<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-18T13:04:15.542723+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7d7ef797-1c90-4d54-afbc-5b35a9713002/export</id>
    <title>7d7ef797-1c90-4d54-afbc-5b35a9713002</title>
    <updated>2026-06-18T13:04:15.556237+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7d7ef797-1c90-4d54-afbc-5b35a9713002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnkvpixkry26", "content": "CVE-2026-45750 - Termix Vulnerable to Arbitrary Command Execution in File Manager\nCVE ID : CVE-2026-45750\n \n Published : June 5, 2026, 6:17 p.m. | 57\u00a0minutes ago\n \n Description : Termix is a web-based server management platform with SSH terminal, tunneling, and file editing ca...", "creation_timestamp": "2026-06-05T19:46:33.213013Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7d7ef797-1c90-4d54-afbc-5b35a9713002/export"/>
    <published>2026-06-05T19:46:33.213013+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fe0e3427-a838-48ab-be1b-0356da1b0ace/export</id>
    <title>fe0e3427-a838-48ab-be1b-0356da1b0ace</title>
    <updated>2026-06-18T13:04:15.556159+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fe0e3427-a838-48ab-be1b-0356da1b0ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45750", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkwktpurz2b", "content": "\ud83d\udd34 CVE-2026-45750 - Critical (9)\n\nTermix is a web-based server management platform with SSH terminal, tunneling, and file editing c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45750/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T20:01:51.977827Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fe0e3427-a838-48ab-be1b-0356da1b0ace/export"/>
    <published>2026-06-05T20:01:51.977827+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/827c9aa7-a85d-42c1-9c85-c9915b0020d0/export</id>
    <title>827c9aa7-a85d-42c1-9c85-c9915b0020d0</title>
    <updated>2026-06-18T13:04:15.556081+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "827c9aa7-a85d-42c1-9c85-c9915b0020d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnkypx7yrf2l", "content": "CVE-2026-45758 - Malicious code in guardrails-ai 0.10.1 (supply chain compromise)\nCVE ID : CVE-2026-45758\n \n Published : June 5, 2026, 8:17 p.m. | 15\u00a0minutes ago\n \n Description : Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approxima...", "creation_timestamp": "2026-06-05T20:40:29.581622Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/827c9aa7-a85d-42c1-9c85-c9915b0020d0/export"/>
    <published>2026-06-05T20:40:29.581622+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/96d2e0f6-13f8-4cb6-b2cd-d250c16f78e5/export</id>
    <title>96d2e0f6-13f8-4cb6-b2cd-d250c16f78e5</title>
    <updated>2026-06-18T13:04:15.556000+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "96d2e0f6-13f8-4cb6-b2cd-d250c16f78e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45758", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkztgtj2x2b", "content": "\ud83d\udd34 CVE-2026-45758 - Critical (9.6)\n\nGuardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approxim...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45758/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T21:00:21.145921Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/96d2e0f6-13f8-4cb6-b2cd-d250c16f78e5/export"/>
    <published>2026-06-05T21:00:21.145921+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d197b9e0-35fb-4917-bd9c-2dc8b82ec5e2/export</id>
    <title>d197b9e0-35fb-4917-bd9c-2dc8b82ec5e2</title>
    <updated>2026-06-18T13:04:15.555919+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d197b9e0-35fb-4917-bd9c-2dc8b82ec5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45758", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnlxza77nx2p", "content": "CRITICAL: Malicious guardrails-ai v0.10.1 on PyPI risked credential leaks. Upgrade to 0.10.2 or downgrade now. Rotate credentials &amp;amp; audit GitHub if affected. More: https://radar.offseq.com/threat/cve-2026-45758-cwe-506-embedded-malicious-code-in--296c81fb #OffSeq #infosec #Python", "creation_timestamp": "2026-06-06T06:00:27.414542Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d197b9e0-35fb-4917-bd9c-2dc8b82ec5e2/export"/>
    <published>2026-06-06T06:00:27.414542+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e7fde595-e053-4aa3-8840-aca0eff6e167/export</id>
