvcache-ai Mooncake (&amp;lt;0.3.13): Untrusted pointer dereference lets unauthenticated attackers read/write arbitrary memory, risking data leak &amp;amp; code execution. Patch to 0.3.13+ now! https://radar.offseq.com/threat/cve-2026-103764-untrusted-pointer-dereference-in-kvcache-ai-mooncake-1cbac989f2110be6 #OffSeq #CVE #Vuln #infosec", "creation_timestamp": "2026-10-02T00:00:36.494015Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/699de330-c03a-488e-93f3-41829fa928b6/export"/>
    <published>2026-10-02T00:00:36.494015+00:00</published>
  </entry>
</feed>
