<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-13T21:49:12.570129+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f098c920-e675-44ab-8a89-6accb2ea0b93/export</id>
    <title>f098c920-e675-44ab-8a89-6accb2ea0b93</title>
    <updated>2026-08-13T21:49:12.596458+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f098c920-e675-44ab-8a89-6accb2ea0b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4879", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m", "content": "\ud83d\udd17 CVE : CVE-2025-9486, CVE-2026-15216, CVE-2026-15217, CVE-2026-15423, CVE-2026-16494, CVE-2026-16627, CVE-2026-18244, CVE-2026-18433, CVE-2026-19228, CVE-2026-4879, CVE-2026-6821, CVE-2026-7427, CVE-2026-8667", "creation_timestamp": "2026-08-13T14:05:08.242447Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f098c920-e675-44ab-8a89-6accb2ea0b93/export"/>
    <published>2026-08-13T14:05:08.242447+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5e3c0ee4-6382-479d-b6f1-c815c7e67194/export</id>
    <title>5e3c0ee4-6382-479d-b6f1-c815c7e67194</title>
    <updated>2026-08-13T21:49:12.598154+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "5e3c0ee4-6382-479d-b6f1-c815c7e67194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48791", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-48791", "content": "", "creation_timestamp": "2026-08-13T04:15:10.401335Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5e3c0ee4-6382-479d-b6f1-c815c7e67194/export"/>
    <published>2026-08-13T04:15:10.401335+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/be9c58ae-a0eb-430b-927b-6d160dfd2a6b/export</id>
    <title>be9c58ae-a0eb-430b-927b-6d160dfd2a6b</title>
    <updated>2026-08-13T21:49:12.599647+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "be9c58ae-a0eb-430b-927b-6d160dfd2a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48795", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpy2lqb3e2s", "content": "CVE-2026-48795 - Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparser\nCVE ID : CVE-2026-48795\n \n Published : July 15, 2026, 10:16 p.m. | 17\u00a0minutes ago\n \n Description : AdonisJS is a TypeScript-first web framework. From 10.1.3 until 10.1.5 and 11.0.3, AdonisJS @adonisjs/b...", "creation_timestamp": "2026-07-16T00:27:26.328942Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/be9c58ae-a0eb-430b-927b-6d160dfd2a6b/export"/>
    <published>2026-07-16T00:27:26.328942+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2c296f9b-24a2-45e9-8627-7c4a1db323d2/export</id>
    <title>2c296f9b-24a2-45e9-8627-7c4a1db323d2</title>
    <updated>2026-08-13T21:49:12.599800+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "2c296f9b-24a2-45e9-8627-7c4a1db323d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48791", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-qqw8-7c2r-jxch", "content": "", "creation_timestamp": "2026-07-01T02:50:25.995467Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2c296f9b-24a2-45e9-8627-7c4a1db323d2/export"/>
    <published>2026-07-01T02:50:25.995467+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/59ca5e9b-b185-4023-9e4e-474ee20e5ed9/export</id>
    <title>59ca5e9b-b185-4023-9e4e-474ee20e5ed9</title>
    <updated>2026-08-13T21:49:12.599914+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "59ca5e9b-b185-4023-9e4e-474ee20e5ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48796", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-85jm-cwp2-mvpv", "content": "", "creation_timestamp": "2026-07-01T02:50:16.405948Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/59ca5e9b-b185-4023-9e4e-474ee20e5ed9/export"/>
    <published>2026-07-01T02:50:16.405948+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/327b419a-9eef-49fe-afb7-3493c13d311a/export</id>
    <title>327b419a-9eef-49fe-afb7-3493c13d311a</title>
    <updated>2026-08-13T21:49:12.600017+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "327b419a-9eef-49fe-afb7-3493c13d311a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48790", "type": "published-proof-of-concept", "source": "https://github.com/tursodatabase/turso-cli/security/advisories/GHSA-57f6-pvx8-hwj6", "content": "", "creation_timestamp": "2026-06-26T22:35:34.832149Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/327b419a-9eef-49fe-afb7-3493c13d311a/export"/>
    <published>2026-06-26T22:35:34.832149+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/851c6a2b-24ba-4181-8db7-e5274f37f0dd/export</id>
    <title>851c6a2b-24ba-4181-8db7-e5274f37f0dd</title>
    <updated>2026-08-13T21:49:12.600121+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "851c6a2b-24ba-4181-8db7-e5274f37f0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48794", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mooekjem2o2z", "content": "CVE-2026-48794 - Authelia has an Edge Case Access Control Rule Mismatch\nCVE ID : CVE-2026-48794\n \n Published : June 19, 2026, 8:23 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Authelia is an open-source authentication and authorization server providing two-factor authenticat...", "creation_timestamp": "2026-06-19T22:15:22.766809Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/851c6a2b-24ba-4181-8db7-e5274f37f0dd/export"/>
    <published>2026-06-19T22:15:22.766809+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9e952a95-cd85-4ce5-86a4-1d640f06535a/export</id>
    <title>9e952a95-cd85-4ce5-86a4-1d640f06535a</title>
    <updated>2026-08-13T21:49:12.600231+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9e952a95-cd85-4ce5-86a4-1d640f06535a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48797", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mohf6t5rnw25", "content": "CVE-2026-48797 - Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication\nCVE ID : CVE-2026-48797\n \n Published : June 16, 2026, 11:35 p.m. | 2\u00a0hours, 7\u00a0minutes ago\n \n Description : Backpropagate is a Python library for fine-tuning large language ...", "creation_timestamp": "2026-06-17T03:38:06.640520Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9e952a95-cd85-4ce5-86a4-1d640f06535a/export"/>
    <published>2026-06-17T03:38:06.640520+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9dbcccec-3496-4ded-97b8-2f3037a4b327/export</id>
    <title>9dbcccec-3496-4ded-97b8-2f3037a4b327</title>
    <updated>2026-08-13T21:49:12.600331+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9dbcccec-3496-4ded-97b8-2f3037a4b327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48797", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mogyzyan552s", "content": "CRITICAL vuln: mcp-tool-shop-org backpropagate &amp;lt;1.2.0 exposes Reflex UI with no real auth \u2014 attackers can control training &amp;amp; access data. Upgrade to 1.2.0 now! https://radar.offseq.com/threat/cve-2026-48797-cwe-358-improperly-implemented-secu-63bfdfdd #OffSeq #Python #Security", "creation_timestamp": "2026-06-17T00:00:39.164771Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9dbcccec-3496-4ded-97b8-2f3037a4b327/export"/>
    <published>2026-06-17T00:00:39.164771+00:00</published>
  </entry>
</feed>
