<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T18:28:03.728947+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1fc75cb8-5a93-4c9a-bfba-378f926735c0/export</id>
    <title>1fc75cb8-5a93-4c9a-bfba-378f926735c0</title>
    <updated>2026-09-14T18:28:03.760714+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1fc75cb8-5a93-4c9a-bfba-378f926735c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "Telegram/CIwg3dUruFUkA2IiAP63EE_3LOdvwiOYKhxCOUQk67UuENI", "content": "", "creation_timestamp": "2026-09-14T03:00:07.448064Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1fc75cb8-5a93-4c9a-bfba-378f926735c0/export"/>
    <published>2026-09-14T03:00:07.448064+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bbc477b8-3a74-49c7-a300-184c6d0ee370/export</id>
    <title>bbc477b8-3a74-49c7-a300-184c6d0ee370</title>
    <updated>2026-09-14T18:28:03.763734+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bbc477b8-3a74-49c7-a300-184c6d0ee370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/xakep_ru/20040", "content": "\u0411\u043e\u043b\u0435\u0435 8300 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Gitea \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 The Shadowserver Foundation \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 8300 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Gitea \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-60004. \u0411\u0430\u0433 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nhttps://xakep.ru/2026/09/11/gitea-rce/", "creation_timestamp": "2026-09-12T00:00:41.360033Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bbc477b8-3a74-49c7-a300-184c6d0ee370/export"/>
    <published>2026-09-12T00:00:41.360033+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1a5e20b4-2e3a-46ea-96a9-5f6c9fc239db/export</id>
    <title>1a5e20b4-2e3a-46ea-96a9-5f6c9fc239db</title>
    <updated>2026-09-14T18:28:03.763888+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1a5e20b4-2e3a-46ea-96a9-5f6c9fc239db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "exploited", "source": "https://t.me/xakep_ru/20040", "content": "\u0411\u043e\u043b\u0435\u0435 8300 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Gitea \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 The Shadowserver Foundation \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 8300 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Gitea \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-60004. \u0411\u0430\u0433 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nhttps://xakep.ru/2026/09/11/gitea-rce/", "creation_timestamp": "2026-09-11T14:00:06.469520Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1a5e20b4-2e3a-46ea-96a9-5f6c9fc239db/export"/>
    <published>2026-09-11T14:00:06.469520+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8d7f4669-4ffd-4055-9001-988a0ad2a619/export</id>
    <title>8d7f4669-4ffd-4055-9001-988a0ad2a619</title>
    <updated>2026-09-14T18:28:03.764005+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8d7f4669-4ffd-4055-9001-988a0ad2a619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvpi5wt2c", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-60004: Gitea: Remote Code Execution via diffpatch Git Hook Installation\nCVSS 9.8 \u00b7 EPSS 86.8% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-60004\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:08:56.593600Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8d7f4669-4ffd-4055-9001-988a0ad2a619/export"/>
    <published>2026-09-08T19:08:56.593600+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1fd51e56-2668-4eff-999e-9d76ef227180/export</id>
    <title>1fd51e56-2668-4eff-999e-9d76ef227180</title>
    <updated>2026-09-14T18:28:03.764115+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "1fd51e56-2668-4eff-999e-9d76ef227180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m", "content": "", "creation_timestamp": "2026-09-08T18:35:05.863537Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1fd51e56-2668-4eff-999e-9d76ef227180/export"/>
    <published>2026-09-08T18:35:05.863537+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2ed86b98-032e-44ed-b1ca-788d713f71eb/export</id>
    <title>2ed86b98-032e-44ed-b1ca-788d713f71eb</title>
    <updated>2026-09-14T18:28:03.766184+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2ed86b98-032e-44ed-b1ca-788d713f71eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60005", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mup2pkby5k2r", "content": "\u300cnginx\u300d\u306b\u8907\u6570\u8106\u5f31\u6027\u3001\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3082 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\n\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u300cnginx\u300d\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670815\u65e5\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u3078\u5bfe\u51e6\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u306b\u3082\u5bfe\u51e6\u3057\u3066\u3044\u308b\u3002\n\nF5\u306f\u73fe\u5730\u6642\u95937\u670815\u65e5\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-42533\u300d\u300cCVE-2026-60005\u300d\u300cCVE-2026-56434\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u6709\u511f\u7248\u3001\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u7248\u306e\u3044\u305a\u308c\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\n\u300cCVE-2026-42533\u300d\u306f\u3001\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u300cmap\u300d\u30c7\u30a3\u30ec\u30af...", "creation_timestamp": "2026-09-04T13:23:04.560873Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2ed86b98-032e-44ed-b1ca-788d713f71eb/export"/>
    <published>2026-09-04T13:23:04.560873+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8a60bf7a-1ec5-481e-8539-faa54e4dacf8/export</id>
    <title>8a60bf7a-1ec5-481e-8539-faa54e4dacf8</title>
    <updated>2026-09-14T18:28:03.766329+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8a60bf7a-1ec5-481e-8539-faa54e4dacf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "Telegram/zg4wR79y8Xs5TR-sEF4ufViDE8nGerP6bqE6yl_hOH2_qzw", "content": "", "creation_timestamp": "2026-09-03T00:00:40.704840Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8a60bf7a-1ec5-481e-8539-faa54e4dacf8/export"/>
    <published>2026-09-03T00:00:40.704840+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/659acb96-8d57-4a11-b74b-1dfc1ef2a30e/export</id>
    <title>659acb96-8d57-4a11-b74b-1dfc1ef2a30e</title>
    <updated>2026-09-14T18:28:03.766437+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "659acb96-8d57-4a11-b74b-1dfc1ef2a30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3589", "content": "CVE-2026-60004 Gitea RCE \n(CVSS 9.8)\n*\nPoC", "creation_timestamp": "2026-09-03T00:00:40.244094Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/659acb96-8d57-4a11-b74b-1dfc1ef2a30e/export"/>
    <published>2026-09-03T00:00:40.244094+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cdaf0025-8bb4-4d79-bf9a-fdf0facfdde9/export</id>
    <title>cdaf0025-8bb4-4d79-bf9a-fdf0facfdde9</title>
    <updated>2026-09-14T18:28:03.766537+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cdaf0025-8bb4-4d79-bf9a-fdf0facfdde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://t.me/proxy_bar/3589", "content": "CVE-2026-60004 Gitea RCE \n(CVSS 9.8)\n*\nPoC", "creation_timestamp": "2026-09-02T18:00:05.848622Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cdaf0025-8bb4-4d79-bf9a-fdf0facfdde9/export"/>
    <published>2026-09-02T18:00:05.848622+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b40b8ea9-abdb-438c-8b6e-42b0711c56a8/export</id>
    <title>b40b8ea9-abdb-438c-8b6e-42b0711c56a8</title>
    <updated>2026-09-14T18:28:03.766646+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b40b8ea9-abdb-438c-8b6e-42b0711c56a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60004", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mujcbrqrdu2q", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 41 interactions\nCVE-2026-60004: 16 interactions\nCVE-2026-65641: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-62911: 10 interactions\nCVE-2026-70551: 8 interactions\nCVE-2026-83548: 7 interactions\n", "creation_timestamp": "2026-09-02T06:22:33.438490Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b40b8ea9-abdb-438c-8b6e-42b0711c56a8/export"/>
    <published>2026-09-02T06:22:33.438490+00:00</published>
  </entry>
</feed>
