<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-06T15:39:13.765997+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ac03892e-2eb6-45b4-84c4-7645de32d2ee/export</id>
    <title>ac03892e-2eb6-45b4-84c4-7645de32d2ee</title>
    <updated>2026-05-06T15:39:13.771189+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ac03892e-2eb6-45b4-84c4-7645de32d2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://t.me/ctinow/249822", "content": "Apache fixes critical HTTP/2 double-free flaw CVE-2026-23918 enabling RCE\nhttps://ift.tt/UFkn06G", "creation_timestamp": "2026-05-06T11:09:03.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ac03892e-2eb6-45b4-84c4-7645de32d2ee/export"/>
    <published>2026-05-06T11:09:03+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/807bdc1f-0f55-44b0-85fb-eff8b076ae4d/export</id>
    <title>807bdc1f-0f55-44b0-85fb-eff8b076ae4d</title>
    <updated>2026-05-06T15:39:13.771092+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "807bdc1f-0f55-44b0-85fb-eff8b076ae4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "Telegram/Xvu4gDVXcxvV1IVouigrSoHUInOyP30DE259UYWqVgND-YrA", "content": "", "creation_timestamp": "2026-05-06T11:20:05.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/807bdc1f-0f55-44b0-85fb-eff8b076ae4d/export"/>
    <published>2026-05-06T11:20:05+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/23f16af1-56a3-4717-8d95-85e2b18bfa78/export</id>
    <title>23f16af1-56a3-4717-8d95-85e2b18bfa78</title>
    <updated>2026-05-06T15:39:13.770980+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "23f16af1-56a3-4717-8d95-85e2b18bfa78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3ml6m25ln7m2l", "content": "\u26a0\ufe0f  Faille de s\u00e9curit\u00e9 Apache2\n\nUne nouvelle vuln\u00e9rabilit\u00e9 importante, identifi\u00e9e sous la r\u00e9f\u00e9rence CVE-2026-23918, a \u00e9t\u00e9 patch\u00e9e dans la derni\u00e8re version d'Apache2.\n\nPlus d'infos par ici \ud83d\udd3d \n- www.it-connect.fr/faille-apach...\n\n#apache #linux #webserver #infosec", "creation_timestamp": "2026-05-06T11:31:14.740938Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/23f16af1-56a3-4717-8d95-85e2b18bfa78/export"/>
    <published>2026-05-06T11:31:14.740938+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bc1363ca-ac5b-4311-9a77-6a0ef0b48d4a/export</id>
    <title>bc1363ca-ac5b-4311-9a77-6a0ef0b48d4a</title>
    <updated>2026-05-06T15:39:13.770878+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bc1363ca-ac5b-4311-9a77-6a0ef0b48d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ml6nhmzv4m2x", "content": "Apache HTTP Server Fix Release for Critical HTTP/2 Double-Free Vulnerability CVE-2026-23918 +\u00a0Video\n\nIntroduction A critical security flaw has been identified and patched in the Apache HTTP Server, one of the most widely used web server platforms in the world. The vulnerability, tracked as\u2026", "creation_timestamp": "2026-05-06T11:56:39.551655Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bc1363ca-ac5b-4311-9a77-6a0ef0b48d4a/export"/>
    <published>2026-05-06T11:56:39.551655+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0c8b9e6a-2213-49a7-ab06-68941dc06418/export</id>
    <title>0c8b9e6a-2213-49a7-ab06-68941dc06418</title>
    <updated>2026-05-06T15:39:13.770772+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0c8b9e6a-2213-49a7-ab06-68941dc06418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3ml6ojqdvsl2x", "content": "Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-05-06T12:15:43.959368Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0c8b9e6a-2213-49a7-ab06-68941dc06418/export"/>
    <published>2026-05-06T12:15:43.959368+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/79270e53-b9f7-450b-8e69-021a5d2abc5e/export</id>
    <title>79270e53-b9f7-450b-8e69-021a5d2abc5e</title>
