<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-02T06:33:16.941476+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ee30de9b-93f5-46e2-a3b9-d80a8880e6d0/export</id>
    <title>ee30de9b-93f5-46e2-a3b9-d80a8880e6d0</title>
    <updated>2026-09-02T06:33:16.972438+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ee30de9b-93f5-46e2-a3b9-d80a8880e6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "content": "", "creation_timestamp": "2026-09-01T10:15:06.835842Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ee30de9b-93f5-46e2-a3b9-d80a8880e6d0/export"/>
    <published>2026-09-01T10:15:06.835842+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/801edf5f-2ab5-4dac-95a2-22744d5801c6/export</id>
    <title>801edf5f-2ab5-4dac-95a2-22744d5801c6</title>
    <updated>2026-09-02T06:33:16.974914+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "801edf5f-2ab5-4dac-95a2-22744d5801c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "content": "", "creation_timestamp": "2026-08-29T10:15:18.317396Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/801edf5f-2ab5-4dac-95a2-22744d5801c6/export"/>
    <published>2026-08-29T10:15:18.317396+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/73303d83-6421-43a5-953e-35b842431be9/export</id>
    <title>73303d83-6421-43a5-953e-35b842431be9</title>
    <updated>2026-09-02T06:33:16.975015+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "73303d83-6421-43a5-953e-35b842431be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "seen", "source": "https://t.me/changelogWAF/6", "content": "New CVE Detections (2026-03-02)\n\nCVE-2025-52691: Arbitrary File Upload vulnerability in SmarterMail allowing attackers to upload malicious files, potentially leading to remote code execution.\n\nCVE-2026-23760: Authentication Bypass vulnerability in SmarterMail enabling unauthorized access to protected resources without valid credentials.\n\nCommand Injection \u2013 Nslookup: Detection for command injection via improper use of nslookup; this beta rule will be merged into the existing rule.", "creation_timestamp": "2026-08-29T00:00:08.177454Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/73303d83-6421-43a5-953e-35b842431be9/export"/>
    <published>2026-08-29T00:00:08.177454+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7512f0d6-6572-4454-b31b-3f05dd78cbd8/export</id>
    <title>7512f0d6-6572-4454-b31b-3f05dd78cbd8</title>
    <updated>2026-09-02T06:33:16.975092+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7512f0d6-6572-4454-b31b-3f05dd78cbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "seen", "source": "https://t.me/changelogWAF/6", "content": "New CVE Detections (2026-03-02)\n\nCVE-2025-52691: Arbitrary File Upload vulnerability in SmarterMail allowing attackers to upload malicious files, potentially leading to remote code execution.\n\nCVE-2026-23760: Authentication Bypass vulnerability in SmarterMail enabling unauthorized access to protected resources without valid credentials.\n\nCommand Injection \u2013 Nslookup: Detection for command injection via improper use of nslookup; this beta rule will be merged into the existing rule.", "creation_timestamp": "2026-08-28T18:00:04.738830Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7512f0d6-6572-4454-b31b-3f05dd78cbd8/export"/>
    <published>2026-08-28T18:00:04.738830+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/886f5e1e-6b4b-43b1-960d-db0f5b47b7f0/export</id>
    <title>886f5e1e-6b4b-43b1-960d-db0f5b47b7f0</title>
    <updated>2026-09-02T06:33:16.975167+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "886f5e1e-6b4b-43b1-960d-db0f5b47b7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:15:09.517167Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/886f5e1e-6b4b-43b1-960d-db0f5b47b7f0/export"/>
    <published>2026-08-27T10:15:09.517167+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ce9bc4b8-8dec-4f3f-84ad-db5236600594/export</id>
    <title>ce9bc4b8-8dec-4f3f-84ad-db5236600594</title>
    <updated>2026-09-02T06:33:16.975243+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ce9bc4b8-8dec-4f3f-84ad-db5236600594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "content": "", "creation_timestamp": "2026-08-26T10:15:15.992863Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ce9bc4b8-8dec-4f3f-84ad-db5236600594/export"/>
    <published>2026-08-26T10:15:15.992863+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0fce8f07-d995-4b3a-9a70-bdbabd0edd23/export</id>
    <title>0fce8f07-d995-4b3a-9a70-bdbabd0edd23</title>
    <updated>2026-09-02T06:33:16.975308+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0fce8f07-d995-4b3a-9a70-bdbabd0edd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "content": "", "creation_timestamp": "2026-08-14T10:15:08.115112Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0fce8f07-d995-4b3a-9a70-bdbabd0edd23/export"/>
    <published>2026-08-14T10:15:08.115112+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/78336f12-5aa1-4c9a-b14f-4f16a29d99ab/export</id>
    <title>78336f12-5aa1-4c9a-b14f-4f16a29d99ab</title>
    <updated>2026-09-02T06:33:16.975371+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "78336f12-5aa1-4c9a-b14f-4f16a29d99ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msb343n27e2o", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-23760: SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API\nCVSS 9.8 \u00b7 EPSS 96.3% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2026-23760\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-04T13:02:24.730581Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/78336f12-5aa1-4c9a-b14f-4f16a29d99ab/export"/>
    <published>2026-08-04T13:02:24.730581+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e5989e7d-2dc1-4b2d-8cd0-6911335f170c/export</id>
    <title>e5989e7d-2dc1-4b2d-8cd0-6911335f170c</title>
    <updated>2026-09-02T06:33:16.975445+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e5989e7d-2dc1-4b2d-8cd0-6911335f170c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:06.309027Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e5989e7d-2dc1-4b2d-8cd0-6911335f170c/export"/>
    <published>2026-08-01T10:15:06.309027+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9683694-cf92-442a-8750-dcfe63918f25/export</id>
    <title>d9683694-cf92-442a-8750-dcfe63918f25</title>
    <updated>2026-09-02T06:33:16.975506+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9683694-cf92-442a-8750-dcfe63918f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:15:06.430415Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9683694-cf92-442a-8750-dcfe63918f25/export"/>
    <published>2026-07-29T10:15:06.430415+00:00</published>
  </entry>
</feed>
