https://vulnerability.circl.lu/sightings/feed 2026-08-12T09:04:09.329737+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/85edb4bf-b6e9-4df2-939d-e4e589da9540/export 2026-08-12T09:04:09.358512+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "85edb4bf-b6e9-4df2-939d-e4e589da9540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72581", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117071813538439961", "content": "CVE-2026-72581 - SSRF in duhow/xiaoai-patch lets attackers hit internal networks via Xiaomi smart speaker. CVSS 8.6. Unpatched. Block access or update once fixed. #CVE #infosec #IoT\nhttps://www.valtersit.com/cve/CVE-2026-72581/", "creation_timestamp": "2026-08-10T15:03:02.887586Z"} 2026-08-10T15:03:02.887586+00:00 https://vulnerability.circl.lu/sighting/3a913e8c-5db0-4570-b4d0-fb6f7beed246/export 2026-08-12T09:04:09.361580+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3a913e8c-5db0-4570-b4d0-fb6f7beed246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72581", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msqel3mkyb22", "content": "CVE-2026-72581 - SSRF in duhow/xiaoai-patch lets attackers hit internal networks via Xiaomi smart speaker. CVSS 8.6. Unpatched. Block access or update once fixed. #CVE #infosec #IoT\n\nhttps://www.valtersit.com/cve/CVE-2026-72581/", "creation_timestamp": "2026-08-10T15:01:48.237081Z"} 2026-08-10T15:01:48.237081+00:00 https://vulnerability.circl.lu/sighting/944ccda3-7645-402d-8165-db341a957230/export 2026-08-12T09:04:09.361719+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "944ccda3-7645-402d-8165-db341a957230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fg6gdf2cjbu76", "content": "CVE-2026-72581 - duhow xiaoai-patch - Server-Side Request Forgery in /auth Endpoint\nCVE ID : CVE-2026-72581\n \n Published : Aug. 10, 2026, 11:17 a.m. | 43\u00a0minutes ago\n \n Description : A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb0704...", "creation_timestamp": "2026-08-10T12:04:41.812754Z"} 2026-08-10T12:04:41.812754+00:00