<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-23T23:55:14.072660+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/50ada469-c3b5-4513-9081-4f726902fe15/export</id>
    <title>50ada469-c3b5-4513-9081-4f726902fe15</title>
    <updated>2026-06-23T23:55:14.096110+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "50ada469-c3b5-4513-9081-4f726902fe15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35678", "type": "published-proof-of-concept", "source": "Telegram/vk3FldMzdx_13t7ttv05ttLKGzStNIAl9gbsU1WEL8nWdI0", "content": "", "creation_timestamp": "2026-04-06T15:00:15.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/50ada469-c3b5-4513-9081-4f726902fe15/export"/>
    <published>2026-04-06T15:00:15+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/29aed55e-66e9-47d6-9d0f-adc4ccb0e0a0/export</id>
    <title>29aed55e-66e9-47d6-9d0f-adc4ccb0e0a0</title>
    <updated>2026-06-23T23:55:14.096044+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "29aed55e-66e9-47d6-9d0f-adc4ccb0e0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35670", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj5xyakirt2z", "content": "", "creation_timestamp": "2026-04-10T18:41:50.981369Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/29aed55e-66e9-47d6-9d0f-adc4ccb0e0a0/export"/>
    <published>2026-04-10T18:41:50.981369+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bc273f40-29b8-4139-ae0b-0ada874f4975/export</id>
    <title>bc273f40-29b8-4139-ae0b-0ada874f4975</title>
    <updated>2026-06-23T23:55:14.095978+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "bc273f40-29b8-4139-ae0b-0ada874f4975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35676", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-9qv9-8xv6-5p35", "content": "", "creation_timestamp": "2026-05-20T15:45:53.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bc273f40-29b8-4139-ae0b-0ada874f4975/export"/>
    <published>2026-05-20T15:45:53+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dd9b0907-0b35-4a71-b3aa-7b9e7ffae136/export</id>
    <title>dd9b0907-0b35-4a71-b3aa-7b9e7ffae136</title>
    <updated>2026-06-23T23:55:14.095910+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "dd9b0907-0b35-4a71-b3aa-7b9e7ffae136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35671", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-xvp4-phqj-cjr3", "content": "", "creation_timestamp": "2026-05-20T15:46:17.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dd9b0907-0b35-4a71-b3aa-7b9e7ffae136/export"/>
    <published>2026-05-20T15:46:17+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e7e68e98-7127-4929-a875-7d62970bc902/export</id>
    <title>e7e68e98-7127-4929-a875-7d62970bc902</title>
    <updated>2026-06-23T23:55:14.095827+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "e7e68e98-7127-4929-a875-7d62970bc902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35672", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-gp95-j463-vv28", "content": "", "creation_timestamp": "2026-05-20T15:46:42.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e7e68e98-7127-4929-a875-7d62970bc902/export"/>
    <published>2026-05-20T15:46:42+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ce08d61a-c40a-4eca-8395-b408d874d3c3/export</id>
    <title>ce08d61a-c40a-4eca-8395-b408d874d3c3</title>
    <updated>2026-06-23T23:55:14.094892+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "ce08d61a-c40a-4eca-8395-b408d874d3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-35675", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-w9xh-5f39-vq89", "content": "", "creation_timestamp": "2026-05-20T15:46:55.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ce08d61a-c40a-4eca-8395-b408d874d3c3/export"/>
    <published>2026-05-20T15:46:55+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3addc85b-58c8-45a0-b5fb-f3790f3cce80/export</id>
    <title>3addc85b-58c8-45a0-b5fb-f3790f3cce80</title>
    <updated>2026-06-23T23:55:14.094815+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3addc85b-58c8-45a0-b5fb-f3790f3cce80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35675", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjubgrpa2h", "content": "CVE-2026-35675 - phpMyFAQ - Authentication Bypass via Missing Password Reset Token in /api/user/password/update\nCVE ID : CVE-2026-35675\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : phpMyFAQ before 4.1.3 contains an authentication bypass vulnerabilit...", "creation_timestamp": "2026-05-28T17:21:13.475037Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3addc85b-58c8-45a0-b5fb-f3790f3cce80/export"/>
    <published>2026-05-28T17:21:13.475037+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/de7cb34f-175c-497c-9ae0-1a8bb6c67643/export</id>
    <title>de7cb34f-175c-497c-9ae0-1a8bb6c67643</title>
    <updated>2026-06-23T23:55:14.094736+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "de7cb34f-175c-497c-9ae0-1a8bb6c67643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35676", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmwklaw3se2c", "content": "CVE-2026-35676 - phpMyFAQ - Unauthenticated Password Reset via User Password Update Endpoint\nCVE ID : CVE-2026-35676\n \n Published : May 28, 2026, 4:16 p.m. | 15\u00a0minutes ago\n \n Description : phpMyFAQ before 4.1.3 contains an unauthenticated password reset vulnerability in the u...", "creation_timestamp": "2026-05-28T17:34:05.894065Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/de7cb34f-175c-497c-9ae0-1a8bb6c67643/export"/>
    <published>2026-05-28T17:34:05.894065+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cdbb7868-2974-46d4-a132-4b1e386a6d19/export</id>
    <title>cdbb7868-2974-46d4-a132-4b1e386a6d19</title>
    <updated>2026-06-23T23:55:14.094633+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cdbb7868-2974-46d4-a132-4b1e386a6d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35674", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyza6ggmm2p", "content": "\ud83d\udfe0 CVE-2026-35674 - High (8.8)\n\nOpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-35674/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T17:01:39.369004Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cdbb7868-2974-46d4-a132-4b1e386a6d19/export"/>
    <published>2026-05-29T17:01:39.369004+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/32483219-ed1b-4926-8e2a-fdcbd3b5006d/export</id>
    <title>32483219-ed1b-4926-8e2a-fdcbd3b5006d</title>
    <updated>2026-06-23T23:55:14.091011+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "32483219-ed1b-4926-8e2a-fdcbd3b5006d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35674", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnaydvpfyc2r", "content": "\ud83d\udccc CVE-2026-35674 - OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged comman... https://www.cyberhub.blog/cves/CVE-2026-35674", "creation_timestamp": "2026-06-01T21:07:07.932153Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/32483219-ed1b-4926-8e2a-fdcbd3b5006d/export"/>
    <published>2026-06-01T21:07:07.932153+00:00</published>
  </entry>
</feed>
