<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-05T13:11:03.752674+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9/export</id>
    <title>9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9</title>
    <updated>2026-08-05T13:11:03.772943+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d6lw44fkpwikn", "content": "CVE-2026-18685 - GL.iNet GL-MT3000 modem.so glc set_upgrade command injection\nCVE ID : CVE-2026-18685\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the ...", "creation_timestamp": "2026-08-04T01:55:20.759165Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9/export"/>
    <published>2026-08-04T01:55:20.759165+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bcc30692-a3eb-4e03-a514-c51959175014/export</id>
    <title>bcc30692-a3eb-4e03-a514-c51959175014</title>
    <updated>2026-08-05T13:11:03.774717+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bcc30692-a3eb-4e03-a514-c51959175014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18685", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7pg6a5dr2g", "content": "GL.iNet GL-MT3000 (v4.4.0 \u2013 4.4.5) hit by CRITICAL command injection (CVE-2026-18685). Remote code execution possible \u2014 no patch yet. Restrict access &amp;amp; monitor devices. https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #IoTSecurity #Vuln...", "creation_timestamp": "2026-08-04T00:00:39.884919Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bcc30692-a3eb-4e03-a514-c51959175014/export"/>
    <published>2026-08-04T00:00:39.884919+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7a72757c-a25d-4a39-9d4b-4d509546fef1/export</id>
    <title>7a72757c-a25d-4a39-9d4b-4d509546fef1</title>
    <updated>2026-08-05T13:11:03.774829+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7a72757c-a25d-4a39-9d4b-4d509546fef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18685", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117034296046822265", "content": "CVE-2026-18685: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated RCE possible. No patch yet \u2014 restrict access &amp;amp; monitor for abuse. Details: https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #vuln #IoT #infosec", "creation_timestamp": "2026-08-04T00:00:37.565864Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7a72757c-a25d-4a39-9d4b-4d509546fef1/export"/>
    <published>2026-08-04T00:00:37.565864+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cee15acd-45a2-4f52-b333-864843c8abb1/export</id>
    <title>cee15acd-45a2-4f52-b333-864843c8abb1</title>
    <updated>2026-08-05T13:11:03.774913+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cee15acd-45a2-4f52-b333-864843c8abb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18685", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7p5zk45z2f", "content": "CVE-2026-18685 - gl-mt3000\nThe GL.iNet GL-MT3000 modem has a vulnerability that allows attackers to execute unauthorized commands when upgrading the modem's software. This can be done remotely, which means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#glmt3000 #glinet #CVE #infosec", "creation_timestamp": "2026-08-03T23:56:05.271621Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cee15acd-45a2-4f52-b333-864843c8abb1/export"/>
    <published>2026-08-03T23:56:05.271621+00:00</published>
  </entry>
</feed>
