<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-08T07:15:49.294634+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6e195af8-400e-4d88-bf40-1474c3412d3e/export</id>
    <title>6e195af8-400e-4d88-bf40-1474c3412d3e</title>
    <updated>2026-10-08T07:15:49.321057+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6e195af8-400e-4d88-bf40-1474c3412d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105863", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbo72ux7v2w", "content": "CVE-2026-105863\nVersions of the free Payload content system from 3.0.0 up to but not including 3.90.0 can insert unexpected information into the authentication token that is created when users log in. This could allow users\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T09:50:04.194369Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6e195af8-400e-4d88-bf40-1474c3412d3e/export"/>
    <published>2026-10-07T09:50:04.194369+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/51da0b58-db45-4dc7-b247-17e5c8dbbb79/export</id>
    <title>51da0b58-db45-4dc7-b247-17e5c8dbbb79</title>
    <updated>2026-10-08T07:15:49.323161+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "51da0b58-db45-4dc7-b247-17e5c8dbbb79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105863", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx7zlzpe2x27", "content": "\ud83d\udea8 CVE-2026-105863 \u2014 CVSS 9.2 CRITICAL\n\nPayload is a free and open source headless content management system. In versions after 3.0.0 and before 3....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105863\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T18:08:50.962264Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/51da0b58-db45-4dc7-b247-17e5c8dbbb79/export"/>
    <published>2026-10-06T18:08:50.962264+00:00</published>
  </entry>
</feed>
