<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-14T22:15:29.336876+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5a8b0c73-9090-45ae-9bef-c27ae84123af/export</id>
    <title>5a8b0c73-9090-45ae-9bef-c27ae84123af</title>
    <updated>2026-07-14T22:15:29.363450+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5a8b0c73-9090-45ae-9bef-c27ae84123af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn4bus4py2s", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver &amp;amp; Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data &amp;amp; trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:05:06.472746Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5a8b0c73-9090-45ae-9bef-c27ae84123af/export"/>
    <published>2026-07-14T21:05:06.472746+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2d37c9e1-b44a-4a01-a260-ad2d636631b4/export</id>
    <title>2d37c9e1-b44a-4a01-a260-ad2d636631b4</title>
    <updated>2026-07-14T22:15:29.366112+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2d37c9e1-b44a-4a01-a260-ad2d636631b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn45xkzmd26", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver &amp;amp; Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data &amp;amp; trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:02:55.014595Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2d37c9e1-b44a-4a01-a260-ad2d636631b4/export"/>
    <published>2026-07-14T21:02:55.014595+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aedbe625-2ee8-482e-b242-26a3e2d4b407/export</id>
    <title>aedbe625-2ee8-482e-b242-26a3e2d4b407</title>
    <updated>2026-07-14T22:15:29.366204+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aedbe625-2ee8-482e-b242-26a3e2d4b407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116918218287332576", "content": "SAP July 2026 patch day delivers CRITICAL fixes: NetWeaver (CVE-2026-44747, memory corruption), Approuter (CVE-2026-27690, HTTP smuggling), Commerce Cloud (CVE-2026-44761, hardcoded creds). Patch ASAP. https://radar.offseq.com/threat/sap-patches-critical-vulnerabilities-in-netweaver--aa75f703df9065e4 #OffSeq #SAP #Vuln #PatchTuesday", "creation_timestamp": "2026-07-14T12:00:31.386680Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aedbe625-2ee8-482e-b242-26a3e2d4b407/export"/>
    <published>2026-07-14T12:00:31.386680+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4fa38082-4a52-474b-b970-cbb25b2791e1/export</id>
    <title>4fa38082-4a52-474b-b970-cbb25b2791e1</title>
    <updated>2026-07-14T22:15:29.366272+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4fa38082-4a52-474b-b970-cbb25b2791e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjwjtly2o", "content": "Daily IT Security Digest \u2014 2026-07-14\nconfigurations as a mitigation.\nSources: https://infosec.exchange/@offseq/116916448461094889 \u00b7 https://radar.offseq.com/threat/cve-2026-27690\n\n## 2. CRITICAL \u2014 Chrome 150 Patches 27 Vulnerabilities Including 2 Use-After-Free Bugs\nGoogle Chrome 150 addresses 27", "creation_timestamp": "2026-07-14T05:03:14.627990Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4fa38082-4a52-474b-b970-cbb25b2791e1/export"/>
    <published>2026-07-14T05:03:14.627990+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6/export</id>
    <title>b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6</title>
    <updated>2026-07-14T22:15:29.366335+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjvxlep22", "content": "Daily IT Security Digest \u2014 2026-07-14\n# Daily IT Security Digest \u2014 2026-07-14\n\n## 1. CRITICAL \u2014 SAP Approuter HTTP Request Smuggling (CVE-2026-27690, CVSS 9.1)\nA critical HTTP request smuggling flaw was disclosed in SAP Approuter, scored 9.1 on the CVSS v3.1 scale. Remote attackers can exploit the", "creation_timestamp": "2026-07-14T05:03:14.144599Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6/export"/>
    <published>2026-07-14T05:03:14.144599+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bf472dfa-623c-4c7d-8ca3-9bad64449c47/export</id>
    <title>bf472dfa-623c-4c7d-8ca3-9bad64449c47</title>
    <updated>2026-07-14T22:15:29.366399+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bf472dfa-623c-4c7d-8ca3-9bad64449c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqlepceb3g2f", "content": "CVE-2026-27690: SAP Approuter faces CRITICAL HTTP request smuggling (CVSS 9.1). Unauthenticated attackers can expose user data &amp;amp; disrupt services. No patch \u2014 monitor SAP for updates. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #...", "creation_timestamp": "2026-07-14T04:30:30.982493Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bf472dfa-623c-4c7d-8ca3-9bad64449c47/export"/>
    <published>2026-07-14T04:30:30.982493+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb/export</id>
    <title>bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb</title>
    <updated>2026-07-14T22:15:29.366461+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116916448461094889", "content": "CVE-2026-27690: CRITICAL HTTP request smuggling flaw in SAP Approuter (CVSS 9.1). Remote attackers can cause desynchronization, exposing user responses &amp;amp; disrupting availability. No patch yet \u2014 monitor SAP advisories. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #InfoSec", "creation_timestamp": "2026-07-14T04:30:25.758605Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb/export"/>
    <published>2026-07-14T04:30:25.758605+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/96eef161-0088-4b78-8ddf-59233cb5646f/export</id>
    <title>96eef161-0088-4b78-8ddf-59233cb5646f</title>
    <updated>2026-07-14T22:15:29.366526+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "96eef161-0088-4b78-8ddf-59233cb5646f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mql7p4eot62k", "content": "\ud83d\udd34 CVE-2026-27690 - Critical (9.1)\n\nDue to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker coul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27690/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T03:00:52.862961Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/96eef161-0088-4b78-8ddf-59233cb5646f/export"/>
    <published>2026-07-14T03:00:52.862961+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3744940e-934d-489e-bdb1-15067bd813ea/export</id>
    <title>3744940e-934d-489e-bdb1-15067bd813ea</title>
    <updated>2026-07-14T22:15:29.366594+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3744940e-934d-489e-bdb1-15067bd813ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql3r2jehe26", "content": "CVE-2026-27690 - HTTP Request Smuggling in SAP Approuter\nCVE ID : CVE-2026-27690\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafte...", "creation_timestamp": "2026-07-14T01:50:22.725463Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3744940e-934d-489e-bdb1-15067bd813ea/export"/>
    <published>2026-07-14T01:50:22.725463+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/88011d0a-405f-4e76-9e3d-97cc060b6fc2/export</id>
    <title>88011d0a-405f-4e76-9e3d-97cc060b6fc2</title>
    <updated>2026-07-14T22:15:29.366657+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "88011d0a-405f-4e76-9e3d-97cc060b6fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqkymet66f2b", "content": "CVE-2026-27690 - sap approuter\nAn attacker can send a special request to SAP Approuter, potentially exposing user responses and making the system unavailable. This is a serious issue because it affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sapapprouter #sapse #CVE #infosec", "creation_timestamp": "2026-07-14T00:54:07.134760Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/88011d0a-405f-4e76-9e3d-97cc060b6fc2/export"/>
    <published>2026-07-14T00:54:07.134760+00:00</published>
  </entry>
</feed>
