<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-15T02:08:34.741965+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ecd6c118-b0da-4d36-ae10-9030c6c44507/export</id>
    <title>ecd6c118-b0da-4d36-ae10-9030c6c44507</title>
    <updated>2026-09-15T02:08:34.769661+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ecd6c118-b0da-4d36-ae10-9030c6c44507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtu46sqzmk23", "content": "\u300cOpenAM\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\n\n\u300cOpenAM\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3082\u5224\u660e\u3057\u3066\u304a\u308a\u3001\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u3067\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670820\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3068\u306a\u308b\u300cOpenAM 16.1.2\u300d\u3092\u516c\u958b\u3002\u4f9d\u5b58\u95a2\u4fc2\u306b\u3042\u308b\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u88fd\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u8106\u5f31\u6027\u3092\u542b\u3081\u3001\u3042\u308f\u305b\u306618\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3057\u305f\u3002\n\n\u300cCVE-2026-62379\u300d\u306f\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u8a8d\u8a3c\u306b\u7528\u3044\u308b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u3002\u300cXML\u300d\u3067\u6307\u5b9a\u3055\u308c\u305f\u4efb\u610f\u306eJava\u30af\u30e9\u30b9\u3092\u691c\u8a3c\u3059\u308b...", "creation_timestamp": "2026-08-24T20:07:37.104240Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ecd6c118-b0da-4d36-ae10-9030c6c44507/export"/>
    <published>2026-08-24T20:07:37.104240+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2f10766b-14ef-4e6b-86a3-2d8b1f37ce79/export</id>
    <title>2f10766b-14ef-4e6b-86a3-2d8b1f37ce79</title>
    <updated>2026-09-15T02:08:34.772877+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2f10766b-14ef-4e6b-86a3-2d8b1f37ce79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3cv2epxz367pg", "content": "CVE-2026-62377 - libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110)\nCVE ID : CVE-2026-62377\n \n Published : Aug. 18, 2026, 9:22 p.m. | 9\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format de...", "creation_timestamp": "2026-08-18T23:00:56.935858Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2f10766b-14ef-4e6b-86a3-2d8b1f37ce79/export"/>
    <published>2026-08-18T23:00:56.935858+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/046e2140-2638-48e6-a573-d932a56fbd25/export</id>
    <title>046e2140-2638-48e6-a573-d932a56fbd25</title>
    <updated>2026-09-15T02:08:34.773016+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "046e2140-2638-48e6-a573-d932a56fbd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrx3gewobb2y", "content": "Four OpenAM vulnerabilities are fixed in 16.1.2. CVE-2026-62379 (CVSS 9.8) allows unauthenticated remote code execution; CVE-2026-62261 scores 9.9.\n\n#OpenAM #RCE #IAM #CVE202662379", "creation_timestamp": "2026-07-31T13:41:33.592809Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/046e2140-2638-48e6-a573-d932a56fbd25/export"/>
    <published>2026-07-31T13:41:33.592809+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7aa2de40-edb2-44c3-b584-07bf08a18367/export</id>
    <title>7aa2de40-edb2-44c3-b584-07bf08a18367</title>
    <updated>2026-09-15T02:08:34.773131+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7aa2de40-edb2-44c3-b584-07bf08a18367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p", "content": "Two critical OpenAM vulnerabilities demand attention: CVE-2026-62379 and CVE-2026-62263. Both are unauthenticated and pose serious risks. Patch your OpenAM instances immediately #OpenAM #CyberSecurity #VulnerabilityAlert", "creation_timestamp": "2026-07-28T18:15:20.036724Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7aa2de40-edb2-44c3-b584-07bf08a18367/export"/>
    <published>2026-07-28T18:15:20.036724+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0aec4a50-332a-472b-b3ec-d8e715f2075c/export</id>
    <title>0aec4a50-332a-472b-b3ec-d8e715f2075c</title>
    <updated>2026-09-15T02:08:34.773243+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0aec4a50-332a-472b-b3ec-d8e715f2075c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkqdtsk2i", "content": "CVE-2026-62379 - org.openidentityplatform.openam:openam-core\nA security flaw in OpenAM allows an attacker to run code on the server without logging in. This affects all OpenAM versions up to 16.1.1. To fix this, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#Java #CVE #infosec", "creation_timestamp": "2026-07-24T21:16:05.736601Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0aec4a50-332a-472b-b3ec-d8e715f2075c/export"/>
    <published>2026-07-24T21:16:05.736601+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/97071e75-9ade-42da-927f-0ae4c5c41234/export</id>
    <title>97071e75-9ade-42da-927f-0ae4c5c41234</title>
    <updated>2026-09-15T02:08:34.773352+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "97071e75-9ade-42da-927f-0ae4c5c41234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfrawsdq2s", "content": "CVE-2026-62378\nThe RustFS Console allows attackers to inject malicious code into PDF files, potentially stealing administrator credentials. This issue affects versions 0.1.7 to 0.1.10 of the RustFS Console. To protect your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:16:04.152094Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/97071e75-9ade-42da-927f-0ae4c5c41234/export"/>
    <published>2026-07-18T04:16:04.152094+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f5a0ff31-5469-4889-9ca7-dc55e623a7ff/export</id>
    <title>f5a0ff31-5469-4889-9ca7-dc55e623a7ff</title>
    <updated>2026-09-15T02:08:34.773450+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f5a0ff31-5469-4889-9ca7-dc55e623a7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpghuqeib22", "content": "CVE-2026-62378 - RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover\nCVE ID : CVE-2026-62378\n \n Published : July 15, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : RustFS Console is a web management console for the RustFS ...", "creation_timestamp": "2026-07-15T19:12:44.767996Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f5a0ff31-5469-4889-9ca7-dc55e623a7ff/export"/>
    <published>2026-07-15T19:12:44.767996+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e6a616bb-aa8e-4614-acbe-d82615cd5d52/export</id>
    <title>e6a616bb-aa8e-4614-acbe-d82615cd5d52</title>
    <updated>2026-09-15T02:08:34.773548+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e6a616bb-aa8e-4614-acbe-d82615cd5d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpcg2jm3y2e", "content": "\ud83d\udd34 CVE-2026-62378 - Critical (9)\n\nRustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 unt...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62378/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T18:00:09.309708Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e6a616bb-aa8e-4614-acbe-d82615cd5d52/export"/>
    <published>2026-07-15T18:00:09.309708+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a7a2df0f-d1ce-4907-8e30-c904a7783100/export</id>
    <title>a7a2df0f-d1ce-4907-8e30-c904a7783100</title>
    <updated>2026-09-15T02:08:34.773652+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a7a2df0f-d1ce-4907-8e30-c904a7783100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjey2z52o", "content": "CVE-2026-62378 - console\nA vulnerability in the RustFS Console's PDF preview feature allows an attacker to inject malicious code into the management interface, potentially stealing sensitive administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#console #rustfs #CVE #infosec", "creation_timestamp": "2026-07-15T17:44:06.326274Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a7a2df0f-d1ce-4907-8e30-c904a7783100/export"/>
    <published>2026-07-15T17:44:06.326274+00:00</published>
  </entry>
</feed>
