<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-24T11:30:57.442388+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b66575f7-ac4a-48fa-b15e-c45532daef09/export</id>
    <title>b66575f7-ac4a-48fa-b15e-c45532daef09</title>
    <updated>2026-09-24T11:30:57.474984+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b66575f7-ac4a-48fa-b15e-c45532daef09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75745", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0390", "content": "Adobe heeft 6 kwetsbaarheden verholpen in Adobe Experience Manager (AEM) Forms op Java Enterprise Edition (JEE), waaronder AEM 6.5 Forms en AEM 6.5 LTS Forms. De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder onjuiste autorisatie, onvoldoende invoervalidatie, Server-Side Request Forgery (SSRF), Cross-Site Scripting (XSS) en Cross-Site Request Forgery (CSRF). Alle zes kwetsbaarheden zijn als kritiek aangemerkt en twee kunnen zonder authenticatie op afstand worden misbruikt. Succesvol misbruik kan onder meer leiden tot het uitvoeren van willekeurige code, privilege-escalatie en het omzeilen van beveiligingsmaatregelen.\n\nCVE-2026-75745 heeft met een CVSS-score van 9,8 de hoogste score en kan zonder authenticatie en gebruikersinteractie op afstand worden misbruikt voor het uitvoeren van willekeurige code. Adobe meldt niet op de hoogte te zijn van actief misbruik.", "creation_timestamp": "2026-09-23T16:00:43.990634Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b66575f7-ac4a-48fa-b15e-c45532daef09/export"/>
    <published>2026-09-23T16:00:43.990634+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/55ab942e-c4e8-4a32-aeb1-ea0f7f8e50d6/export</id>
    <title>55ab942e-c4e8-4a32-aeb1-ea0f7f8e50d6</title>
    <updated>2026-09-24T11:30:57.477671+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "55ab942e-c4e8-4a32-aeb1-ea0f7f8e50d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75745", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mw5i4dh6sx2v", "content": "CVE-2026-75745 (CRITICAL) CVSS 10.0: https://experiencedigest.org/2026/09/22/cve-critical-cvss.html", "creation_timestamp": "2026-09-23T00:25:19.279642Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/55ab942e-c4e8-4a32-aeb1-ea0f7f8e50d6/export"/>
    <published>2026-09-23T00:25:19.279642+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b16ee2f0-feb6-4447-b6f1-4bd40e162f03/export</id>
    <title>b16ee2f0-feb6-4447-b6f1-4bd40e162f03</title>
    <updated>2026-09-24T11:30:57.477805+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b16ee2f0-feb6-4447-b6f1-4bd40e162f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75745", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw55r356lq24", "content": "CVE-2026-75745 - aem 6.5 forms jee\nThe Adobe Experience Manager Forms JEE component in version 6.5 (including the LTS release) can be tricked into executing code that an attacker provides, without needing any user to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-09-22T21:20:05.255539Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b16ee2f0-feb6-4447-b6f1-4bd40e162f03/export"/>
    <published>2026-09-22T21:20:05.255539+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b844a978-b398-44cd-b2f4-2b1145fbe005/export</id>
    <title>b844a978-b398-44cd-b2f4-2b1145fbe005</title>
    <updated>2026-09-24T11:30:57.477910+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b844a978-b398-44cd-b2f4-2b1145fbe005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75745", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4zzkgp6h2j", "content": "\ud83d\udea8 CVE-2026-75745 \u2014 CVSS 10 CRITICAL\n\nAdobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could resul...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75745\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T20:13:13.681767Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b844a978-b398-44cd-b2f4-2b1145fbe005/export"/>
    <published>2026-09-22T20:13:13.681767+00:00</published>
  </entry>
</feed>
