<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-31T04:52:04.588328+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/00575808-a1ab-4cb0-a910-2fab4443a797/export</id>
    <title>00575808-a1ab-4cb0-a910-2fab4443a797</title>
    <updated>2026-05-31T04:52:04.603239+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "00575808-a1ab-4cb0-a910-2fab4443a797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-18)", "content": "", "creation_timestamp": "2026-05-18T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/00575808-a1ab-4cb0-a910-2fab4443a797/export"/>
    <published>2026-05-18T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9aae0f0e-bd17-4418-aa17-d95362ac3686/export</id>
    <title>9aae0f0e-bd17-4418-aa17-d95362ac3686</title>
    <updated>2026-05-31T04:52:04.603138+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9aae0f0e-bd17-4418-aa17-d95362ac3686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-19)", "content": "", "creation_timestamp": "2026-05-19T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9aae0f0e-bd17-4418-aa17-d95362ac3686/export"/>
    <published>2026-05-19T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2297a9ff-e188-4b48-8a35-8decb065a4c5/export</id>
    <title>2297a9ff-e188-4b48-8a35-8decb065a4c5</title>
    <updated>2026-05-31T04:52:04.602971+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2297a9ff-e188-4b48-8a35-8decb065a4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/citrix_netscaler_cve_2026_3055.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"watchTowr\", \"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module scans for a vulnerability that allows a remote, unauthenticated attacker to leak memory from a\\n          target Citrix ADC server configured as a SAML IdP. The leaked memory is then scanned for session cookies\\n          which can be hijacked if found.\", \"disclosure_date\": \"2026-03-23\", \"fullname\": \"auxiliary/scanner/http/citrix_netscaler_cve_2026_3055\", \"is_install_path\": true, \"mod_time\": \"2026-05-20 10:03:51 +0000\", \"name\": \"Citrix ADC (NetScaler) CVE-2026-3055 Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/citrix_netscaler_cve_2026_3055.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/citrix_netscaler_cve_2026_3055\", \"references\": [\"CVE-2026-3055\", \"URL-https://labs.watchtowr.com/the-sequels-are-never-as-good-but-were-still-in-pain-citrix-netscaler-cve-2026-3055-memory-overread/\", \"URL-https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-05-20T17:09:03.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2297a9ff-e188-4b48-8a35-8decb065a4c5/export"/>
    <published>2026-05-20T17:09:03+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3c182e1e-e3aa-459e-959b-93c5a4ec0db4/export</id>
    <title>3c182e1e-e3aa-459e-959b-93c5a4ec0db4</title>
    <updated>2026-05-31T04:52:04.602795+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3c182e1e-e3aa-459e-959b-93c5a4ec0db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "published-proof-of-concept", "source": "Telegram/8XMYNKwrAfZdRqR9ubtjXzgzOw6F5g1aYGu8o-Ioo35SIYg", "content": "", "creation_timestamp": "2026-05-20T23:00:11.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3c182e1e-e3aa-459e-959b-93c5a4ec0db4/export"/>
    <published>2026-05-20T23:00:11+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08f6c3bd-5529-443b-902e-72184535e45e/export</id>
    <title>08f6c3bd-5529-443b-902e-72184535e45e</title>
    <updated>2026-05-31T04:52:04.602608+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08f6c3bd-5529-443b-902e-72184535e45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-21)", "content": "", "creation_timestamp": "2026-05-21T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08f6c3bd-5529-443b-902e-72184535e45e/export"/>
    <published>2026-05-21T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8c4d3216-2845-4746-8e45-713a54c45db8/export</id>
    <title>8c4d3216-2845-4746-8e45-713a54c45db8</title>
    <updated>2026-05-31T04:52:04.602417+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8c4d3216-2845-4746-8e45-713a54c45db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-24)", "content": "", "creation_timestamp": "2026-05-24T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8c4d3216-2845-4746-8e45-713a54c45db8/export"/>
    <published>2026-05-24T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/db4ff031-df37-4d2f-8433-9cc51cde4e53/export</id>
    <title>db4ff031-df37-4d2f-8433-9cc51cde4e53</title>
    <updated>2026-05-31T04:52:04.602223+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "db4ff031-df37-4d2f-8433-9cc51cde4e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-25)", "content": "", "creation_timestamp": "2026-05-25T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/db4ff031-df37-4d2f-8433-9cc51cde4e53/export"/>
    <published>2026-05-25T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/394c46f8-e127-463e-8e43-756f774bf96f/export</id>
    <title>394c46f8-e127-463e-8e43-756f774bf96f</title>
    <updated>2026-05-31T04:52:04.602005+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "394c46f8-e127-463e-8e43-756f774bf96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/394c46f8-e127-463e-8e43-756f774bf96f/export"/>
    <published>2026-05-26T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1f8c4523-416b-4623-b6c7-69ac9075b083/export</id>
    <title>1f8c4523-416b-4623-b6c7-69ac9075b083</title>
    <updated>2026-05-31T04:52:04.601757+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1f8c4523-416b-4623-b6c7-69ac9075b083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1f8c4523-416b-4623-b6c7-69ac9075b083/export"/>
    <published>2026-05-28T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5ca0ba6e-36fb-47e0-9b49-5cffecaeca8b/export</id>
    <title>5ca0ba6e-36fb-47e0-9b49-5cffecaeca8b</title>
    <updated>2026-05-31T04:52:04.599773+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5ca0ba6e-36fb-47e0-9b49-5cffecaeca8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5ca0ba6e-36fb-47e0-9b49-5cffecaeca8b/export"/>
    <published>2026-05-29T00:00:00+00:00</published>
  </entry>
</feed>
