<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-22T13:38:06.760096+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3f6163a2-91cf-4834-a117-64a56e86d2de/export</id>
    <title>3f6163a2-91cf-4834-a117-64a56e86d2de</title>
    <updated>2026-06-22T13:38:06.781233+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3f6163a2-91cf-4834-a117-64a56e86d2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45323", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mng6cmphwd2o", "content": "\ud83d\udccc CVE-2026-45323 - MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-c... https://www.cyberhub.blog/cves/CVE-2026-45323", "creation_timestamp": "2026-06-03T22:37:06.633233Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3f6163a2-91cf-4834-a117-64a56e86d2de/export"/>
    <published>2026-06-03T22:37:06.633233+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/87329e31-ea47-48d8-8499-1664ddb98080/export</id>
    <title>87329e31-ea47-48d8-8499-1664ddb98080</title>
    <updated>2026-06-22T13:38:06.781156+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "87329e31-ea47-48d8-8499-1664ddb98080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45327", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnkueer6lc27", "content": "CVE-2026-45327 - TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection\nCVE ID : CVE-2026-45327\n \n Published : June 5, 2026, 6:17 p.m. | 57\u00a0minutes ago\n \n Description : TinyIce is a streaming server for audio and video. In versions 0.8.9...", "creation_timestamp": "2026-06-05T19:22:25.996896Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/87329e31-ea47-48d8-8499-1664ddb98080/export"/>
    <published>2026-06-05T19:22:25.996896+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4d0672eb-ec6d-469a-a819-09f98853b4ed/export</id>
    <title>4d0672eb-ec6d-469a-a819-09f98853b4ed</title>
    <updated>2026-06-22T13:38:06.781083+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4d0672eb-ec6d-469a-a819-09f98853b4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45327", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlalinpd32r", "content": "\ud83d\udfe0 CVE-2026-45327 - High (8.2)\n\nTinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missing auth...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45327/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T23:01:11.438408Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4d0672eb-ec6d-469a-a819-09f98853b4ed/export"/>
    <published>2026-06-05T23:01:11.438408+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ac545a0b-89b4-4086-8960-5a7093a3ceb7/export</id>
    <title>ac545a0b-89b4-4086-8960-5a7093a3ceb7</title>
    <updated>2026-06-22T13:38:06.781007+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ac545a0b-89b4-4086-8960-5a7093a3ceb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45327", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnqwes62e22s", "content": "CVE-2026-45327 - CSRF in Tinyice streaming server. Unauthenticated WebRTC stream injection via missing auth. CVSS 8.2. No patch available. Mitigate by restricting network access immediately. #CVE #infosec #Tinyice\n\nhttps://www.valtersit.com/cve/CVE-2026-45327/", "creation_timestamp": "2026-06-08T05:14:26.041258Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ac545a0b-89b4-4086-8960-5a7093a3ceb7/export"/>
    <published>2026-06-08T05:14:26.041258+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/957acb25-ef7f-4a6d-a059-703f0d2fe016/export</id>
    <title>957acb25-ef7f-4a6d-a059-703f0d2fe016</title>
    <updated>2026-06-22T13:38:06.780926+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "957acb25-ef7f-4a6d-a059-703f0d2fe016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45328", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvpsfjeoy27", "content": "\ud83d\udd34 CVE-2026-45328 - Critical (9.3)\n\nESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45328/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T03:00:07.978440Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/957acb25-ef7f-4a6d-a059-703f0d2fe016/export"/>
    <published>2026-06-10T03:00:07.978440+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/824cbfd2-365d-440a-a62a-9742f442fd2e/export</id>
    <title>824cbfd2-365d-440a-a62a-9742f442fd2e</title>
    <updated>2026-06-22T13:38:06.780838+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "824cbfd2-365d-440a-a62a-9742f442fd2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45328", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116723576453195786", "content": "\ud83d\udea8 CRITICAL: CVE-2026-45328 impacts esp-idf 5.5.4 &amp;amp; 6.0 \u2014 improper input validation in esp_tee could enable privilege escalation or disrupt secure hardware ops. Patch to 5.5.5/6.0.1 now! https://radar.offseq.com/threat/cve-2026-45328-cwe-20-improper-input-validation-in-93c234d5 #OffSeq #IoTSecurity #CVE202645328", "creation_timestamp": "2026-06-10T03:00:38.960571Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/824cbfd2-365d-440a-a62a-9742f442fd2e/export"/>
    <published>2026-06-10T03:00:38.960571+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4c0f5831-c82f-42e2-822e-0743e9cd5253/export</id>
    <title>4c0f5831-c82f-42e2-822e-0743e9cd5253</title>
    <updated>2026-06-22T13:38:06.780758+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4c0f5831-c82f-42e2-822e-0743e9cd5253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45328", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnvptb6a662v", "content": "Espressif esp-idf 5.5.4 &amp;amp; 6.0 face a CRITICAL flaw in esp_tee \u2014 improper input validation risks full system compromise. Upgrade to 5.5.5/6.0.1 now! \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-45328-cwe-20-improper-input-validation-in-93c234d5 #OffSeq #CVE202645328 #PatchNow", "creation_timestamp": "2026-06-10T03:00:44.293535Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4c0f5831-c82f-42e2-822e-0743e9cd5253/export"/>
    <published>2026-06-10T03:00:44.293535+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/939e2385-40cc-4edd-a18c-993cc954c591/export</id>
    <title>939e2385-40cc-4edd-a18c-993cc954c591</title>
    <updated>2026-06-22T13:38:06.780674+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "939e2385-40cc-4edd-a18c-993cc954c591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45328", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnzxy5gq5o22", "content": "\ud83d\udccc CVE-2026-45328 - ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrapp... https://www.cyberhub.blog/cves/CVE-2026-45328", "creation_timestamp": "2026-06-11T19:37:07.194207Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/939e2385-40cc-4edd-a18c-993cc954c591/export"/>
    <published>2026-06-11T19:37:07.194207+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dbe1be11-4a7d-4a0a-ab91-e71d602b4295/export</id>
    <title>dbe1be11-4a7d-4a0a-ab91-e71d602b4295</title>
    <updated>2026-06-22T13:38:06.780540+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dbe1be11-4a7d-4a0a-ab91-e71d602b4295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45328", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mnzxy7bcb22y", "content": "\ud83d\udccc CVE-2026-45328 - ESF-IDF is the Espressif Internet of Potatoes (IOT) Development Framework. In versions 5.5.4 and 6.0, the esp_tee component exposes secure-service wrapp... https://www.potatohub.blog/cves/CVE-2026-45328", "creation_timestamp": "2026-06-11T19:37:08.536024Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dbe1be11-4a7d-4a0a-ab91-e71d602b4295/export"/>
    <published>2026-06-11T19:37:08.536024+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/38e93563-dca9-467a-a7d9-5187720803fa/export</id>
    <title>38e93563-dca9-467a-a7d9-5187720803fa</title>
    <updated>2026-06-22T13:38:06.777403+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "38e93563-dca9-467a-a7d9-5187720803fa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45321", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/646904ac-0f74-4e7b-bea3-53df73dc0315", "content": "", "creation_timestamp": "2026-06-19T12:45:32.749157Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/38e93563-dca9-467a-a7d9-5187720803fa/export"/>
    <published>2026-06-19T12:45:32.749157+00:00</published>
  </entry>
</feed>
