<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T02:26:41.352630+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4ed1016e-918a-4e42-ab7d-78d09b44f526/export</id>
    <title>4ed1016e-918a-4e42-ab7d-78d09b44f526</title>
    <updated>2026-09-17T02:26:41.370254+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4ed1016e-918a-4e42-ab7d-78d09b44f526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84197", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3k3gs4w22y", "content": "CVE-2026-84197 - eclipse ditto\nAll released versions of the Eclipse Ditto Node.js client library skip the verification of the server\u2019s security certificate. This means an attacker who can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eclipseditto #eclipsefoundation #CVE #infosec", "creation_timestamp": "2026-09-09T12:30:05.986128Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4ed1016e-918a-4e42-ab7d-78d09b44f526/export"/>
    <published>2026-09-09T12:30:05.986128+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c44026fe-187c-4af5-8d60-417b5ee8a837/export</id>
    <title>c44026fe-187c-4af5-8d60-417b5ee8a837</title>
    <updated>2026-09-17T02:26:41.372108+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c44026fe-187c-4af5-8d60-417b5ee8a837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84197", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv224ku6z62t", "content": "\ud83d\udea8 CVE-2026-84197 \u2014 CVSS 9.2 CRITICAL\n\nIn Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-clie...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84197\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:43.735226Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c44026fe-187c-4af5-8d60-417b5ee8a837/export"/>
    <published>2026-09-08T22:11:43.735226+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9d3b4f34-d1a0-4586-b63a-26cf9692c8cb/export</id>
    <title>9d3b4f34-d1a0-4586-b63a-26cf9692c8cb</title>
    <updated>2026-09-17T02:26:41.372241+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9d3b4f34-d1a0-4586-b63a-26cf9692c8cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84190", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mulmzgv2yc2w", "content": "CVE-2026-84190 - librenms\nAn attacker with administrator privileges can execute arbitrary system commands on a LibreNMS server by manipulating the AboutController. This allows them to gain full control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#librenms #composer #CVE #infosec", "creation_timestamp": "2026-09-03T04:40:04.388866Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9d3b4f34-d1a0-4586-b63a-26cf9692c8cb/export"/>
    <published>2026-09-03T04:40:04.388866+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aceb9d85-e069-4491-ba84-fcb404a27102/export</id>
    <title>aceb9d85-e069-4491-ba84-fcb404a27102</title>
    <updated>2026-09-17T02:26:41.372344+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aceb9d85-e069-4491-ba84-fcb404a27102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4hlhsrs2div4j", "content": "CVE-2026-84194 - LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname\nCVE ID : CVE-2026-84194\n \n Published : Sept. 1, 2026, 12:17 p.m. | 19\u00a0minutes ago\n \n Description : LibreNMS versions &amp;gt;= 23.10.0 and &amp;lt; 26.2.0 (fixed in 26.4.0) contain an authenticated OS co...", "creation_timestamp": "2026-09-01T13:02:22.422957Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aceb9d85-e069-4491-ba84-fcb404a27102/export"/>
    <published>2026-09-01T13:02:22.422957+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/375b763f-41f7-4072-9efb-97bc68dabaf7/export</id>
    <title>375b763f-41f7-4072-9efb-97bc68dabaf7</title>
    <updated>2026-09-17T02:26:41.372446+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "375b763f-41f7-4072-9efb-97bc68dabaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84199", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muhi3fgvdn2i", "content": "\ud83d\udfe0 CVE-2026-84199 - High (7.7)\n\nKyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84199/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T13:01:03.112869Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/375b763f-41f7-4072-9efb-97bc68dabaf7/export"/>
    <published>2026-09-01T13:01:03.112869+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb26551c-e11e-40d4-b83f-a22366fd7132/export</id>
    <title>fb26551c-e11e-40d4-b83f-a22366fd7132</title>
    <updated>2026-09-17T02:26:41.372545+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb26551c-e11e-40d4-b83f-a22366fd7132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84196", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muhi36pdup2c", "content": "\ud83d\udfe0 CVE-2026-84196 - High (7.7)\n\nKyverno before 1.18.0 contains a server-side request forgery vulnerability in apiCall.service.url...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84196/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T13:00:55.883019Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb26551c-e11e-40d4-b83f-a22366fd7132/export"/>
    <published>2026-09-01T13:00:55.883019+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b8f6bff-74e8-411d-ab25-e6f45b219dc3/export</id>
    <title>8b8f6bff-74e8-411d-ab25-e6f45b219dc3</title>
    <updated>2026-09-17T02:26:41.372650+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b8f6bff-74e8-411d-ab25-e6f45b219dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84195", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muhi2y5tri24", "content": "\ud83d\udfe0 CVE-2026-84195 - High (7.7)\n\nKyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84195/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T13:00:48.797089Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b8f6bff-74e8-411d-ab25-e6f45b219dc3/export"/>
    <published>2026-09-01T13:00:48.797089+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/91899372-b695-48a0-82e4-1dce38d07b8a/export</id>
    <title>91899372-b695-48a0-82e4-1dce38d07b8a</title>
    <updated>2026-09-17T02:26:41.372746+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "91899372-b695-48a0-82e4-1dce38d07b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6g4mxnugdgmzz", "content": "CVE-2026-84195 - Kyverno before 1.16.4 Credential Leak via apiCall\nCVE ID : CVE-2026-84195\n \n Published : Sept. 1, 2026, 12:17 p.m. | 19\u00a0minutes ago\n \n Description : Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP r...", "creation_timestamp": "2026-09-01T13:00:22.737095Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/91899372-b695-48a0-82e4-1dce38d07b8a/export"/>
    <published>2026-09-01T13:00:22.737095+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/54027f92-51e0-42bb-9935-0c3e0ce96017/export</id>
    <title>54027f92-51e0-42bb-9935-0c3e0ce96017</title>
    <updated>2026-09-17T02:26:41.372841+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "54027f92-51e0-42bb-9935-0c3e0ce96017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84196", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hl6szaah75eag", "content": "CVE-2026-84196 - Kyverno before 1.18.0 Server-Side Request Forgery via apiCall\nCVE ID : CVE-2026-84196\n \n Published : Sept. 1, 2026, 12:17 p.m. | 19\u00a0minutes ago\n \n Description : Kyverno before 1.18.0 contains a server-side request forgery vulnerability in apiCall.service.url t...", "creation_timestamp": "2026-09-01T12:54:22.432315Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/54027f92-51e0-42bb-9935-0c3e0ce96017/export"/>
    <published>2026-09-01T12:54:22.432315+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cf13b54f-359f-4605-acc1-56a6bf0fcb28/export</id>
    <title>cf13b54f-359f-4605-acc1-56a6bf0fcb28</title>
    <updated>2026-09-17T02:26:41.372936+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cf13b54f-359f-4605-acc1-56a6bf0fcb28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/drlsrvewxkqlm", "content": "CVE-2026-84190 - LibreNMS before 26.5.0 Remote Code Execution via AboutController\nCVE ID : CVE-2026-84190\n \n Published : Sept. 1, 2026, 12:17 p.m. | 19\u00a0minutes ago\n \n Description : LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutContro...", "creation_timestamp": "2026-09-01T12:42:22.177850Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cf13b54f-359f-4605-acc1-56a6bf0fcb28/export"/>
    <published>2026-09-01T12:42:22.177850+00:00</published>
  </entry>
</feed>
