<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-25T16:21:10.742234+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2357d4b1-16e9-408d-b3e9-5f0dda958970/export</id>
    <title>2357d4b1-16e9-408d-b3e9-5f0dda958970</title>
    <updated>2026-08-25T16:21:10.766702+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2357d4b1-16e9-408d-b3e9-5f0dda958970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv3mjo25j25", "content": "CVE-2026-67602\nThe ip address management tool phpIPAM versions older than 1.8.2 let anyone call its web API as if they were an authorized user. By tricking a simple data cache, an attacker can use a database record number as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:30:04.127859Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2357d4b1-16e9-408d-b3e9-5f0dda958970/export"/>
    <published>2026-08-25T05:30:04.127859+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/12783c00-92bc-442b-8054-b88934050d65/export</id>
    <title>12783c00-92bc-442b-8054-b88934050d65</title>
    <updated>2026-08-25T16:21:10.770002+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "12783c00-92bc-442b-8054-b88934050d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttosak7m72b", "content": "\ud83d\udea8 CVE-2026-67602 \u2014 CVSS 9.3 CRITICAL\n\nphpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67602\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T16:07:56.396039Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/12783c00-92bc-442b-8054-b88934050d65/export"/>
    <published>2026-08-24T16:07:56.396039+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2339f3ad-c2a8-4b01-ae3e-4b7685bc0b74/export</id>
    <title>2339f3ad-c2a8-4b01-ae3e-4b7685bc0b74</title>
    <updated>2026-08-25T16:21:10.770149+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2339f3ad-c2a8-4b01-ae3e-4b7685bc0b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttnafi2pu2p", "content": "CVE-2026-67602 - phpipam\nThe phpIPAM tool versions earlier than 1.8.2 let anyone use the REST API without proving they are authorized. This means an outsider could read, change, or delete your IP address records.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpipam #CVE #infosec", "creation_timestamp": "2026-08-24T15:40:03.966244Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2339f3ad-c2a8-4b01-ae3e-4b7685bc0b74/export"/>
    <published>2026-08-24T15:40:03.966244+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/66c27ec9-3a83-4b43-8bfe-8a0b0d7472c5/export</id>
    <title>66c27ec9-3a83-4b43-8bfe-8a0b0d7472c5</title>
    <updated>2026-08-25T16:21:10.770255+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "66c27ec9-3a83-4b43-8bfe-8a0b0d7472c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mttj7n552i25", "content": "\u26a0\ufe0f PATCH NOW\n\nphpIPAM, the open-source tool teams use to track their networks, has a critical bug (CVE-2026-67602, CVSS 9.3).\n\nWith no login, a stranger can read, change, and delete every IP record through its API.\n\nEverything before 1.8.2 is affected. Fix: update to 1.8.2 now.", "creation_timestamp": "2026-08-24T14:28:03.641901Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/66c27ec9-3a83-4b43-8bfe-8a0b0d7472c5/export"/>
    <published>2026-08-24T14:28:03.641901+00:00</published>
  </entry>
</feed>
