https://vulnerability.circl.lu/sightings/feed 2026-09-14T21:25:08.920007+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/edc228e5-ba66-44ac-aba0-ede599e5299a/export 2026-09-14T21:25:08.946452+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "edc228e5-ba66-44ac-aba0-ede599e5299a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38961", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvc6gc5hhu2c", "content": "CVE-2026-38961: Stored XSS in Netgate pfSense RSS Widget (versions 26.03, 25.11.1, CE 2.8.1). Malicious feed titles execute JS for any authenticated user viewing the dashboard. CVSS: N/A. Unpatched\u2014restrict RSS access now. Details: https://www.valtersit.com/cve/CVE-2026-38961/ #C", "creation_timestamp": "2026-09-12T03:50:03.804634Z"} 2026-09-12T03:50:03.804634+00:00 https://vulnerability.circl.lu/sighting/f6b01da9-1182-43df-aec0-336de01417aa/export 2026-09-14T21:25:08.947857+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f6b01da9-1182-43df-aec0-336de01417aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38961", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117255989998252891", "content": "CVE-2026-38961: Stored XSS in Netgate pfSense RSS Widget (versions 26.03, 25.11.1, CE 2.8.1). Malicious feed titles execute JS for any authenticated user viewing the dashboard. CVSS: N/A. Unpatched\u2014restrict RSS access now. Details: https://www.valtersit.com/cve/CVE-2026-38961/ #C", "creation_timestamp": "2026-09-12T03:40:20.256488Z"} 2026-09-12T03:40:20.256488+00:00 https://vulnerability.circl.lu/sighting/af539433-8ccc-44bc-a557-3f3836d43c8f/export 2026-09-14T21:25:08.947992+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "af539433-8ccc-44bc-a557-3f3836d43c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38968", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2qksm6k2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-38968 \u0432 ntopng: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0445 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0435\u0441\u0441\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/5EC0E755-5446-4524-929E-6DBDFAF1712B", "creation_timestamp": "2026-07-03T17:23:01.265090Z"} 2026-07-03T17:23:01.265090+00:00 https://vulnerability.circl.lu/sighting/0cfeb1cf-d54f-4a4d-a939-5377730c0276/export 2026-09-14T21:25:08.948095+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0cfeb1cf-d54f-4a4d-a939-5377730c0276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38969", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2kwpfdy2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-38969 \u0432 Ruby WEBrick: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1126B2FB-3860-47B8-B98F-E21005670769", "creation_timestamp": "2026-07-03T17:19:50.254916Z"} 2026-07-03T17:19:50.254916+00:00 https://vulnerability.circl.lu/sighting/ca2e7017-8d88-4d01-9595-118b5ca0523f/export 2026-09-14T21:25:08.948201+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ca2e7017-8d88-4d01-9595-118b5ca0523f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38967", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mngx3fkdes2p", "content": "\ud83d\udd34 CVE-2026-38967 - Critical (9.8)\n\nCrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated respo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-38967/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-04T06:00:27.906030Z"} 2026-06-04T06:00:27.906030+00:00