<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T21:56:22.321815+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bb306a61-68e7-4720-bb24-7702f40b9961/export</id>
    <title>bb306a61-68e7-4720-bb24-7702f40b9961</title>
    <updated>2026-09-14T21:56:22.352463+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bb306a61-68e7-4720-bb24-7702f40b9961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55064", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/190567", "content": "How an \u201cout of scope\u201d edge case in Vikunja\u2019s previous privilege-escalation patch became a new authorization vulnerability three months\u2026Continue reading on Medium \u00bb (https://medium.com/@Infosec-Arsenal-Diaries/vikunja-cve-2026-55064-the-vulnerability-hidden-in-the-previous-security-fix-3f84f84c35bc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:25.403622Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bb306a61-68e7-4720-bb24-7702f40b9961/export"/>
    <published>2026-09-02T01:00:25.403622+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2f14abda-e09e-4d5a-8cd8-027f288c7fb3/export</id>
    <title>2f14abda-e09e-4d5a-8cd8-027f288c7fb3</title>
    <updated>2026-09-14T21:56:22.355600+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2f14abda-e09e-4d5a-8cd8-027f288c7fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55064", "type": "seen", "source": "https://t.me/hacking_Attack/190565", "content": "Vikunja CVE-2026\u201355064: The Vulnerability Hidden in the Previous Security Fix\nhttps://medium.com/@Infosec-Arsenal-Diaries/vikunja-cve-2026-55064-the-vulnerability-hidden-in-the-previous-security-fix-3f84f84c35bc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:25.028829Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2f14abda-e09e-4d5a-8cd8-027f288c7fb3/export"/>
    <published>2026-09-02T01:00:25.028829+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc2c049a-e3fc-45cc-bd53-21f3fe69c67a/export</id>
    <title>dc2c049a-e3fc-45cc-bd53-21f3fe69c67a</title>
    <updated>2026-09-14T21:56:22.355901+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc2c049a-e3fc-45cc-bd53-21f3fe69c67a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55064", "type": "seen", "source": "https://t.me/hacking_Attack/190565", "content": "Vikunja CVE-2026\u201355064: The Vulnerability Hidden in the Previous Security Fix\nhttps://medium.com/@Infosec-Arsenal-Diaries/vikunja-cve-2026-55064-the-vulnerability-hidden-in-the-previous-security-fix-3f84f84c35bc?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:06.156137Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc2c049a-e3fc-45cc-bd53-21f3fe69c67a/export"/>
    <published>2026-09-01T20:00:06.156137+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e49d98fb-1f9b-4f44-8fc8-a8f9d49fde8c/export</id>
    <title>e49d98fb-1f9b-4f44-8fc8-a8f9d49fde8c</title>
    <updated>2026-09-14T21:56:22.356025+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e49d98fb-1f9b-4f44-8fc8-a8f9d49fde8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55064", "type": "seen", "source": "https://t.me/hacking_Attack/190567", "content": "How an \u201cout of scope\u201d edge case in Vikunja\u2019s previous privilege-escalation patch became a new authorization vulnerability three months\u2026Continue reading on Medium \u00bb (https://medium.com/@Infosec-Arsenal-Diaries/vikunja-cve-2026-55064-the-vulnerability-hidden-in-the-previous-security-fix-3f84f84c35bc?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:05.867381Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e49d98fb-1f9b-4f44-8fc8-a8f9d49fde8c/export"/>
    <published>2026-09-01T20:00:05.867381+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a24ecdbb-d572-4644-b3c7-57e55c829c62/export</id>
    <title>a24ecdbb-d572-4644-b3c7-57e55c829c62</title>
    <updated>2026-09-14T21:56:22.356172+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a24ecdbb-d572-4644-b3c7-57e55c829c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55065", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucnwabjtq2l", "content": "\ud83d\udfe0 CVE-2026-55065 - High (8.1)\n\nVikunja is an open-source self-hosted task management platform. From 0.24.6 until 2.4.0, DELETE /...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55065/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T15:02:13.668341Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a24ecdbb-d572-4644-b3c7-57e55c829c62/export"/>
    <published>2026-08-30T15:02:13.668341+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cd7ad2a9-a359-4704-9301-ee494b3bc753/export</id>
    <title>cd7ad2a9-a359-4704-9301-ee494b3bc753</title>
    <updated>2026-09-14T21:56:22.356307+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cd7ad2a9-a359-4704-9301-ee494b3bc753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55068", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mua2k3cq6i2e", "content": "CVE-2026-55068 - github.com/free5gc/free5gc\nVersions of free5GC up to 4.2.2 let anyone with access to the internal API add false network function records without proper validation. These bogus entries are\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#free5gc #Golang #CVE #infosec", "creation_timestamp": "2026-08-29T14:10:04.046140Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cd7ad2a9-a359-4704-9301-ee494b3bc753/export"/>
    <published>2026-08-29T14:10:04.046140+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/34a24196-b4b6-4ae9-8bbf-d0e51faa2191/export</id>
    <title>34a24196-b4b6-4ae9-8bbf-d0e51faa2191</title>
    <updated>2026-09-14T21:56:22.356410+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "34a24196-b4b6-4ae9-8bbf-d0e51faa2191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55068", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6er5jzmv2c", "content": "\ud83d\udea8 CVE-2026-55068 \u2014 CVSS 9.3 CRITICAL\n\nfree5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFIn...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55068\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T22:07:40.035956Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/34a24196-b4b6-4ae9-8bbf-d0e51faa2191/export"/>
    <published>2026-08-28T22:07:40.035956+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e9d9f350-b8c8-42fe-b796-b7a58424cba5/export</id>
    <title>e9d9f350-b8c8-42fe-b796-b7a58424cba5</title>
    <updated>2026-09-14T21:56:22.356507+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "e9d9f350-b8c8-42fe-b796-b7a58424cba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55065", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-gg93-x632-9ccv", "content": "", "creation_timestamp": "2026-08-28T18:35:30.376391Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e9d9f350-b8c8-42fe-b796-b7a58424cba5/export"/>
    <published>2026-08-28T18:35:30.376391+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5a470ad8-beee-4a5b-bd01-9ad6caa15d4a/export</id>
    <title>5a470ad8-beee-4a5b-bd01-9ad6caa15d4a</title>
    <updated>2026-09-14T21:56:22.357563+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "5a470ad8-beee-4a5b-bd01-9ad6caa15d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55066", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-5pg6-m483-7vrg", "content": "", "creation_timestamp": "2026-08-28T18:35:28.228748Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5a470ad8-beee-4a5b-bd01-9ad6caa15d4a/export"/>
    <published>2026-08-28T18:35:28.228748+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b722e1f7-c5ba-4d3e-b27a-5b750b2e85d9/export</id>
    <title>b722e1f7-c5ba-4d3e-b27a-5b750b2e85d9</title>
    <updated>2026-09-14T21:56:22.357692+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "b722e1f7-c5ba-4d3e-b27a-5b750b2e85d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55067", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-569v-q83c-3j3g", "content": "", "creation_timestamp": "2026-08-28T18:35:26.093534Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b722e1f7-c5ba-4d3e-b27a-5b750b2e85d9/export"/>
    <published>2026-08-28T18:35:26.093534+00:00</published>
  </entry>
</feed>
