<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-27T15:37:09.879731+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/360e4f17-0b8c-44dc-ac7e-34c62e6253ca/export</id>
    <title>360e4f17-0b8c-44dc-ac7e-34c62e6253ca</title>
    <updated>2026-06-27T15:37:09.907016+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "360e4f17-0b8c-44dc-ac7e-34c62e6253ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6wgd2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:57.052037Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/360e4f17-0b8c-44dc-ac7e-34c62e6253ca/export"/>
    <published>2026-06-09T14:52:57.052037+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8e6a078f-0fcd-41e7-b826-9ee2ccfa6b70/export</id>
    <title>8e6a078f-0fcd-41e7-b826-9ee2ccfa6b70</title>
    <updated>2026-06-27T15:37:09.906919+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8e6a078f-0fcd-41e7-b826-9ee2ccfa6b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6xfl2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:58.410789Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8e6a078f-0fcd-41e7-b826-9ee2ccfa6b70/export"/>
    <published>2026-06-09T14:52:58.410789+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/edaa0fb1-d023-4518-8141-f42ddd2c6169/export</id>
    <title>edaa0fb1-d023-4518-8141-f42ddd2c6169</title>
    <updated>2026-06-27T15:37:09.906822+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "edaa0fb1-d023-4518-8141-f42ddd2c6169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6xfm2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:59.941845Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/edaa0fb1-d023-4518-8141-f42ddd2c6169/export"/>
    <published>2026-06-09T14:52:59.941845+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/57e25469-b000-4ef2-baec-f2f246c101cf/export</id>
    <title>57e25469-b000-4ef2-baec-f2f246c101cf</title>
    <updated>2026-06-27T15:37:09.906720+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "57e25469-b000-4ef2-baec-f2f246c101cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6yeu2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:53:01.229709Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/57e25469-b000-4ef2-baec-f2f246c101cf/export"/>
    <published>2026-06-09T14:53:01.229709+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1900c68e-a896-49ea-a8b6-4ec47ffc4a59/export</id>
    <title>1900c68e-a896-49ea-a8b6-4ec47ffc4a59</title>
    <updated>2026-06-27T15:37:09.906618+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1900c68e-a896-49ea-a8b6-4ec47ffc4a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnuhl5u5352d", "content": "SAP released 15 June 2026 security notes, including 4 critical fixes for NetWeaver, Commerce Cloud, and Data Hub. CVE-2026-44748 in NetWeaver AS ABAP scores 9.9 and impacts XML Signature Wrapping. #SAP #NetWeaver #CommerceCloud", "creation_timestamp": "2026-06-09T15:00:12.345726Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1900c68e-a896-49ea-a8b6-4ec47ffc4a59/export"/>
    <published>2026-06-09T15:00:12.345726+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/37fd7344-b067-4c76-86e9-b41a20f810f1/export</id>
    <title>37fd7344-b067-4c76-86e9-b41a20f810f1</title>
    <updated>2026-06-27T15:37:09.906477+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "37fd7344-b067-4c76-86e9-b41a20f810f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnv67dcpyh2j", "content": "SAP&amp;#039;s June 2026 patch fixes 15 flaws, including 4 critical issues in NetWeaver and Commerce Cloud. CVE-2026-44748 and CVE-2026-27671 may enable auth bypass, memory corruption, and directory traversal. #SAP #NetWeaver #CommerceCloud", "creation_timestamp": "2026-06-09T21:45:12.155189Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/37fd7344-b067-4c76-86e9-b41a20f810f1/export"/>
    <published>2026-06-09T21:45:12.155189+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9c679a9e-3242-44b9-8131-d78a0a381df6/export</id>
    <title>9c679a9e-3242-44b9-8131-d78a0a381df6</title>
    <updated>2026-06-27T15:37:09.905333+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "9c679a9e-3242-44b9-8131-d78a0a381df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://www.cert.se/2026/06/patchtisdag-juni-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-06-10T05:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9c679a9e-3242-44b9-8131-d78a0a381df6/export"/>
    <published>2026-06-10T05:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/78661643-8fc2-4b42-9bf3-930fbc09acad/export</id>
    <title>78661643-8fc2-4b42-9bf3-930fbc09acad</title>
    <updated>2026-06-27T15:37:09.905226+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "78661643-8fc2-4b42-9bf3-930fbc09acad", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44742", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6ba9994-41dc-45f7-b8e9-ac330a61d59b", "content": "", "creation_timestamp": "2026-06-19T12:45:12.328196Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/78661643-8fc2-4b42-9bf3-930fbc09acad/export"/>
    <published>2026-06-19T12:45:12.328196+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ba4fe40b-0d52-4246-9ade-d745d1207b82/export</id>
    <title>ba4fe40b-0d52-4246-9ade-d745d1207b82</title>
    <updated>2026-06-27T15:37:09.905081+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ba4fe40b-0d52-4246-9ade-d745d1207b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44748", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnj6kkp32f", "content": "\ud83d\udea8  ALERT: CVE-2026-44748\n\nCVSS 9.9/10\n\n\ud83d\udccb WHAT IT IS:\nSAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered iden", "creation_timestamp": "2026-06-22T00:39:00.224804Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ba4fe40b-0d52-4246-9ade-d745d1207b82/export"/>
    <published>2026-06-22T00:39:00.224804+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aff1ec70-3788-454f-95d6-dd9da060af20/export</id>
    <title>aff1ec70-3788-454f-95d6-dd9da060af20</title>
    <updated>2026-06-27T15:37:09.902227+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aff1ec70-3788-454f-95d6-dd9da060af20", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44742", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c4015df2-c2aa-475a-9fd4-f457982e3f51", "content": "", "creation_timestamp": "2026-06-23T14:03:38.367244Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aff1ec70-3788-454f-95d6-dd9da060af20/export"/>
    <published>2026-06-23T14:03:38.367244+00:00</published>
  </entry>
</feed>
