<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-27T13:20:59.322878+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3e27037e-4777-420d-b9bd-dc07fc2c1786/export</id>
    <title>3e27037e-4777-420d-b9bd-dc07fc2c1786</title>
    <updated>2026-06-27T13:20:59.348761+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3e27037e-4777-420d-b9bd-dc07fc2c1786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49237", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwbxwuwqy2n", "content": "\ud83d\udfe0 CVE-2026-49237 - High (7.8)\n\nAn issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomple...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49237/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T15:00:07.100188Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3e27037e-4777-420d-b9bd-dc07fc2c1786/export"/>
    <published>2026-05-28T15:00:07.100188+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7881abe0-22eb-4a06-8816-f20760b9230f/export</id>
    <title>7881abe0-22eb-4a06-8816-f20760b9230f</title>
    <updated>2026-06-27T13:20:59.348662+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7881abe0-22eb-4a06-8816-f20760b9230f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49238", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwby5t6o32c", "content": "\ud83d\udfe0 CVE-2026-49238 - High (8.4)\n\nAn issue was discovered in Canonical Multipass before version 1.16.3. The host-side SFTP server c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49238/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T15:00:14.408058Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7881abe0-22eb-4a06-8816-f20760b9230f/export"/>
    <published>2026-05-28T15:00:14.408058+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6ecf5bd3-36bf-42c4-8b03-bd41b4898861/export</id>
    <title>6ecf5bd3-36bf-42c4-8b03-bd41b4898861</title>
    <updated>2026-06-27T13:20:59.348560+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6ecf5bd3-36bf-42c4-8b03-bd41b4898861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49238", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmweoupup52n", "content": "CVE-2026-49238 - SFTP Server VM Escape in Canonical Multipass\nCVE ID : CVE-2026-49238\n \n Published : May 28, 2026, 2:16 p.m. | 54\u00a0minutes ago\n \n Description : An issue was discovered in Canonical Multipass before version 1.16.3. The host-side SFTP server component (sshfs_serve...", "creation_timestamp": "2026-05-28T15:48:43.785716Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6ecf5bd3-36bf-42c4-8b03-bd41b4898861/export"/>
    <published>2026-05-28T15:48:43.785716+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9f805b65-5e16-46fe-89a5-02335d9327b9/export</id>
    <title>9f805b65-5e16-46fe-89a5-02335d9327b9</title>
    <updated>2026-06-27T13:20:59.348451+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9f805b65-5e16-46fe-89a5-02335d9327b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49238", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnaea5idws2i", "content": "\ud83d\udccc CVE-2026-49238 - An issue was discovered in Canonical Multipass before version 1.16.3. The host-side SFTP server component (sshfs_server), which executes with root pri... https://www.cyberhub.blog/cves/CVE-2026-49238", "creation_timestamp": "2026-06-01T15:07:07.083962Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9f805b65-5e16-46fe-89a5-02335d9327b9/export"/>
    <published>2026-06-01T15:07:07.083962+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e4afaf98-03d2-48d8-98c0-a326fb853516/export</id>
    <title>e4afaf98-03d2-48d8-98c0-a326fb853516</title>
    <updated>2026-06-27T13:20:59.348348+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e4afaf98-03d2-48d8-98c0-a326fb853516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrykghu4t2p", "content": "CVE-2026-49235 - Routinator crashes on specifically crafted RRDP XML files\nCVE ID : CVE-2026-49235\n \n Published : June 8, 2026, 12:59 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : When Routinator encounters a file via RRDP using a specifically crafted Document Type Definitio...", "creation_timestamp": "2026-06-08T15:26:14.700095Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e4afaf98-03d2-48d8-98c0-a326fb853516/export"/>
    <published>2026-06-08T15:26:14.700095+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9a51a14b-c774-4814-8d5d-562a42442906/export</id>
    <title>9a51a14b-c774-4814-8d5d-562a42442906</title>
    <updated>2026-06-27T13:20:59.348245+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9a51a14b-c774-4814-8d5d-562a42442906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnryrdiyxt2n", "content": "CVE-2026-49233 - Routinator cache path traversal using rogue rsync URIs\nCVE ID : CVE-2026-49233\n \n Published : June 8, 2026, 12:58 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : Routinator does not properly check the module component of rsync URIs, which are used to create th...", "creation_timestamp": "2026-06-08T15:29:54.125796Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9a51a14b-c774-4814-8d5d-562a42442906/export"/>
    <published>2026-06-08T15:29:54.125796+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b656bc10-3ecc-49db-8054-76c6b47e1964/export</id>
    <title>b656bc10-3ecc-49db-8054-76c6b47e1964</title>
    <updated>2026-06-27T13:20:59.348128+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b656bc10-3ecc-49db-8054-76c6b47e1964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49234", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrzkx6ye52n", "content": "CVE-2026-49234 - Routinator crashes on specifically crafted ASN strings in the API\nCVE ID : CVE-2026-49234\n \n Published : June 8, 2026, 12:58 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : When sending a specifically crafted non-UTF-8 string as select-asn query parameter to t...", "creation_timestamp": "2026-06-08T15:44:13.824846Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b656bc10-3ecc-49db-8054-76c6b47e1964/export"/>
    <published>2026-06-08T15:44:13.824846+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/201a9ceb-4345-4793-9b59-26650f91f7b7/export</id>
    <title>201a9ceb-4345-4793-9b59-26650f91f7b7</title>
    <updated>2026-06-27T13:20:59.348009+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "201a9ceb-4345-4793-9b59-26650f91f7b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrztvspks2q", "content": "CVE-2026-49232 - Routinator exits when accepting an incoming HTTP or RTR connection fails\nCVE ID : CVE-2026-49232\n \n Published : June 8, 2026, 12:58 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : Routinator exits on any error when accepting incoming HTTP or RTR connections, i...", "creation_timestamp": "2026-06-08T15:49:14.165022Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/201a9ceb-4345-4793-9b59-26650f91f7b7/export"/>
    <published>2026-06-08T15:49:14.165022+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/660c9f80-1f63-489d-9e7c-5a4e6b8dcc98/export</id>
    <title>660c9f80-1f63-489d-9e7c-5a4e6b8dcc98</title>
    <updated>2026-06-27T13:20:59.347838+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "660c9f80-1f63-489d-9e7c-5a4e6b8dcc98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49231", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mono2yycz62k", "content": "CVE-2026-49231: Apache APISIX: Identity spoofing issue in APISIX opa plugin", "creation_timestamp": "2026-06-19T15:32:59.931628Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/660c9f80-1f63-489d-9e7c-5a4e6b8dcc98/export"/>
    <published>2026-06-19T15:32:59.931628+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9806d37f-29de-421c-9ff2-6a1f3798866e/export</id>
    <title>9806d37f-29de-421c-9ff2-6a1f3798866e</title>
    <updated>2026-06-27T13:20:59.344322+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9806d37f-29de-421c-9ff2-6a1f3798866e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49230", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3monoullf4522", "content": "CVE-2026-49230: Apache APISIX: Authentication bypass in jwe-decrypt", "creation_timestamp": "2026-06-19T15:47:18.497068Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9806d37f-29de-421c-9ff2-6a1f3798866e/export"/>
    <published>2026-06-19T15:47:18.497068+00:00</published>
  </entry>
</feed>
