<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-29T22:29:31.837172+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3e98e8d7-feda-4804-addb-cb77fcc75d91/export</id>
    <title>3e98e8d7-feda-4804-addb-cb77fcc75d91</title>
    <updated>2026-08-29T22:29:31.861273+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3e98e8d7-feda-4804-addb-cb77fcc75d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mua6hazcn42e", "content": "CVE-2026-80428 - ilias\nThe ILIAS learning platform\u2019s logout URL can be called by anyone, even without logging in. When it runs, it automatically converts stored session information into live objects without validation,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ilias #CVE #infosec", "creation_timestamp": "2026-08-29T15:20:12.302914Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3e98e8d7-feda-4804-addb-cb77fcc75d91/export"/>
    <published>2026-08-29T15:20:12.302914+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4a3f460f-1c73-4191-9071-a168fc0c5f7d/export</id>
    <title>4a3f460f-1c73-4191-9071-a168fc0c5f7d</title>
    <updated>2026-08-29T22:29:31.862844+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4a3f460f-1c73-4191-9071-a168fc0c5f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtywgihb3z2y", "content": "\ud83d\udea8 CVE-2026-80428 \u2014 CVSS 9.3 CRITICAL\n\nILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel endpoint ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-80428\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-26T18:07:56.524067Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4a3f460f-1c73-4191-9071-a168fc0c5f7d/export"/>
    <published>2026-08-26T18:07:56.524067+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eb7b2d5f-ef30-4bc0-849d-4a4e16d30d57/export</id>
    <title>eb7b2d5f-ef30-4bc0-849d-4a4e16d30d57</title>
    <updated>2026-08-29T22:29:31.862987+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eb7b2d5f-ef30-4bc0-849d-4a4e16d30d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtyw22q63722", "content": "\ud83d\udd34 CVE-2026-80428 - Critical (9.8)\n\nILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-80428/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T18:00:54.392378Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eb7b2d5f-ef30-4bc0-849d-4a4e16d30d57/export"/>
    <published>2026-08-26T18:00:54.392378+00:00</published>
  </entry>
</feed>
