<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-23T20:38:02.422887+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c591c950-33f8-43c2-a453-54a1b6d155c0/export</id>
    <title>c591c950-33f8-43c2-a453-54a1b6d155c0</title>
    <updated>2026-07-23T20:38:02.443524+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c591c950-33f8-43c2-a453-54a1b6d155c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrcvdrnuhp2w", "content": "CVE-2026-14890 is an unpatched SGLang vulnerability enabling unauthenticated remote code execution through pickle deserialization. Restrict access now.\n\n#SGLang #CVE202614890 #RCE #Pickle #AI #LLM #CERTCC #Vulnerability", "creation_timestamp": "2026-07-23T12:59:29.065229Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c591c950-33f8-43c2-a453-54a1b6d155c0/export"/>
    <published>2026-07-23T12:59:29.065229+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/977d2857-b283-4a32-bb03-ff1215cbd4a4/export</id>
    <title>977d2857-b283-4a32-bb03-ff1215cbd4a4</title>
    <updated>2026-07-23T20:38:02.445583+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "977d2857-b283-4a32-bb03-ff1215cbd4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrvrtd76h2w", "content": "CVE-2026-14890 - sglang\nSGLang's backup feature can be exploited by a malicious actor to run unauthorized code on the system if it's enabled and accessible from the internet. This could lead to unauthorized access or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sglang #CVE #infosec", "creation_timestamp": "2026-07-16T18:52:04.319798Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/977d2857-b283-4a32-bb03-ff1215cbd4a4/export"/>
    <published>2026-07-16T18:52:04.319798+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18203dfd-6f50-4953-a27b-163e6ddafc8c/export</id>
    <title>18203dfd-6f50-4953-a27b-163e6ddafc8c</title>
    <updated>2026-07-23T20:38:02.445720+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18203dfd-6f50-4953-a27b-163e6ddafc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrlcw3ngt2i", "content": "CVE-2026-14890 - CVE-2026-14890\nCVE ID : CVE-2026-14890\n \n Published : July 16, 2026, 2:43 p.m. | 51\u00a0minutes ago\n \n Description : SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authenticat...", "creation_timestamp": "2026-07-16T15:44:46.422208Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18203dfd-6f50-4953-a27b-163e6ddafc8c/export"/>
    <published>2026-07-16T15:44:46.422208+00:00</published>
  </entry>
</feed>
