<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-04T17:53:50.371816+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/89359169-a96d-48bb-8c25-8b4bb016fb9c/export</id>
    <title>89359169-a96d-48bb-8c25-8b4bb016fb9c</title>
    <updated>2026-10-04T17:53:50.401233+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "89359169-a96d-48bb-8c25-8b4bb016fb9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105105", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mx2cwb2h7a2u", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-105105\n\nCWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core throu...", "creation_timestamp": "2026-10-04T11:39:39.295631Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/89359169-a96d-48bb-8c25-8b4bb016fb9c/export"/>
    <published>2026-10-04T11:39:39.295631+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/401516e6-0a67-4caa-a546-57d9262a98cb/export</id>
    <title>401516e6-0a67-4caa-a546-57d9262a98cb</title>
    <updated>2026-10-04T17:53:50.403563+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "401516e6-0a67-4caa-a546-57d9262a98cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105105", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwybpqeoxj2x", "content": "ait-server 3.1.1\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u306bZeroMQ\u30e1\u30c3\u30bb\u30fc\u30b8\u30d0\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u3002\u653b\u6483\u8005\u306f\u30b3\u30de\u30f3\u30c9\u6ce8\u5165\u3001\u60c5\u5831\u6f0f\u6d29\u3001\u507d\u88c5\u30c6\u30ec\u30e1\u30c8\u30ea\u6ce8\u5165\u3001\u901a\u4fe1\u59a8\u5bb3\u304c\u53ef\u80fd\u3002\nCVE-2026-105105 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-10-03T16:12:47.226272Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/401516e6-0a67-4caa-a546-57d9262a98cb/export"/>
    <published>2026-10-03T16:12:47.226272+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c54e9546-00ff-45a9-8948-37f3fe916dd6/export</id>
    <title>c54e9546-00ff-45a9-8948-37f3fe916dd6</title>
    <updated>2026-10-04T17:53:50.403697+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c54e9546-00ff-45a9-8948-37f3fe916dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwy6nycgm52n", "content": "\ud83d\udd34 CVE-2026-105105 - Critical (9.8)\n\nCWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and comman...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105105/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T15:18:09.113529Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c54e9546-00ff-45a9-8948-37f3fe916dd6/export"/>
    <published>2026-10-03T15:18:09.113529+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/14ac23f6-c2b4-4f72-989c-389d1aca0b81/export</id>
    <title>14ac23f6-c2b4-4f72-989c-389d1aca0b81</title>
    <updated>2026-10-04T17:53:50.403806+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "14ac23f6-c2b4-4f72-989c-389d1aca0b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105105", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwy2p75ib52o", "content": "\ud83d\udea8 CVE-2026-105105 \u2014 CVSS 9.8 CRITICAL\n\nCWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105105\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-03T14:07:13.032982Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/14ac23f6-c2b4-4f72-989c-389d1aca0b81/export"/>
    <published>2026-10-03T14:07:13.032982+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e90cb94b-e654-475b-88e7-bd7da87f4251/export</id>
    <title>e90cb94b-e654-475b-88e7-bd7da87f4251</title>
    <updated>2026-10-04T17:53:50.403907+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e90cb94b-e654-475b-88e7-bd7da87f4251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105105", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwxynggaxk23", "content": "Critical flaw in NASA-AMMOS AIT-Core \u22643.1.1: ZeroMQ message bus lacks authentication, risking remote command injection &amp;amp; data theft. Patch by upgrading to 3.1.2. https://radar.offseq.com/threat/cve-2026-105105-cwe-306-missing-authentication-for-critical-function-in-nasa-ammos-ait-core-6642dd3ce66...", "creation_timestamp": "2026-10-03T13:30:27.115163Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e90cb94b-e654-475b-88e7-bd7da87f4251/export"/>
    <published>2026-10-03T13:30:27.115163+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c0374ac4-dd72-4594-805f-26d5d580be9d/export</id>
    <title>c0374ac4-dd72-4594-805f-26d5d580be9d</title>
    <updated>2026-10-04T17:53:50.404004+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c0374ac4-dd72-4594-805f-26d5d580be9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105105", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117377218887743973", "content": "NASA-AMMOS AIT-Core \u22643.1.1 has a CRITICAL vuln (CVE-2026-105105): ZeroMQ bus lacks auth, exposing command &amp;amp; telemetry to remote attackers. Upgrade to 3.1.2 restricts access to loopback. Details: https://radar.offseq.com/threat/cve-2026-105105-cwe-306-missing-authentication-for-critical-function-in-nasa-ammos-ait-core-6642dd3ce660454d #OffSeq #CVE #SpaceSec #Infosec", "creation_timestamp": "2026-10-03T13:30:24.579975Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c0374ac4-dd72-4594-805f-26d5d580be9d/export"/>
    <published>2026-10-03T13:30:24.579975+00:00</published>
  </entry>
</feed>
