<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-20T03:51:57.877930+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/68205e77-4273-4d44-a633-55420863c9c4/export</id>
    <title>68205e77-4273-4d44-a633-55420863c9c4</title>
    <updated>2026-08-20T03:51:57.893803+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "68205e77-4273-4d44-a633-55420863c9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19884", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2l5gf2j3lvsj3", "content": "CVE-2026-19884 - Eclipse Theia Git Extension Arbitrary Command Execution Vulnerability\nCVE ID : CVE-2026-19884\n \n Published : Aug. 14, 2026, 3:32 p.m. | 40\u00a0minutes ago\n \n Description : In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control...", "creation_timestamp": "2026-08-14T16:27:12.658930Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/68205e77-4273-4d44-a633-55420863c9c4/export"/>
    <published>2026-08-14T16:27:12.658930+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/80e028dd-ab33-45da-aba6-1670e8984363/export</id>
    <title>80e028dd-ab33-45da-aba6-1670e8984363</title>
    <updated>2026-08-20T03:51:57.896911+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "80e028dd-ab33-45da-aba6-1670e8984363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19884", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt2jtuj4xd2p", "content": "Opening a booby-trapped code repository can run an attacker's commands in editors built on Eclipse Theia (the framework under Arduino IDE 2.x and other tools).\n\nA crafted git config runs on folder open, no trust prompt. CVE-2026-19884, CVSS 8.4.\n\nFix: update to Theia 1.70.0.", "creation_timestamp": "2026-08-14T16:02:49.077193Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/80e028dd-ab33-45da-aba6-1670e8984363/export"/>
    <published>2026-08-14T16:02:49.077193+00:00</published>
  </entry>
</feed>
