<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-16T03:36:08.856907+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ca0ae02e-7be5-420c-8643-44f59153d86d/export</id>
    <title>ca0ae02e-7be5-420c-8643-44f59153d86d</title>
    <updated>2026-06-16T03:36:08.883005+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "ca0ae02e-7be5-420c-8643-44f59153d86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45709", "type": "published-proof-of-concept", "source": "https://github.com/axllent/mailpit/security/advisories/GHSA-j3fj-qppj-fmmc", "content": "", "creation_timestamp": "2026-05-14T04:53:50.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ca0ae02e-7be5-420c-8643-44f59153d86d/export"/>
    <published>2026-05-14T04:53:50+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/83dce686-335b-447d-902e-a4ae91e64e59/export</id>
    <title>83dce686-335b-447d-902e-a4ae91e64e59</title>
    <updated>2026-06-16T03:36:08.882925+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "83dce686-335b-447d-902e-a4ae91e64e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45704", "type": "published-proof-of-concept", "source": "https://github.com/pimcore/pimcore/security/advisories/GHSA-jwcc-gv4m-93x6", "content": "", "creation_timestamp": "2026-05-26T14:01:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/83dce686-335b-447d-902e-a4ae91e64e59/export"/>
    <published>2026-05-26T14:01:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/be8ba594-0aed-4a46-afc0-534831dfba42/export</id>
    <title>be8ba594-0aed-4a46-afc0-534831dfba42</title>
    <updated>2026-06-16T03:36:08.882118+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "be8ba594-0aed-4a46-afc0-534831dfba42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45703", "type": "published-proof-of-concept", "source": "https://github.com/pimcore/pimcore/security/advisories/GHSA-332x-r494-54fq", "content": "", "creation_timestamp": "2026-05-26T14:02:51.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/be8ba594-0aed-4a46-afc0-534831dfba42/export"/>
    <published>2026-05-26T14:02:51+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/19aba68f-224e-4faa-baa1-fe91325fb09e/export</id>
    <title>19aba68f-224e-4faa-baa1-fe91325fb09e</title>
    <updated>2026-06-16T03:36:08.882042+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "19aba68f-224e-4faa-baa1-fe91325fb09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45707", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyshiifaa2m", "content": "\ud83d\udfe0 CVE-2026-45707 - High (8.1)\n\nn8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45707/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-29T15:00:28.493271Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/19aba68f-224e-4faa-baa1-fe91325fb09e/export"/>
    <published>2026-05-29T15:00:28.493271+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f72b97c8-c610-41a0-ba7e-68068290c8e2/export</id>
    <title>f72b97c8-c610-41a0-ba7e-68068290c8e2</title>
    <updated>2026-06-16T03:36:08.881937+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f72b97c8-c610-41a0-ba7e-68068290c8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45707", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmyx4hyvj52m", "content": "CVE-2026-45707 - n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete\nCVE ID : CVE-2026-45707\n \n Published : May 29, 2026, 2:16 p.m. | 55\u00a0minutes ago\n \n Description : n8n-MCP is an MCP server that provides A...", "creation_timestamp": "2026-05-29T16:23:47.111207Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f72b97c8-c610-41a0-ba7e-68068290c8e2/export"/>
    <published>2026-05-29T16:23:47.111207+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0e376da6-6a70-4baf-85e6-159d4d48344e/export</id>
    <title>0e376da6-6a70-4baf-85e6-159d4d48344e</title>
    <updated>2026-06-16T03:36:08.881779+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0e376da6-6a70-4baf-85e6-159d4d48344e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzjgvrvso2x", "content": "CVE-2026-45700 - Heap-buffer-overflow write in planar bitmap decoder\nCVE ID : CVE-2026-45700\n \n Published : May 29, 2026, 8:16 p.m. | 16\u00a0minutes ago\n \n Description : FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decod...", "creation_timestamp": "2026-05-29T21:51:44.309596Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0e376da6-6a70-4baf-85e6-159d4d48344e/export"/>
    <published>2026-05-29T21:51:44.309596+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4e902289-6ad6-4d77-bce6-5c9e29d0223a/export</id>
    <title>4e902289-6ad6-4d77-bce6-5c9e29d0223a</title>
    <updated>2026-06-16T03:36:08.881500+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4e902289-6ad6-4d77-bce6-5c9e29d0223a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnfyspp2iz27", "content": "CVE-2026-45702 - OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic\nCVE ID : CVE-2026-45702\n \n Published : June 3, 2026, 7:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a ...", "creation_timestamp": "2026-06-03T20:58:43.484527Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4e902289-6ad6-4d77-bce6-5c9e29d0223a/export"/>
    <published>2026-06-03T20:58:43.484527+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ecfac6f6-d2af-4efd-8935-892bbe7413e8/export</id>
    <title>ecfac6f6-d2af-4efd-8935-892bbe7413e8</title>
    <updated>2026-06-16T03:36:08.881205+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ecfac6f6-d2af-4efd-8935-892bbe7413e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45700", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hjyl4kl2d", "content": "\ud83d\udea8 CRITICAL: CVE-2026-45700 \u2014 CVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nFreeRDP &amp;lt; 3.26.0 \u2014 Out-of-bounds heap write in planar bitmap decoder when processing RLE-compressed bitmap data. Remote code execution via crafted RDP session.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 FreeRDP\n  \u2022 Remote Desktop Clients\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nRe", "creation_timestamp": "2026-06-12T19:20:51.110147Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ecfac6f6-d2af-4efd-8935-892bbe7413e8/export"/>
    <published>2026-06-12T19:20:51.110147+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/057f1d2c-2dab-4359-9288-642176faab10/export</id>
    <title>057f1d2c-2dab-4359-9288-642176faab10</title>
    <updated>2026-06-16T03:36:08.880855+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "057f1d2c-2dab-4359-9288-642176faab10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45700", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mo4hq5d7mw26", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-45700\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nFreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c, freerdp_bitmap_decompress_planar", "creation_timestamp": "2026-06-12T19:24:17.486327Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/057f1d2c-2dab-4359-9288-642176faab10/export"/>
    <published>2026-06-12T19:24:17.486327+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/505e800b-99a0-4c66-a5ea-957ea62a4dc1/export</id>
    <title>505e800b-99a0-4c66-a5ea-957ea62a4dc1</title>
    <updated>2026-06-16T03:36:08.878061+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "505e800b-99a0-4c66-a5ea-957ea62a4dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45700", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobw3jihkl2p", "content": "\ud83d\udea8  ALERT: CVE-2026-45700\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\n\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Unknown\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown vector\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  1. Check if you're running affected software NOW\n  2. Apply patches immediately ", "creation_timestamp": "2026-06-14T23:24:30.241440Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/505e800b-99a0-4c66-a5ea-957ea62a4dc1/export"/>
    <published>2026-06-14T23:24:30.241440+00:00</published>
  </entry>
</feed>
