<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-08T07:15:51.942486+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a3f84336-c4e9-48cb-8c1a-5d8038b6383f/export</id>
    <title>a3f84336-c4e9-48cb-8c1a-5d8038b6383f</title>
    <updated>2026-10-08T07:15:51.964648+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a3f84336-c4e9-48cb-8c1a-5d8038b6383f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105985", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdjygi2gb2n", "content": "CVE-2026-105985 - cms\nIf someone can log into the Craft CMS control panel, they can send specially crafted requests that cause the system to execute any command on the web server. This happens because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cms #craftcms #CVE #infosec", "creation_timestamp": "2026-10-08T03:40:05.693949Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a3f84336-c4e9-48cb-8c1a-5d8038b6383f/export"/>
    <published>2026-10-08T03:40:05.693949+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/73b16881-f87f-4f57-b6b2-a13a003f57a6/export</id>
    <title>73b16881-f87f-4f57-b6b2-a13a003f57a6</title>
    <updated>2026-10-08T07:15:51.967008+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "73b16881-f87f-4f57-b6b2-a13a003f57a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105985", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5seofnoue4dga", "content": "CVE-2026-105985 - Authenticated RCE via render-components Entry Type overrides\nCVE ID : CVE-2026-105985\n \n Published : Oct. 6, 2026, 10:23 a.m. | 50\u00a0minutes ago\n \n Description : Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Pa...", "creation_timestamp": "2026-10-06T11:33:23.255645Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/73b16881-f87f-4f57-b6b2-a13a003f57a6/export"/>
    <published>2026-10-06T11:33:23.255645+00:00</published>
  </entry>
</feed>
