<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-11T13:53:21.490947+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/113d1d6e-45e7-4427-8d2c-9c9331946c77/export</id>
    <title>113d1d6e-45e7-4427-8d2c-9c9331946c77</title>
    <updated>2026-09-11T13:53:21.516463+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "113d1d6e-45e7-4427-8d2c-9c9331946c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89060", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvagrmdts52e", "content": "multicluster-observability-addon\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u7ba1\u7406\u5bfe\u8c61\u30af\u30e9\u30b9\u30bf\u306eID\u304c\u540d\u524d\u7a7a\u9593\u5916\u306e\u8a2d\u5b9a\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u53ef\u80fd\u306b\u306a\u308a\u3001\u6a5f\u5bc6\u60c5\u5831\uff08Hub Secrets\uff09\u304c\u653b\u6483\u8005\u5236\u5fa1\u306e\u30af\u30e9\u2026\nCVE-2026-89060 CVSS 7.7 | HIGH", "creation_timestamp": "2026-09-11T11:14:15.151947Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/113d1d6e-45e7-4427-8d2c-9c9331946c77/export"/>
    <published>2026-09-11T11:14:15.151947+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0b202561-26c1-4028-ab2b-2171c24b13ae/export</id>
    <title>0b202561-26c1-4028-ab2b-2171c24b13ae</title>
    <updated>2026-09-11T13:53:21.519087+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0b202561-26c1-4028-ab2b-2171c24b13ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89060", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv7vakxinq24", "content": "HIGH severity (CVSS 7.7): Red Hat Advanced Cluster Management for Kubernetes 2 allows cross-namespace Secret access due to flawed authorization order (CVE-2026-89060). Check https://radar.offseq.com/threat/cve-2026-89060-incorrect-behavior-order-authorization-before-parsing-and-canonicalization-i...", "creation_timestamp": "2026-09-11T06:00:28.398851Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0b202561-26c1-4028-ab2b-2171c24b13ae/export"/>
    <published>2026-09-11T06:00:28.398851+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ad01a661-b3d8-4f49-8820-4259ae5b7124/export</id>
    <title>ad01a661-b3d8-4f49-8820-4259ae5b7124</title>
    <updated>2026-09-11T13:53:21.519326+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ad01a661-b3d8-4f49-8820-4259ae5b7124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89060", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117250878720400223", "content": "Red Hat Advanced Cluster Management for Kubernetes 2 is affected by CVE-2026-89060 (HIGH, CVSS 7.7): managed-cluster identities may access hub Secrets outside their namespace due to authorization flaws. Monitor Red Hat and restrict permissions. https://radar.offseq.com/threat/cve-2026-89060-incorrect-behavior-order-authorization-before-parsing-and-canonicalization-in-red-hat-70cd9b74c8429f45 #OffSeq #Kubernetes #RedHat", "creation_timestamp": "2026-09-11T06:00:26.566190Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ad01a661-b3d8-4f49-8820-4259ae5b7124/export"/>
    <published>2026-09-11T06:00:26.566190+00:00</published>
  </entry>
</feed>
