<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-28T19:24:27.305150+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/16ef79db-ed77-4aa4-9ddf-55966d3ea752/export</id>
    <title>16ef79db-ed77-4aa4-9ddf-55966d3ea752</title>
    <updated>2026-09-28T19:24:27.330746+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "16ef79db-ed77-4aa4-9ddf-55966d3ea752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73642", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvs4bdin2o", "content": "\ud83d\udea8 CVE-2026-73642 \u2014 CVSS 9.2 CRITICAL\n\nDayforce Payroll is vulnerable to Path Traversal\u00a0 in file download functionality. An unauthenticated attack...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73642\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:07:24.860483Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/16ef79db-ed77-4aa4-9ddf-55966d3ea752/export"/>
    <published>2026-09-28T18:07:24.860483+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f3269eb9-208f-4848-81d8-4af13fdb9a32/export</id>
    <title>f3269eb9-208f-4848-81d8-4af13fdb9a32</title>
    <updated>2026-09-28T19:24:27.336427+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f3269eb9-208f-4848-81d8-4af13fdb9a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73642", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlkrdpqox2l", "content": "CVE-2026-73642 - payroll\nThe payroll system\u2019s file\u2011download feature can be tricked into returning any file on the server, even system files. An attacker does not need to log in to exploit this, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#payroll #dayforce #CVE #infosec", "creation_timestamp": "2026-09-28T14:50:08.176863Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f3269eb9-208f-4848-81d8-4af13fdb9a32/export"/>
    <published>2026-09-28T14:50:08.176863+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/120fdfbf-3e0f-4174-af7b-6a1f3e1e2c9a/export</id>
    <title>120fdfbf-3e0f-4174-af7b-6a1f3e1e2c9a</title>
    <updated>2026-09-28T19:24:27.336616+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "120fdfbf-3e0f-4174-af7b-6a1f3e1e2c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73642", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/CVE-2026-73640", "content": "", "creation_timestamp": "2026-09-28T07:15:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/120fdfbf-3e0f-4174-af7b-6a1f3e1e2c9a/export"/>
    <published>2026-09-28T07:15:00+00:00</published>
  </entry>
</feed>
