<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-01T16:54:26.934878+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e5cb71e7-11d3-46c8-9f88-8d6a91700cce/export</id>
    <title>e5cb71e7-11d3-46c8-9f88-8d6a91700cce</title>
    <updated>2026-10-01T16:54:26.965339+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e5cb71e7-11d3-46c8-9f88-8d6a91700cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwnx34ls7o2c", "content": "\ud83d\udfe0 CVE-2026-84739 - High (8.7)\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84739/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T13:35:41.779075Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e5cb71e7-11d3-46c8-9f88-8d6a91700cce/export"/>
    <published>2026-09-29T13:35:41.779075+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b2890e41-0a69-442a-8028-2251b5ed79bd/export</id>
    <title>b2890e41-0a69-442a-8028-2251b5ed79bd</title>
    <updated>2026-10-01T16:54:26.968225+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b2890e41-0a69-442a-8028-2251b5ed79bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/26ior2htadhdv", "content": "CVE-2026-84739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab\nCVE ID : CVE-2026-84739\n \n Published : Sept. 29, 2026, 10:17 a.m. | 13\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab CE/EE affecting all vers...", "creation_timestamp": "2026-09-29T11:11:36.674015Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b2890e41-0a69-442a-8028-2251b5ed79bd/export"/>
    <published>2026-09-29T11:11:36.674015+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5bfc22f7-fd8d-4356-afca-94f9f44989c3/export</id>
    <title>5bfc22f7-fd8d-4356-afca-94f9f44989c3</title>
    <updated>2026-10-01T16:54:26.968366+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5bfc22f7-fd8d-4356-afca-94f9f44989c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwnkcmdj752y", "content": "CVE-2026-84739: GitLab patched a cross-site scripting flaw in the merge request diff viewer of GitLab CE/EE that let an authenticated user run JavaScript in another user's session. Fixed in 19.2.7, 19.3.3 and 19.4.1. No exploitation confirmed.", "creation_timestamp": "2026-09-29T09:47:13.622179Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5bfc22f7-fd8d-4356-afca-94f9f44989c3/export"/>
    <published>2026-09-29T09:47:13.622179+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9eb0ee7-9d11-4884-8329-ff96e270c762/export</id>
    <title>d9eb0ee7-9d11-4884-8329-ff96e270c762</title>
    <updated>2026-10-01T16:54:26.968468+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9eb0ee7-9d11-4884-8329-ff96e270c762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwbepv7amn2m", "content": "\ud83d\udd17 CVE : CVE-2026-10518, CVE-2026-4523, CVE-2026-84739, CVE-2026-89078, CVE-2026-8937, CVE-2026-92470, CVE-2026-92529, CVE-2026-92530, CVE-2026-92628, CVE-2026-92874, CVE-2026-93577", "creation_timestamp": "2026-09-24T13:35:19.521379Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9eb0ee7-9d11-4884-8329-ff96e270c762/export"/>
    <published>2026-09-24T13:35:19.521379+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/69e8de3e-aa7d-4eac-ad66-e29dc77aae2e/export</id>
    <title>69e8de3e-aa7d-4eac-ad66-e29dc77aae2e</title>
    <updated>2026-10-01T16:54:26.968592+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "69e8de3e-aa7d-4eac-ad66-e29dc77aae2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/bearstech.com/post/3mwaxu3wkvl2a", "content": "Toutes nos instances GitLab sont \u00e0 jour en version 19.4.1 depuis hier soir \u00e0 22h.\n\nIl faut mettre \u00e0 jour rapidement : cette nouvelle version corrige 2 CVE \u00e9valu\u00e9es \u00e0 9,9 (CVE-2026-93577 et CVE-2026-84739).\n\nEn savoir plus sur nos offres \ud83d\udc47", "creation_timestamp": "2026-09-24T09:45:02.136894Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/69e8de3e-aa7d-4eac-ad66-e29dc77aae2e/export"/>
    <published>2026-09-24T09:45:02.136894+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a6ed9270-7c4f-4590-8e56-71b142790aed/export</id>
    <title>a6ed9270-7c4f-4590-8e56-71b142790aed</title>
    <updated>2026-10-01T16:54:26.968692+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cve.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "a6ed9270-7c4f-4590-8e56-71b142790aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-remote-code-execution-vulnerabilities-gitlab-patch-immediately", "content": "", "creation_timestamp": "2026-09-24T08:00:45.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a6ed9270-7c4f-4590-8e56-71b142790aed/export"/>
    <published>2026-09-24T08:00:45+00:00</published>
  </entry>
</feed>
