<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-21T08:17:46.612345+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/427e7257-8e14-43b1-a561-bdbf07b4c170/export</id>
    <title>427e7257-8e14-43b1-a561-bdbf07b4c170</title>
    <updated>2026-08-21T08:17:46.640419+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "427e7257-8e14-43b1-a561-bdbf07b4c170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtkq3lwkrv22", "content": "\ud83d\udccc CVE-2026-72529 - A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, a... https://www.cyberhub.blog/cves/CVE-2026-72529", "creation_timestamp": "2026-08-21T02:37:06.324491Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/427e7257-8e14-43b1-a561-bdbf07b4c170/export"/>
    <published>2026-08-21T02:37:06.324491+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/59fa9b30-6ce8-4758-aa05-6fdcf8b4d6bf/export</id>
    <title>59fa9b30-6ce8-4758-aa05-6fdcf8b4d6bf</title>
    <updated>2026-08-21T08:17:46.642583+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "59fa9b30-6ce8-4758-aa05-6fdcf8b4d6bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtko3bkrlf2r", "content": "CVE-2026-72529 is trending. Hype score 9, currently #7 on cvemon.\n\nA remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-72529", "creation_timestamp": "2026-08-21T02:01:08.233999Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/59fa9b30-6ce8-4758-aa05-6fdcf8b4d6bf/export"/>
    <published>2026-08-21T02:01:08.233999+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9031c563-8488-4f7f-a135-cc7c15656a78/export</id>
    <title>9031c563-8488-4f7f-a135-cc7c15656a78</title>
    <updated>2026-08-21T08:17:46.642717+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9031c563-8488-4f7f-a135-cc7c15656a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtkk2nabh22m", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds Two Known Exploited Vulnerabilities to Catalog  #CISA (Aug 20)\n\nCVE-2026-72529 TrueConf\u30b5\u30fc\u30d0\u30fc\u306e\u91cd\u8981\u306a\u6a5f\u80fd\u306b\u5bfe\u3059\u308b\u8a8d\u8a3c\u306e\u6b20\u5982\u306e\u8106\u5f31\u6027  \nCVE-2026-72530 TrueConf\u30b5\u30fc\u30d0\u30fc\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-08-21T00:49:12.010235Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9031c563-8488-4f7f-a135-cc7c15656a78/export"/>
    <published>2026-08-21T00:49:12.010235+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e2feb816-5309-4d37-a19e-b8956c65b9cc/export</id>
    <title>e2feb816-5309-4d37-a19e-b8956c65b9cc</title>
    <updated>2026-08-21T08:17:46.642829+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e2feb816-5309-4d37-a19e-b8956c65b9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtk6wknkvi26", "content": "CISA confirms two TrueConf Server flaws, CVE-2026-72529 and CVE-2026-72530, are exploited in the wild to deliver PhantomCore malware. Patch now.\n\n#TrueConf #CVE #ExploitedInTheWild #PhantomCore #HeadMare #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T21:30:04.500659Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e2feb816-5309-4d37-a19e-b8956c65b9cc/export"/>
    <published>2026-08-20T21:30:04.500659+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e041bfad-342a-4980-ba5d-37ceda9eebbe/export</id>
    <title>e041bfad-342a-4980-ba5d-37ceda9eebbe</title>
    <updated>2026-08-21T08:17:46.642931+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e041bfad-342a-4980-ba5d-37ceda9eebbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtk4omifyo25", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-72529", "creation_timestamp": "2026-08-20T20:49:50.040958Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e041bfad-342a-4980-ba5d-37ceda9eebbe/export"/>
    <published>2026-08-20T20:49:50.040958+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bf094bd7-e98c-48de-b50e-b8b56742098a/export</id>
    <title>bf094bd7-e98c-48de-b50e-b8b56742098a</title>
    <updated>2026-08-21T08:17:46.643030+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bf094bd7-e98c-48de-b50e-b8b56742098a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117129671033700598", "content": "CISA has added two known vulnerabilities to the KEV catalogue.\n-  CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529\n-  CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA \nYesterday:\nCisco:\nCRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-20T20:15:43.944484Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bf094bd7-e98c-48de-b50e-b8b56742098a/export"/>
    <published>2026-08-20T20:15:43.944484+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b0ae4dea-8de0-4b46-bdf0-c57cdf7023c7/export</id>
    <title>b0ae4dea-8de0-4b46-bdf0-c57cdf7023c7</title>
    <updated>2026-08-21T08:17:46.643138+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b0ae4dea-8de0-4b46-bdf0-c57cdf7023c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtk2q3uhhf2n", "content": "~Cisa~\nCISA added two actively exploited TrueConf Server vulnerabilities to the KEV Catalog.\n-\nIOCs: CVE-2026-72529, CVE-2026-72530\n-\n#CISA #CVE202672529 #ThreatIntel", "creation_timestamp": "2026-08-20T20:14:52.304657Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b0ae4dea-8de0-4b46-bdf0-c57cdf7023c7/export"/>
    <published>2026-08-20T20:14:52.304657+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c7098a4c-9068-4104-90db-47835a03eae4/export</id>
    <title>c7098a4c-9068-4104-90db-47835a03eae4</title>
    <updated>2026-08-21T08:17:46.643242+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c7098a4c-9068-4104-90db-47835a03eae4", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ec1bf3f1-b350-494f-9140-1560d71cc24d", "content": "", "creation_timestamp": "2026-08-20T18:00:02.489805Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c7098a4c-9068-4104-90db-47835a03eae4/export"/>
    <published>2026-08-20T18:00:02.489805+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e160489e-6ea9-4b40-84f5-dfe8873699a2/export</id>
    <title>e160489e-6ea9-4b40-84f5-dfe8873699a2</title>
    <updated>2026-08-21T08:17:46.643343+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e160489e-6ea9-4b40-84f5-dfe8873699a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtjsbjv3cq23", "content": "\ud83d\uded1 CVE-2026-72529\nTrueConf Server\nCVSS 9.3 / EPSS 0% / KEV: No\nTL;DR: A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server\u2026\nhttps://cvesentinel.com/report/CVE-2026-72529?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-20T17:43:33.477872Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e160489e-6ea9-4b40-84f5-dfe8873699a2/export"/>
    <published>2026-08-20T17:43:33.477872+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/71b74f08-ee23-4a42-95be-741832dd0a80/export</id>
    <title>71b74f08-ee23-4a42-95be-741832dd0a80</title>
    <updated>2026-08-21T08:17:46.643442+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "71b74f08-ee23-4a42-95be-741832dd0a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72529", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthswrcnqt2m", "content": "CVE-2026-72529 - trueconf server\nTrueConf Server versions 5.3 to 5.5 have a security flaw that allows an unauthorized attacker to execute any script on the server if they have access to it over the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#trueconfserver #trueconf #CVE #infosec", "creation_timestamp": "2026-08-19T22:50:06.827448Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/71b74f08-ee23-4a42-95be-741832dd0a80/export"/>
    <published>2026-08-19T22:50:06.827448+00:00</published>
  </entry>
</feed>