    <title>e7fde595-e053-4aa3-8840-aca0eff6e167</title>
    <updated>2026-06-18T13:04:15.555832+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e7fde595-e053-4aa3-8840-aca0eff6e167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45758", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116701634540314139", "content": "\ud83d\udea9 CRITICAL threat: guardrails-ai 0.10.1 (PyPI) was malicious for ~2 hrs, risking credential theft. No exfil evidence, but rotate keys &amp;amp; audit if installed. Upgrade to 0.10.2 or downgrade to 0.10.0. CVE-2026-45758 https://radar.offseq.com/threat/cve-2026-45758-cwe-506-embedded-malicious-code-in--296c81fb #OffSeq #infosec #supplychain", "creation_timestamp": "2026-06-06T06:00:39.480141Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e7fde595-e053-4aa3-8840-aca0eff6e167/export"/>
    <published>2026-06-06T06:00:39.480141+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/00a78bfa-6635-4b6f-865f-df44929fd30d/export</id>
    <title>00a78bfa-6635-4b6f-865f-df44929fd30d</title>
    <updated>2026-06-18T13:04:15.555740+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "00a78bfa-6635-4b6f-865f-df44929fd30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45750", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mno3l4i72n2y", "content": "CVE-2026-45750 - Critical OS Command Injection in Termix. Unpatched. CVSS 9.0. Exploitable via file manager path parameter. Upgrade to 2.3.2 or restrict access immediately. #CVE #infosec #Termix\n\nhttps://www.valtersit.com/cve/CVE-2026-45750/", "creation_timestamp": "2026-06-07T02:09:27.796658Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/00a78bfa-6635-4b6f-865f-df44929fd30d/export"/>
    <published>2026-06-07T02:09:27.796658+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4fee7005-4957-48d8-8bd0-f78edd882142/export</id>
    <title>4fee7005-4957-48d8-8bd0-f78edd882142</title>
    <updated>2026-06-18T13:04:15.555644+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4fee7005-4957-48d8-8bd0-f78edd882142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45758", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mns676o4oy2x", "content": "\ud83d\udccc CVE-2026-45758 - Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malici... https://www.cyberhub.blog/cves/CVE-2026-45758", "creation_timestamp": "2026-06-08T17:07:07.759765Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4fee7005-4957-48d8-8bd0-f78edd882142/export"/>
    <published>2026-06-08T17:07:07.759765+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0eac0fa9-3ca7-4500-a769-9aa33f3871e3/export</id>
    <title>0eac0fa9-3ca7-4500-a769-9aa33f3871e3</title>
    <updated>2026-06-18T13:04:15.555441+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0eac0fa9-3ca7-4500-a769-9aa33f3871e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45750", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mns7urry4r2b", "content": "\ud83d\udccc CVE-2026-45750 - Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/fil... https://www.cyberhub.blog/cves/CVE-2026-45750", "creation_timestamp": "2026-06-08T17:37:05.934140Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0eac0fa9-3ca7-4500-a769-9aa33f3871e3/export"/>
    <published>2026-06-08T17:37:05.934140+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e491f813-002a-4422-8add-79ff21ad7b54/export</id>
    <title>e491f813-002a-4422-8add-79ff21ad7b54</title>
    <updated>2026-06-18T13:04:15.552455+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e491f813-002a-4422-8add-79ff21ad7b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45758", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mo3zequknl2s", "content": "\ud83d\udea8 Krytyczna luka w guardrails-ai: z\u0142o\u015bliwy pakiet w PyPI krad\u0142 klucze API\n\nZidentyfikowano krytyczn\u0105 luk\u0119 CVE-2026-45758 (CVSS 9.6) w pakiecie Pythona guardrails-ai. Z\u0142o\u015bliwa wersja 0.10.1,\n\nhttps://cyberowi.pl/krytyczna-luka-w-guardrails-ai-zosliwy-pakiet-w-pypi-krad/\n\n#cyberbezpieczenstwo", "creation_timestamp": "2026-06-12T15:07:22.836814Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e491f813-002a-4422-8add-79ff21ad7b54/export"/>
    <published>2026-06-12T15:07:22.836814+00:00</published>
  </entry>
</feed>
