<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-24T11:04:23.464080+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/56edaed5-d4a4-4470-9878-391c22250dea/export</id>
    <title>56edaed5-d4a4-4470-9878-391c22250dea</title>
    <updated>2026-06-24T11:04:23.486329+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "56edaed5-d4a4-4470-9878-391c22250dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42856", "type": "published-proof-of-concept", "source": "https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-fj4g-2p96-q6m3", "content": "", "creation_timestamp": "2026-04-24T14:05:57.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/56edaed5-d4a4-4470-9878-391c22250dea/export"/>
    <published>2026-04-24T14:05:57+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2f28704a-be55-48a1-a123-a1628d7c8090/export</id>
    <title>2f28704a-be55-48a1-a123-a1628d7c8090</title>
    <updated>2026-06-24T11:04:23.486231+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2f28704a-be55-48a1-a123-a1628d7c8090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42858", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv5f5zlk2c", "content": "\ud83d\udfe0 CVE-2026-42858 - High (8.5)\n\nOpen edX Platform enables the authoring and delivery of online learning at any scale. The sync_pr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42858/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T18:18:42.151460Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2f28704a-be55-48a1-a123-a1628d7c8090/export"/>
    <published>2026-05-11T18:18:42.151460+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0bee0e71-2e21-49e2-9905-4e46f1a02f13/export</id>
    <title>0bee0e71-2e21-49e2-9905-4e46f1a02f13</title>
    <updated>2026-06-24T11:04:23.486128+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0bee0e71-2e21-49e2-9905-4e46f1a02f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42858", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv5f5zlk2c", "content": "\ud83d\udfe0 CVE-2026-42858 - High (8.5)\n\nOpen edX Platform enables the authoring and delivery of online learning at any scale. The sync_pr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42858/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T18:18:42.233003Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0bee0e71-2e21-49e2-9905-4e46f1a02f13/export"/>
    <published>2026-05-11T18:18:42.233003+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/44d91974-7ac2-449f-b12f-fbdb62fe013f/export</id>
    <title>44d91974-7ac2-449f-b12f-fbdb62fe013f</title>
    <updated>2026-06-24T11:04:23.486024+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "44d91974-7ac2-449f-b12f-fbdb62fe013f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42854", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlpcre43d72l", "content": "CRITICAL stack buffer overflow found in arduino-esp32 (&amp;lt;3.3.8) \u2014 attackers can trigger device crash or RCE via HTTP multipart boundary. Upgrade to 3.3.8 now. https://radar.offseq.com/threat/cve-2026-42854-cwe-121-stack-based-buffer-overflow-caa5555e #OffSeq #IoTSecurity #CVE202642854", "creation_timestamp": "2026-05-13T03:00:30.504482Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/44d91974-7ac2-449f-b12f-fbdb62fe013f/export"/>
    <published>2026-05-13T03:00:30.504482+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc607c03-39bf-4114-a911-379dec265df1/export</id>
    <title>dc607c03-39bf-4114-a911-379dec265df1</title>
    <updated>2026-06-24T11:04:23.485902+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc607c03-39bf-4114-a911-379dec265df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42854", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116565031474718182", "content": "\ud83d\udd25 CRITICAL: CVE-2026-42854 in arduino-esp32 (&amp;lt;3.3.8) enables stack buffer overflow via HTTP multipart boundary \u2014 can crash device or allow RCE. Patch ASAP by upgrading to 3.3.8! https://radar.offseq.com/threat/cve-2026-42854-cwe-121-stack-based-buffer-overflow-caa5555e #OffSeq #CVE202642854 #IoTSecurity #Espressif", "creation_timestamp": "2026-05-13T03:00:46.708605Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc607c03-39bf-4114-a911-379dec265df1/export"/>
    <published>2026-05-13T03:00:46.708605+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/67ce14eb-4cb2-42e8-9f15-79c2bed85b71/export</id>
    <title>67ce14eb-4cb2-42e8-9f15-79c2bed85b71</title>
    <updated>2026-06-24T11:04:23.484917+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "67ce14eb-4cb2-42e8-9f15-79c2bed85b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42853", "type": "published-proof-of-concept", "source": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-hcwq-x9fw-8cfq", "content": "", "creation_timestamp": "2026-05-13T19:29:14.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/67ce14eb-4cb2-42e8-9f15-79c2bed85b71/export"/>
    <published>2026-05-13T19:29:14+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3b24aea0-0557-4959-96c4-0a503f44e9e6/export</id>
    <title>3b24aea0-0557-4959-96c4-0a503f44e9e6</title>
    <updated>2026-06-24T11:04:23.484722+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3b24aea0-0557-4959-96c4-0a503f44e9e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42854", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmgeqogqkp25", "content": "\ud83d\udccc CVE-2026-42854 - arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer mu... https://www.cyberhub.blog/cves/CVE-2026-42854", "creation_timestamp": "2026-05-22T07:07:08.709118Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3b24aea0-0557-4959-96c4-0a503f44e9e6/export"/>
    <published>2026-05-22T07:07:08.709118+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5692e338-f2b9-492a-a952-622016189566/export</id>
    <title>5692e338-f2b9-492a-a952-622016189566</title>
    <updated>2026-06-24T11:04:23.484424+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5692e338-f2b9-492a-a952-622016189566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42851", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mo4rkr3aqf2m", "content": "Kitty v0.47.0\u672a\u6e80\u3067\u3001\u7aef\u672b\u306b\u66f8\u304d\u8fbc\u3081\u308b\u30d7\u30ed\u30b0\u30e9\u30e0\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u6a29\u9650\u3067\u4efb\u610f\u306ePython\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-42851 CVSS 7.8 | HIGH", "creation_timestamp": "2026-06-12T22:20:14.380056Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5692e338-f2b9-492a-a952-622016189566/export"/>
    <published>2026-06-12T22:20:14.380056+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c2882ff2-1bed-4b5d-aa4f-3ee7c2fb7943/export</id>
    <title>c2882ff2-1bed-4b5d-aa4f-3ee7c2fb7943</title>
    <updated>2026-06-24T11:04:23.484076+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c2882ff2-1bed-4b5d-aa4f-3ee7c2fb7943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42853", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo4sqe3uag2q", "content": "CVE-2026-42853 - @apostrophecms/cli: Command Injection in apos create via Unsanitized Password Input\nCVE ID : CVE-2026-42853\n \n Published : June 12, 2026, 8:37 p.m. | 46\u00a0minutes ago\n \n Description : ApostropheCMS is an open-source Node.js content management system. Versions of...", "creation_timestamp": "2026-06-12T22:43:03.630696Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c2882ff2-1bed-4b5d-aa4f-3ee7c2fb7943/export"/>
    <published>2026-06-12T22:43:03.630696+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/448c3a7f-e5c0-411b-9a4b-bedd9c458c4e/export</id>
    <title>448c3a7f-e5c0-411b-9a4b-bedd9c458c4e</title>
    <updated>2026-06-24T11:04:23.481179+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "448c3a7f-e5c0-411b-9a4b-bedd9c458c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42851", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo5yph3aqi2y", "content": "\ud83d\udfe0 CVE-2026-42851 - High (7.8)\n\nKitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, a program able to writ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42851/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T10:04:29.507104Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/448c3a7f-e5c0-411b-9a4b-bedd9c458c4e/export"/>
    <published>2026-06-13T10:04:29.507104+00:00</published>
  </entry>
</feed>
