<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-19T08:11:27.620584+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f8462e2b-4284-4245-860a-7a4ca04bad0d/export</id>
    <title>f8462e2b-4284-4245-860a-7a4ca04bad0d</title>
    <updated>2026-09-19T08:11:27.644364+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f8462e2b-4284-4245-860a-7a4ca04bad0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89036", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtxbmoexd2f", "content": "CVE-2026-89036 - appwrite\nIn Appwrite versions before 2.0.0, a user who can create or modify functions or sites can trick the system into running additional commands when it builds files. The problem occurs because\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#appwrite #CVE #infosec", "creation_timestamp": "2026-09-19T05:30:05.367430Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f8462e2b-4284-4245-860a-7a4ca04bad0d/export"/>
    <published>2026-09-19T05:30:05.367430+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/35c2e8e8-56b2-434c-bf1f-c2113001c65a/export</id>
    <title>35c2e8e8-56b2-434c-bf1f-c2113001c65a</title>
    <updated>2026-09-19T08:11:27.646614+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "35c2e8e8-56b2-434c-bf1f-c2113001c65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89036", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3wnyug65h43vp", "content": "CVE-2026-89036 - Appwrite\nCVE ID : CVE-2026-89036\n \n Published : Sept. 17, 2026, 4:18 p.m. | 47\u00a0minutes ago\n \n Description : Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to ex...", "creation_timestamp": "2026-09-17T17:44:22.240626Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/35c2e8e8-56b2-434c-bf1f-c2113001c65a/export"/>
    <published>2026-09-17T17:44:22.240626+00:00</published>
  </entry>
</feed>
