<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-06T18:01:57.693920+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2e8b0013-cee4-4f0d-ac23-52df6b92f02c/export</id>
    <title>2e8b0013-cee4-4f0d-ac23-52df6b92f02c</title>
    <updated>2026-10-06T18:01:57.727108+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2e8b0013-cee4-4f0d-ac23-52df6b92f02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94293", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx7apj5vou23", "content": "Murrelektronik won't fix AAS edge client vulnerability CVE-2026-94293 (CVSS 9.8), which allows unauthenticated data changes. Remove it now.\n\n#Murrelektronik #AAS #CVE202694293 #ICS #OTSecurity #Industry40 #MissingAuthentication #Vulnerability", "creation_timestamp": "2026-10-06T10:43:24.568763Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2e8b0013-cee4-4f0d-ac23-52df6b92f02c/export"/>
    <published>2026-10-06T10:43:24.568763+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/70706a23-06fb-403e-9620-2ccdba96ef0a/export</id>
    <title>70706a23-06fb-403e-9620-2ccdba96ef0a</title>
    <updated>2026-10-06T18:01:57.729794+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "70706a23-06fb-403e-9620-2ccdba96ef0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94293", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx6xyaz23c2z", "content": "\ud83d\udea8 CVE-2026-94293 \u2014 CVSS 9.3 CRITICAL\n\nAn unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94293\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T08:07:13.846242Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/70706a23-06fb-403e-9620-2ccdba96ef0a/export"/>
    <published>2026-10-06T08:07:13.846242+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/96349b13-9ab6-4d30-9728-174fe3245d87/export</id>
    <title>96349b13-9ab6-4d30-9728-174fe3245d87</title>
    <updated>2026-10-06T18:01:57.729939+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "96349b13-9ab6-4d30-9728-174fe3245d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ymage22fl55s", "content": "CVE-2026-94293 - Missing authentication for critical function in the aas-edge-client REST API\nCVE ID : CVE-2026-94293\n \n Published : Oct. 6, 2026, 6:38 a.m. | 35\u00a0minutes ago\n \n Description : An unauthenticated remote attacker can modify Asset Administration Shell submodel data...", "creation_timestamp": "2026-10-06T07:50:14.372761Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/96349b13-9ab6-4d30-9728-174fe3245d87/export"/>
    <published>2026-10-06T07:50:14.372761+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bcb2cde6-ac07-4095-b5f6-07ef4dab8b5f/export</id>
    <title>bcb2cde6-ac07-4095-b5f6-07ef4dab8b5f</title>
    <updated>2026-10-06T18:01:57.730047+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bcb2cde6-ac07-4095-b5f6-07ef4dab8b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94293", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mx6t27q6yar2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-108\nMurrelektronik: Missing Authentication in aas-edge-client Reference Implementation allows Manipulation of AAS Data\nCVE-2026-94293\n\nThe aas-edge-client is a reference implementation of an Asset Administration Shell (AAS) edge application, published by [\u2026]", "creation_timestamp": "2026-10-06T06:39:27.254096Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bcb2cde6-ac07-4095-b5f6-07ef4dab8b5f/export"/>
    <published>2026-10-06T06:39:27.254096+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/43e7fca4-517c-4564-ba4c-7d6fc22a861d/export</id>
    <title>43e7fca4-517c-4564-ba4c-7d6fc22a861d</title>
    <updated>2026-10-06T18:01:57.730153+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "43e7fca4-517c-4564-ba4c-7d6fc22a861d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94293", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117392582452388550", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-108Murrelektronik: Missing Authentication in aas-edge-client Reference Implementation allows Manipulation of AAS DataCVE-2026-94293\nThe aas-edge-client is a reference implementation of an Asset Administration Shell (AAS) edge application, published by Murrelektronik GmbH on GitHub for\u2026\nHTML: https://certvde.com/en/advisories/vde-2026-108/CSAF JSON: https://murrelektronik.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-108.json\n#OT #Advisory", "creation_timestamp": "2026-10-06T06:37:38.898288Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/43e7fca4-517c-4564-ba4c-7d6fc22a861d/export"/>
    <published>2026-10-06T06:37:38.898288+00:00</published>
  </entry>
</feed>
