<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T19:50:05.271421+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/44a108d6-0b4c-4827-929a-874af19a660f/export</id>
    <title>44a108d6-0b4c-4827-929a-874af19a660f</title>
    <updated>2026-09-17T19:50:05.293503+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "44a108d6-0b4c-4827-929a-874af19a660f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86547", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-15T00:00:23.799782Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/44a108d6-0b4c-4827-929a-874af19a660f/export"/>
    <published>2026-09-15T00:00:23.799782+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ffdb8b1a-0c14-46fd-af0f-a20107a0a5b6/export</id>
    <title>ffdb8b1a-0c14-46fd-af0f-a20107a0a5b6</title>
    <updated>2026-09-17T19:50:05.295299+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ffdb8b1a-0c14-46fd-af0f-a20107a0a5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86547", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-14T03:00:12.021114Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ffdb8b1a-0c14-46fd-af0f-a20107a0a5b6/export"/>
    <published>2026-09-14T03:00:12.021114+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/176e2203-e116-42f8-adff-5791e009294b/export</id>
    <title>176e2203-e116-42f8-adff-5791e009294b</title>
    <updated>2026-09-17T19:50:05.295444+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "176e2203-e116-42f8-adff-5791e009294b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86541", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz3c77uf42g", "content": "CVE-2026-86541 - knowns\nVersions of the Knows tool older than 0.30.0 let a user supply specially crafted file names to the code\u2011replace feature, causing the program to write data outside its own folder.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#knowns #knownsdev #CVE #infosec", "creation_timestamp": "2026-09-08T13:00:07.800127Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/176e2203-e116-42f8-adff-5791e009294b/export"/>
    <published>2026-09-08T13:00:07.800127+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/da5d03d5-ded2-417f-b60d-7791af66350a/export</id>
    <title>da5d03d5-ded2-417f-b60d-7791af66350a</title>
    <updated>2026-09-17T19:50:05.295578+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "da5d03d5-ded2-417f-b60d-7791af66350a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86543", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muysdz66x52j", "content": "CVE-2026-86543 - knowns\nVersions of the Knowns software earlier than 0.30.0 expose a management interface that anyone on the network can reach without a password. This allows an attacker to start a tunnel\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#knowns #knownsdev #CVE #infosec", "creation_timestamp": "2026-09-08T10:20:04.120561Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/da5d03d5-ded2-417f-b60d-7791af66350a/export"/>
    <published>2026-09-08T10:20:04.120561+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/15f30d0f-d25d-4c84-a166-2a3fa2cd6e70/export</id>
    <title>15f30d0f-d25d-4c84-a166-2a3fa2cd6e70</title>
    <updated>2026-09-17T19:50:05.295689+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "15f30d0f-d25d-4c84-a166-2a3fa2cd6e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86542", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muyrs6o7z42n", "content": "CVE-2026-86542 - knowns\nVersions of the knowns software earlier than 0.30.0 do not check the names used when importing files. This allows a remote user to trick the system into saving files outside the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#knowns #knownsdev #CVE #infosec", "creation_timestamp": "2026-09-08T10:10:05.782954Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/15f30d0f-d25d-4c84-a166-2a3fa2cd6e70/export"/>
    <published>2026-09-08T10:10:05.782954+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4c78e15c-b7bf-44fa-aabd-1c4100713ebc/export</id>
    <title>4c78e15c-b7bf-44fa-aabd-1c4100713ebc</title>
    <updated>2026-09-17T19:50:05.295801+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4c78e15c-b7bf-44fa-aabd-1c4100713ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86541", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muxt54eecs2k", "content": "\ud83d\udfe0 CVE-2026-86541 - High (8.3)\n\nknowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() f...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86541/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T01:01:27.566325Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4c78e15c-b7bf-44fa-aabd-1c4100713ebc/export"/>
    <published>2026-09-08T01:01:27.566325+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6e359119-a2b0-414d-bea6-0339149e4ebd/export</id>
    <title>6e359119-a2b0-414d-bea6-0339149e4ebd</title>
    <updated>2026-09-17T19:50:05.295915+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6e359119-a2b0-414d-bea6-0339149e4ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86543", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muxq42qj7f2g", "content": "\ud83d\udea8 CVE-2026-86543 \u2014 CVSS 9.3 CRITICAL\n\nknowns versions before 0.30.0 serve the management API without authentication on all network interfaces by ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86543\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T00:07:10.264447Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6e359119-a2b0-414d-bea6-0339149e4ebd/export"/>
    <published>2026-09-08T00:07:10.264447+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/73e489cb-e530-4bef-9aad-a2a5747bd6ab/export</id>
    <title>73e489cb-e530-4bef-9aad-a2a5747bd6ab</title>
    <updated>2026-09-17T19:50:05.296024+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "73e489cb-e530-4bef-9aad-a2a5747bd6ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86540", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpxhjqtr22", "content": "\ud83d\udfe0 CVE-2026-86540 - High (7.8)\n\nknowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86540/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T00:04:36.831925Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/73e489cb-e530-4bef-9aad-a2a5747bd6ab/export"/>
    <published>2026-09-08T00:04:36.831925+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/81d2fe2e-10b7-4769-9dcb-431f75387fdf/export</id>
    <title>81d2fe2e-10b7-4769-9dcb-431f75387fdf</title>
    <updated>2026-09-17T19:50:05.296135+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "81d2fe2e-10b7-4769-9dcb-431f75387fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86544", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpvecsqn2o", "content": "\ud83d\udfe0 CVE-2026-86544 - High (8.1)\n\nknowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86544/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T00:03:25.660777Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/81d2fe2e-10b7-4769-9dcb-431f75387fdf/export"/>
    <published>2026-09-08T00:03:25.660777+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/deff8bc6-150c-40c3-a37b-4ee960606968/export</id>
    <title>deff8bc6-150c-40c3-a37b-4ee960606968</title>
    <updated>2026-09-17T19:50:05.296242+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "deff8bc6-150c-40c3-a37b-4ee960606968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86543", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpv5ru6t2z", "content": "\ud83d\udd34 CVE-2026-86543 - Critical (9.8)\n\nknowns versions before 0.30.0 serve the management API without authentication on all network inte...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86543/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T00:03:19.000926Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/deff8bc6-150c-40c3-a37b-4ee960606968/export"/>
    <published>2026-09-08T00:03:19.000926+00:00</published>
  </entry>
</feed>
