<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-28T19:24:23.843923+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d5c42b8d-82af-4319-82d7-a7ce8f1b2bc7/export</id>
    <title>d5c42b8d-82af-4319-82d7-a7ce8f1b2bc7</title>
    <updated>2026-09-28T19:24:23.870219+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d5c42b8d-82af-4319-82d7-a7ce8f1b2bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73640", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvrtn4h52r", "content": "\ud83d\udea8 CVE-2026-73640 \u2014 CVSS 9.3 CRITICAL\n\nDayforce Payroll is vulnerable to Time Based-Blind SQL Injection in password recovery functionality. The un...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73640\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:07:15.874146Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d5c42b8d-82af-4319-82d7-a7ce8f1b2bc7/export"/>
    <published>2026-09-28T18:07:15.874146+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7c303824-465f-45c9-8251-1ee7e578e146/export</id>
    <title>7c303824-465f-45c9-8251-1ee7e578e146</title>
    <updated>2026-09-28T19:24:23.871504+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7c303824-465f-45c9-8251-1ee7e578e146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73640", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117349532114644231", "content": "sev:CRITs in Dayforce Payroll. Go patch and protect that shit before your pay gets fucked.\nhttps://cert.pl/en/posts/2026/09/CVE-2026-73640/", "creation_timestamp": "2026-09-28T16:09:18.906022Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7c303824-465f-45c9-8251-1ee7e578e146/export"/>
    <published>2026-09-28T16:09:18.906022+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7eb6c29a-086b-4f26-ae93-a59b3471be59/export</id>
    <title>7eb6c29a-086b-4f26-ae93-a59b3471be59</title>
    <updated>2026-09-28T19:24:23.871643+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7eb6c29a-086b-4f26-ae93-a59b3471be59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73640", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlkrbf4xb2r", "content": "CVE-2026-73640 - payroll\nThe password\u2011recovery page in Dayforce Payroll can be manipulated to run hidden database commands, allowing an outsider to extract information. This works without needing to log in\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#payroll #dayforce #CVE #infosec", "creation_timestamp": "2026-09-28T14:50:05.793495Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7eb6c29a-086b-4f26-ae93-a59b3471be59/export"/>
    <published>2026-09-28T14:50:05.793495+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fed85f98-e696-44cb-9a64-ed006c096a48/export</id>
    <title>fed85f98-e696-44cb-9a64-ed006c096a48</title>
    <updated>2026-09-28T19:24:23.871751+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "fed85f98-e696-44cb-9a64-ed006c096a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73640", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-73640", "content": "", "creation_timestamp": "2026-09-28T07:15:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fed85f98-e696-44cb-9a64-ed006c096a48/export"/>
    <published>2026-09-28T07:15:00+00:00</published>
  </entry>
</feed>
