<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T16:53:19.540278+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1c3ffb69-a939-4c27-be58-2e6040d64833/export</id>
    <title>1c3ffb69-a939-4c27-be58-2e6040d64833</title>
    <updated>2026-09-17T16:53:19.565016+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1c3ffb69-a939-4c27-be58-2e6040d64833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57811", "type": "published-proof-of-concept", "source": "Telegram/8lu5p45PI44YRRXMh7HnT0tBVzBkG3l5gI4P9wsDvP656g", "content": "", "creation_timestamp": "2026-09-14T00:00:29.871806Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1c3ffb69-a939-4c27-be58-2e6040d64833/export"/>
    <published>2026-09-14T00:00:29.871806+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/75317c80-d1b6-47f3-8587-7726b14fe583/export</id>
    <title>75317c80-d1b6-47f3-8587-7726b14fe583</title>
    <updated>2026-09-17T16:53:19.568522+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "75317c80-d1b6-47f3-8587-7726b14fe583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57811", "type": "seen", "source": "Telegram/8lu5p45PI44YRRXMh7HnT0tBVzBkG3l5gI4P9wsDvP656g", "content": "", "creation_timestamp": "2026-09-13T10:00:05.653329Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/75317c80-d1b6-47f3-8587-7726b14fe583/export"/>
    <published>2026-09-13T10:00:05.653329+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1d7d4e7c-95a4-4270-8d5b-a0526d6cef76/export</id>
    <title>1d7d4e7c-95a4-4270-8d5b-a0526d6cef76</title>
    <updated>2026-09-17T16:53:19.568667+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1d7d4e7c-95a4-4270-8d5b-a0526d6cef76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57811", "type": "published-proof-of-concept", "source": "Telegram/6bqIOgjpwAPexdBX5XL0x52NeQvdKXVvFkvo5oP_GnoYujk", "content": "", "creation_timestamp": "2026-09-10T00:00:23.870113Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1d7d4e7c-95a4-4270-8d5b-a0526d6cef76/export"/>
    <published>2026-09-10T00:00:23.870113+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c718e053-1222-469f-a94c-6fe15f219cb2/export</id>
    <title>c718e053-1222-469f-a94c-6fe15f219cb2</title>
    <updated>2026-09-17T16:53:19.568768+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c718e053-1222-469f-a94c-6fe15f219cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57811", "type": "seen", "source": "Telegram/6bqIOgjpwAPexdBX5XL0x52NeQvdKXVvFkvo5oP_GnoYujk", "content": "", "creation_timestamp": "2026-09-09T04:00:36.860681Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c718e053-1222-469f-a94c-6fe15f219cb2/export"/>
    <published>2026-09-09T04:00:36.860681+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/76c42ed6-67c6-43f3-9b03-c0ea33329230/export</id>
    <title>76c42ed6-67c6-43f3-9b03-c0ea33329230</title>
    <updated>2026-09-17T16:53:19.568865+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "76c42ed6-67c6-43f3-9b03-c0ea33329230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57818", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msj5joorvl2b", "content": "\ud83d\udccc CVE-2026-57818 - A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting ... https://www.cyberhub.blog/cves/CVE-2026-57818", "creation_timestamp": "2026-08-07T18:07:06.739666Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/76c42ed6-67c6-43f3-9b03-c0ea33329230/export"/>
    <published>2026-08-07T18:07:06.739666+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8da140c1-49fa-4dbb-b50f-134909eef21f/export</id>
    <title>8da140c1-49fa-4dbb-b50f-134909eef21f</title>
    <updated>2026-09-17T16:53:19.568965+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8da140c1-49fa-4dbb-b50f-134909eef21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57818", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/dap3dxstobqir", "content": "CVE-2026-57818: Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider", "creation_timestamp": "2026-08-06T20:59:57.857935Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8da140c1-49fa-4dbb-b50f-134909eef21f/export"/>
    <published>2026-08-06T20:59:57.857935+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/57448fc8-d12e-4df8-acad-653e408d2803/export</id>
    <title>57448fc8-d12e-4df8-acad-653e408d2803</title>
    <updated>2026-09-17T16:53:19.569065+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "57448fc8-d12e-4df8-acad-653e408d2803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57817", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/h7sikdbbfri6u", "content": "CVE-2026-57817: Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow", "creation_timestamp": "2026-08-06T20:51:57.558881Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/57448fc8-d12e-4df8-acad-653e408d2803/export"/>
    <published>2026-08-06T20:51:57.558881+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b4a56ae0-4faa-4c8a-aa8d-339bb6e3cd70/export</id>
    <title>b4a56ae0-4faa-4c8a-aa8d-339bb6e3cd70</title>
    <updated>2026-09-17T16:53:19.569163+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b4a56ae0-4faa-4c8a-aa8d-339bb6e3cd70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57817", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgf6n2duc2o", "content": "CVE-2026-57817 - apache cxf\nApache CXF users need to be cautious when using OpenID Connect with an identity provider. If the provider doesn't properly validate a security code, an attacker could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachecxf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-06T15:46:15.830045Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b4a56ae0-4faa-4c8a-aa8d-339bb6e3cd70/export"/>
    <published>2026-08-06T15:46:15.830045+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4a9aca0f-31b3-4034-8022-ecd74b7872fe/export</id>
    <title>4a9aca0f-31b3-4034-8022-ecd74b7872fe</title>
    <updated>2026-09-17T16:53:19.569262+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4a9aca0f-31b3-4034-8022-ecd74b7872fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57811", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95695", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57811-Proof-of-Concept\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a webshellseo8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 12:51:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T00:00:25.712016Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4a9aca0f-31b3-4034-8022-ecd74b7872fe/export"/>
    <published>2026-07-30T00:00:25.712016+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/317ef956-8772-4dbf-b0c4-517b077925e5/export</id>
    <title>317ef956-8772-4dbf-b0c4-517b077925e5</title>
    <updated>2026-09-17T16:53:19.569365+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "317ef956-8772-4dbf-b0c4-517b077925e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57811", "type": "published-proof-of-concept", "source": "Telegram/Ig8EiCACgPrEXQ5i-DIyVp_2gol1J9_WigCZpGPavBW5BRY", "content": "", "creation_timestamp": "2026-07-30T00:00:09.645403Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/317ef956-8772-4dbf-b0c4-517b077925e5/export"/>
    <published>2026-07-30T00:00:09.645403+00:00</published>
  </entry>
</feed>