    <updated>2026-05-06T15:39:13.770668+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "79270e53-b9f7-450b-8e69-021a5d2abc5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/tychotithonus.infosec.exchange.ap.brid.gy/post/3ml6paounyt72", "content": "@Andres4NY Parent post updated, apparently CVE-2026-23918 was fixed much earlier?", "creation_timestamp": "2026-05-06T12:32:34.821340Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/79270e53-b9f7-450b-8e69-021a5d2abc5e/export"/>
    <published>2026-05-06T12:32:34.821340+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/51c5b0df-c039-490c-95bd-7fc7a819c6d1/export</id>
    <title>51c5b0df-c039-490c-95bd-7fc7a819c6d1</title>
    <updated>2026-05-06T15:39:13.770557+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "51c5b0df-c039-490c-95bd-7fc7a819c6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116527808438415469", "content": "\ud83d\udcf0 Critical RCE Flaw in Apache HTTP Server's HTTP/2 Module Patched\n\ud83d\udea8 CRITICAL APACHE FLAW: A double-free bug (CVE-2026-23918) in Apache HTTP Server's http2 module allows for DoS and potential RCE. A PoC exploit exists. Upgrade to version 2.4.67 immediately! #Apache #CyberSecurity #Vulnerability #RCE\n\ud83d\udd17 https://cyber.netsecops.io", "creation_timestamp": "2026-05-06T13:14:09.984538Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/51c5b0df-c039-490c-95bd-7fc7a819c6d1/export"/>
    <published>2026-05-06T13:14:09.984538+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a5a0efcf-d068-4aa9-a6f0-b0b6b67f14a5/export</id>
    <title>a5a0efcf-d068-4aa9-a6f0-b0b6b67f14a5</title>
    <updated>2026-05-06T15:39:13.770439+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a5a0efcf-d068-4aa9-a6f0-b0b6b67f14a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3ml6rsyjmiu2e", "content": "\ud83d\udea8 CRITICAL APACHE FLAW: A double-free bug (CVE-2026-23918) in Apache HTTP Server's http2 module allows for DoS and potential RCE. A PoC exploit exists. Upgrade to version 2.4.67 immediately! #Apache #CyberSecurity #Vulnerability #RCE", "creation_timestamp": "2026-05-06T13:14:36.342561Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a5a0efcf-d068-4aa9-a6f0-b0b6b67f14a5/export"/>
    <published>2026-05-06T13:14:36.342561+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/46df45e6-85d8-4e12-b41b-58a26ed1468e/export</id>
    <title>46df45e6-85d8-4e12-b41b-58a26ed1468e</title>
    <updated>2026-05-06T15:39:13.770290+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "46df45e6-85d8-4e12-b41b-58a26ed1468e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3ml6t6tdfu22z", "content": "\u26a0\ufe0f CVE-2026-23918: Double free in Apache HTTP Server 2.4.66 HTTP/2 may allow unauth RCE via crafted requests, risking full server compromise. Update to 2.4.67 or disable HTTP/2/restrict access. Query: web.headers=\"Server: Apache/2.4.66\"\u00a0\n\nThe platform: magnify.modat.io", "creation_timestamp": "2026-05-06T13:39:13.238213Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/46df45e6-85d8-4e12-b41b-58a26ed1468e/export"/>
    <published>2026-05-06T13:39:13.238213+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bbe8bb5b-c6e5-4282-a8c5-9ac03b747b10/export</id>
    <title>bbe8bb5b-c6e5-4282-a8c5-9ac03b747b10</title>
    <updated>2026-05-06T15:39:13.768843+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bbe8bb5b-c6e5-4282-a8c5-9ac03b747b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ml6vqyt6472y", "content": "Critical #Apache HTTP/2 flaw (CVE-2026-23918) enables DoS and potential RCE. Update to version 2.4.67 immediately to secure your servers. #CyberSecurity #Vulnerability #HTTP2 Link: thedailytechfeed.com/critical-apa...", "creation_timestamp": "2026-05-06T14:25:05.328348Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bbe8bb5b-c6e5-4282-a8c5-9ac03b747b10/export"/>
    <published>2026-05-06T14:25:05.328348+00:00</published>
  </entry>
</feed>
