<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-25T04:20:33.773476+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/28cc0ca9-0754-40fa-8044-7862b87a950f/export</id>
    <title>28cc0ca9-0754-40fa-8044-7862b87a950f</title>
    <updated>2026-06-25T04:20:33.791580+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "28cc0ca9-0754-40fa-8044-7862b87a950f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1078", "type": "published-proof-of-concept", "source": "Telegram/8eXn4QLj3W1_8AYc2pIsiDgfSWsuolTpz1YwE008yOgTXtw", "content": "", "creation_timestamp": "2026-04-07T17:29:14.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/28cc0ca9-0754-40fa-8044-7862b87a950f/export"/>
    <published>2026-04-07T17:29:14+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2907145d-76ac-405c-a016-fccaa47823ce/export</id>
    <title>2907145d-76ac-405c-a016-fccaa47823ce</title>
    <updated>2026-06-25T04:20:33.791499+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2907145d-76ac-405c-a016-fccaa47823ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mngh7z7r5x2p", "content": "CVE-2026-10783 - gradio-app gradio Audio Cache Key save_audio_to_cache weak hash\nCVE ID : CVE-2026-10783\n \n Published : June 3, 2026, 11:30 p.m. | 59\u00a0minutes ago\n \n Description : A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_au...", "creation_timestamp": "2026-06-04T01:16:42.171040Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2907145d-76ac-405c-a016-fccaa47823ce/export"/>
    <published>2026-06-04T01:16:42.171040+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2a47b805-ca10-4929-8308-9019bcc2aae2/export</id>
    <title>2a47b805-ca10-4929-8308-9019bcc2aae2</title>
    <updated>2026-06-25T04:20:33.791424+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2a47b805-ca10-4929-8308-9019bcc2aae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnskgyyezw2t", "content": "CVE-2026-10786 - Devolutions Server Improper Access Control Information Disclosure\nCVE ID : CVE-2026-10786\n \n Published : June 8, 2026, 7:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Improper access control in the ticketing integration settings in Devolutions Server allow...", "creation_timestamp": "2026-06-08T20:46:14.907158Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2a47b805-ca10-4929-8308-9019bcc2aae2/export"/>
    <published>2026-06-08T20:46:14.907158+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc16d5b7-752e-4fbf-aa92-a4cd74c4e7c2/export</id>
    <title>dc16d5b7-752e-4fbf-aa92-a4cd74c4e7c2</title>
    <updated>2026-06-25T04:20:33.791345+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc16d5b7-752e-4fbf-aa92-a4cd74c4e7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10789", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3movhp2dlvr2j", "content": "Autodesk Fusion MCP extension (v2703.1.11) hit by CRITICAL code injection (CVE-2026-10789). Visiting a malicious site can allow code execution. Limit risky browsing, monitor for updates. https://radar.offseq.com/threat/cve-2026-10789-cwe-94-improper-control-of-generati-267c2476d8e09380 #OffSeq #A...", "creation_timestamp": "2026-06-22T18:00:15.103758Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc16d5b7-752e-4fbf-aa92-a4cd74c4e7c2/export"/>
    <published>2026-06-22T18:00:15.103758+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6995a3ee-1480-47c3-8996-cc83c5157c86/export</id>
    <title>6995a3ee-1480-47c3-8996-cc83c5157c86</title>
    <updated>2026-06-25T04:20:33.791234+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6995a3ee-1480-47c3-8996-cc83c5157c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10789", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116795061835699125", "content": "CVE-2026-10789: CRITICAL code injection in Autodesk Fusion MCP ext (v2703.1.11). Visiting a crafted page can lead to arbitrary code execution with user rights. Update guidance pending. https://radar.offseq.com/threat/cve-2026-10789-cwe-94-improper-control-of-generati-267c2476d8e09380 #OffSeq #Vulnerability #Autodesk #CVE2026_10789", "creation_timestamp": "2026-06-22T18:00:22.563103Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6995a3ee-1480-47c3-8996-cc83c5157c86/export"/>
    <published>2026-06-22T18:00:22.563103+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2ca64326-7481-4c44-ae67-055e8b55095e/export</id>
    <title>2ca64326-7481-4c44-ae67-055e8b55095e</title>
    <updated>2026-06-25T04:20:33.789741+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2ca64326-7481-4c44-ae67-055e8b55095e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10789", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3movner5taf2q", "content": "CVE-2026-10789 - MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop\nCVE ID : CVE-2026-10789\n \n Published : June 22, 2026, 5:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop r...", "creation_timestamp": "2026-06-22T19:41:51.963015Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2ca64326-7481-4c44-ae67-055e8b55095e/export"/>
    <published>2026-06-22T19:41:51.963015+00:00</published>
  </entry>
</feed>
