<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-14T02:54:23.683383+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1788e3af-cbe4-4545-ad95-cf566f13478c/export</id>
    <title>1788e3af-cbe4-4545-ad95-cf566f13478c</title>
    <updated>2026-08-14T02:54:23.710340+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1788e3af-cbe4-4545-ad95-cf566f13478c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28672", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvkyosmvz26", "content": "CVE-2026-28672 - apache ranger\nApache Ranger versions 0.6 to 2.8 are vulnerable to an issue where an attacker can execute arbitrary operating system commands by manipulating the username. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apacheranger #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-12T16:40:05.464112Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1788e3af-cbe4-4545-ad95-cf566f13478c/export"/>
    <published>2026-08-12T16:40:05.464112+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9fa5f040-63b4-4a3f-a95b-539aaae3bcf5/export</id>
    <title>9fa5f040-63b4-4a3f-a95b-539aaae3bcf5</title>
    <updated>2026-08-14T02:54:23.714653+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9fa5f040-63b4-4a3f-a95b-539aaae3bcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5if5ljlxwuhwj", "content": "CVE-2026-28672 - Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder\nCVE ID : CVE-2026-28672\n \n Published : Aug. 10, 2026, 10:26 a.m. | 3\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in a Command ('Command Injection') vulne...", "creation_timestamp": "2026-08-10T10:59:32.611834Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9fa5f040-63b4-4a3f-a95b-539aaae3bcf5/export"/>
    <published>2026-08-10T10:59:32.611834+00:00</published>
  </entry>
</feed>
