<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-29T22:32:44.750137+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0b61a39e-1e3b-490a-b951-e5fb42923c6b/export</id>
    <title>0b61a39e-1e3b-490a-b951-e5fb42923c6b</title>
    <updated>2026-06-29T22:32:44.774157+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0b61a39e-1e3b-490a-b951-e5fb42923c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11414", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motx5od2pd2v", "content": "\ud83d\udea8  ALERT: CVE-2026-11414\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nA hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Because the key is identical across all installations, an unauthenticated network attacker who can reach the server can forge valid", "creation_timestamp": "2026-06-22T03:31:31.686634Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0b61a39e-1e3b-490a-b951-e5fb42923c6b/export"/>
    <published>2026-06-22T03:31:31.686634+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/25221057-6648-41d5-a176-8591aed71f29/export</id>
    <title>25221057-6648-41d5-a176-8591aed71f29</title>
    <updated>2026-06-29T22:32:44.778777+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "25221057-6648-41d5-a176-8591aed71f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11414", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnmh43cise2l", "content": "\ud83d\udea8 CRITICAL: Altium Enterprise Server flaw (CVE-2026-11414) allows unauth'd file theft via hard-coded keys &amp;amp; path traversal. Restrict access now &amp;amp; watch for patches. https://radar.offseq.com/threat/cve-2026-11414-cwe-798-use-of-hard-coded-credentia-ab72dad7 #OffSeq #Security #Vulnerability", "creation_timestamp": "2026-06-06T10:30:29.315991Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/25221057-6648-41d5-a176-8591aed71f29/export"/>
    <published>2026-06-06T10:30:29.315991+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b1db3b2-bb7d-4cd3-bdfb-e5c391ef9611/export</id>
    <title>8b1db3b2-bb7d-4cd3-bdfb-e5c391ef9611</title>
    <updated>2026-06-29T22:32:44.778949+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b1db3b2-bb7d-4cd3-bdfb-e5c391ef9611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11414", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116702696330101939", "content": "\ud83d\udd12 CRITICAL: CVE-2026-11414 in Altium Enterprise Server \u2014 hard-coded keys + path traversal let unauth'd attackers access files &amp;amp; configs, risking full compromise. Restrict access, monitor for fixes. https://radar.offseq.com/threat/cve-2026-11414-cwe-798-use-of-hard-coded-credentia-ab72dad7 #OffSeq #Cybersecurity #CVE2026_11414", "creation_timestamp": "2026-06-06T10:30:27.202642Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b1db3b2-bb7d-4cd3-bdfb-e5c391ef9611/export"/>
    <published>2026-06-06T10:30:27.202642+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b5d1795c-6091-42bb-ada9-9603369a5e93/export</id>
    <title>b5d1795c-6091-42bb-ada9-9603369a5e93</title>
    <updated>2026-06-29T22:32:44.779075+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b5d1795c-6091-42bb-ada9-9603369a5e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnkztxyif42t", "content": "CVE-2026-11414 - Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path Traversal\nCVE ID : CVE-2026-11414\n \n Published : June 5, 2026, 8:17 p.m. | 15\u00a0minutes ago\n \n Description : A hard-coded cryptographic key is u...", "creation_timestamp": "2026-06-05T21:00:38.158838Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b5d1795c-6091-42bb-ada9-9603369a5e93/export"/>
    <published>2026-06-05T21:00:38.158838+00:00</published>
  </entry>
</feed>
