<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-12T21:58:22.295650+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9904477e-147f-4afb-a32e-e28bd089e9b1/export</id>
    <title>9904477e-147f-4afb-a32e-e28bd089e9b1</title>
    <updated>2026-08-12T21:58:22.314971+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9904477e-147f-4afb-a32e-e28bd089e9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72740", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqta4hrup2b", "content": "CVE-2026-72740\nDokploy users with deployment permission and SSH keys can execute arbitrary commands on the Dokploy server, potentially leading to unauthorized access or data loss. To fix this, update to Dokploy version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-10T19:24:05.888288Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9904477e-147f-4afb-a32e-e28bd089e9b1/export"/>
    <published>2026-08-10T19:24:05.888288+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0a2e54e1-41dc-43d5-846a-0aa9021d24eb/export</id>
    <title>0a2e54e1-41dc-43d5-846a-0aa9021d24eb</title>
    <updated>2026-08-12T21:58:22.317285+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0a2e54e1-41dc-43d5-846a-0aa9021d24eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aemh5cwnsrtqh", "content": "CVE-2026-72740 - Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`\nCVE ID : CVE-2026-72740\n \n Published : Aug. 10, 2026, 6:18 p.m. | 11\u00a0minutes ago\n \n Description : Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13,...", "creation_timestamp": "2026-08-10T18:38:58.635822Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0a2e54e1-41dc-43d5-846a-0aa9021d24eb/export"/>
    <published>2026-08-10T18:38:58.635822+00:00</published>
  </entry>
</feed>
