<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-28T18:40:43.919864+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f8723828-d128-42a9-b0b2-d984d7b22620/export</id>
    <title>f8723828-d128-42a9-b0b2-d984d7b22620</title>
    <updated>2026-06-28T18:40:43.944626+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f8723828-d128-42a9-b0b2-d984d7b22620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5621", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3misokpgmin2i", "content": "", "creation_timestamp": "2026-04-06T06:53:56.082475Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f8723828-d128-42a9-b0b2-d984d7b22620/export"/>
    <published>2026-04-06T06:53:56.082475+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/06fb28ee-1e8e-4833-b9e8-ce1eeabbc51c/export</id>
    <title>06fb28ee-1e8e-4833-b9e8-ce1eeabbc51c</title>
    <updated>2026-06-28T18:40:43.944511+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "06fb28ee-1e8e-4833-b9e8-ce1eeabbc51c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3monvpu3zau2k", "content": "CVE-2026-56211 - Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames\nCVE ID : CVE-2026-56211\n \n Published : June 19, 2026, 4:28 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : A remote code execution vulnerability was found in li...", "creation_timestamp": "2026-06-19T17:49:55.749150Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/06fb28ee-1e8e-4833-b9e8-ce1eeabbc51c/export"/>
    <published>2026-06-19T17:49:55.749150+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/573296a1-41f9-4632-9097-23e2c88d3c3d/export</id>
    <title>573296a1-41f9-4632-9097-23e2c88d3c3d</title>
    <updated>2026-06-28T18:40:43.944405+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "573296a1-41f9-4632-9097-23e2c88d3c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3monvskb57d2x", "content": "CVE-2026-56210 - Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id\nCVE ID : CVE-2026-56210\n \n Published : June 19, 2026, 4:28 p.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : A heap-buffer-overflow read vulnerability was found in libaom, the...", "creation_timestamp": "2026-06-19T17:51:26.077153Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/573296a1-41f9-4632-9097-23e2c88d3c3d/export"/>
    <published>2026-06-19T17:51:26.077153+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c97638b9-0ceb-48ab-9286-cc95035fea25/export</id>
    <title>c97638b9-0ceb-48ab-9286-cc95035fea25</title>
    <updated>2026-06-28T18:40:43.944300+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c97638b9-0ceb-48ab-9286-cc95035fea25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mooqs3vvsg2q", "content": "CVE-2026-56212 - Capgo - Improper 2FA Enforcement Logic via Team Security Settings\nCVE ID : CVE-2026-56212\n \n Published : June 20, 2026, 12:14 a.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : Capgo before 12.128.2 contains an authentication logic flaw: a user with permission to ...", "creation_timestamp": "2026-06-20T01:54:21.998516Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c97638b9-0ceb-48ab-9286-cc95035fea25/export"/>
    <published>2026-06-20T01:54:21.998516+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5752ec0c-1efa-459f-a392-5a9fe8806b65/export</id>
    <title>5752ec0c-1efa-459f-a392-5a9fe8806b65</title>
    <updated>2026-06-28T18:40:43.944197+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5752ec0c-1efa-459f-a392-5a9fe8806b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moor32cshz2e", "content": "CVE-2026-56214 - Capgo - Unauthenticated Organization Enumeration and Billing Status Disclosure via Supabase RPC\nCVE ID : CVE-2026-56214\n \n Published : June 20, 2026, 12:14 a.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : Capgo before 12.128.2 contains an information disclosure ...", "creation_timestamp": "2026-06-20T01:59:22.502666Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5752ec0c-1efa-459f-a392-5a9fe8806b65/export"/>
    <published>2026-06-20T01:59:22.502666+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/40d3aa51-5c64-4f1b-ad27-4b083a83b96b/export</id>
    <title>40d3aa51-5c64-4f1b-ad27-4b083a83b96b</title>
    <updated>2026-06-28T18:40:43.944083+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "40d3aa51-5c64-4f1b-ad27-4b083a83b96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56216", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moordyr6of2v", "content": "CVE-2026-56216 - Capgo - Scope Escalation via API Key Creation in /functions/v1/apikey\nCVE ID : CVE-2026-56216\n \n Published : June 20, 2026, 12:14 a.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : Capgo before 12.128.2 contains a scope escalation vulnerability in the POST /functi...", "creation_timestamp": "2026-06-20T02:04:22.813274Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/40d3aa51-5c64-4f1b-ad27-4b083a83b96b/export"/>
    <published>2026-06-20T02:04:22.813274+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f2cce6eb-ffad-4435-8817-35c61690a7c8/export</id>
    <title>f2cce6eb-ffad-4435-8817-35c61690a7c8</title>
    <updated>2026-06-28T18:40:43.943906+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f2cce6eb-ffad-4435-8817-35c61690a7c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56215", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moormx6w6z2g", "content": "CVE-2026-56215 - Capgo - Account Merge via Poisoned public.users.email in SSO Provisioning\nCVE ID : CVE-2026-56215\n \n Published : June 20, 2026, 12:14 a.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : Capgo before 12.128.12 allows authenticated users to modify their mutable publi...", "creation_timestamp": "2026-06-20T02:09:23.241418Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f2cce6eb-ffad-4435-8817-35c61690a7c8/export"/>
    <published>2026-06-20T02:09:23.241418+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ef62461d-364e-4ebd-ae8a-1fb1c499e56d/export</id>
    <title>ef62461d-364e-4ebd-ae8a-1fb1c499e56d</title>
    <updated>2026-06-28T18:40:43.940578+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ef62461d-364e-4ebd-ae8a-1fb1c499e56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moorvvnelh2e", "content": "CVE-2026-56213 - Capgo - Unauthenticated Cross-Tenant Metrics Poisoning via upsert_version_meta RPC\nCVE ID : CVE-2026-56213\n \n Published : June 20, 2026, 12:14 a.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : Capgo before 12.128.2 contains an authorization bypass vulnerability i...", "creation_timestamp": "2026-06-20T02:14:23.579444Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ef62461d-364e-4ebd-ae8a-1fb1c499e56d/export"/>
    <published>2026-06-20T02:14:23.579444+00:00</published>
  </entry>
</feed>
