<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-14T01:07:00.452723+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a58d7aa5-7b55-496c-859b-a9e9f74feb3a/export</id>
    <title>a58d7aa5-7b55-496c-859b-a9e9f74feb3a</title>
    <updated>2026-08-14T01:07:00.476703+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a58d7aa5-7b55-496c-859b-a9e9f74feb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117077526984432106", "content": "CVE-2026-72878 - Critical RCE in Dokploy PaaS. Backup pipeline injects user-controlled fields into shell commands, allowing authenticated admins to execute OS-level commands on the host. CVSS 9.6. Update to 0.29.13 immediately. #CVE #Dokploy #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72878/", "creation_timestamp": "2026-08-11T15:15:01.673205Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a58d7aa5-7b55-496c-859b-a9e9f74feb3a/export"/>
    <published>2026-08-11T15:15:01.673205+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/914078d5-efc9-4746-b2aa-d4f3812bfafe/export</id>
    <title>914078d5-efc9-4746-b2aa-d4f3812bfafe</title>
    <updated>2026-08-14T01:07:00.480032+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "914078d5-efc9-4746-b2aa-d4f3812bfafe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mssvrauood2p", "content": "CVE-2026-72878 - Critical RCE in Dokploy PaaS. Backup pipeline injects user-controlled fields into shell commands, allowing authenticated admins to execute OS-level commands on the host. CVSS 9.6. Update to 0.29.13 immediately. #CVE #Dokplo...\n\nhttps://www.valtersit.com/cve/CVE-2026-72878/", "creation_timestamp": "2026-08-11T15:14:50.695273Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/914078d5-efc9-4746-b2aa-d4f3812bfafe/export"/>
    <published>2026-08-11T15:14:50.695273+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/15a4b453-ccdb-46e7-a28a-df8e0a6b446e/export</id>
    <title>15a4b453-ccdb-46e7-a28a-df8e0a6b446e</title>
    <updated>2026-08-14T01:07:00.480181+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "15a4b453-ccdb-46e7-a28a-df8e0a6b446e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqwowoee625", "content": "CVE-2026-72878 - dokploy\nDokploy's backup and restore feature allows an attacker with admin access to inject malicious commands that can execute on the host machine, potentially leading to unauthorized access or data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:26:04.439113Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/15a4b453-ccdb-46e7-a28a-df8e0a6b446e/export"/>
    <published>2026-08-10T20:26:04.439113+00:00</published>
  </entry>
</feed>
