<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-05T19:22:12.043496+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/804de7e5-9295-465c-a06d-0737fcb735f5/export</id>
    <title>804de7e5-9295-465c-a06d-0737fcb735f5</title>
    <updated>2026-10-05T19:22:12.069957+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "804de7e5-9295-465c-a06d-0737fcb735f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91135", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwvdklpapr2j", "content": "\ud83d\udea8 CVE-2026-91135 \u2014 CVSS 9.2 CRITICAL\n\nHeap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-91135\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T12:07:42.757041Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/804de7e5-9295-465c-a06d-0737fcb735f5/export"/>
    <published>2026-10-02T12:07:42.757041+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3ef0dbfd-2073-4161-9d3f-6e2d9c0fffda/export</id>
    <title>3ef0dbfd-2073-4161-9d3f-6e2d9c0fffda</title>
    <updated>2026-10-05T19:22:12.071686+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3ef0dbfd-2073-4161-9d3f-6e2d9c0fffda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91135", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwvd5mtfzs2h", "content": "Apache Thrift &amp;lt;0.25.0 hit by CRITICAL heap-based buffer overflow (CVE-2026-91135) in C++ THeaderTransport. Upgrade to 0.25.0+ to prevent RCE/DoS. CVSS 9.2. Details: https://radar.offseq.com/threat/cve-2026-91135-cwe-122-heap-based-buffer-overflow-in-apache-software-foundation-apache-thrift-0aedbc...", "creation_timestamp": "2026-10-02T12:00:28.306366Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3ef0dbfd-2073-4161-9d3f-6e2d9c0fffda/export"/>
    <published>2026-10-02T12:00:28.306366+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/584a596e-58a9-4633-96ed-7f6fd30850df/export</id>
    <title>584a596e-58a9-4633-96ed-7f6fd30850df</title>
    <updated>2026-10-05T19:22:12.071852+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "584a596e-58a9-4633-96ed-7f6fd30850df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91135", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117371202806407646", "content": "CVE-2026-91135: Apache Thrift (&amp;lt;0.25.0) has a CRITICAL heap-based buffer overflow in C++ THeaderTransport when ZLIB is enabled. Exploitable for RCE/DoS. Upgrade to 0.25.0+ now. CVSS 9.2. https://radar.offseq.com/threat/cve-2026-91135-cwe-122-heap-based-buffer-overflow-in-apache-software-foundation-apache-thrift-0aedbcf1ed0ca11f #OffSeq #ApacheThrift #InfoSec #CVE202691135", "creation_timestamp": "2026-10-02T12:00:26.449812Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/584a596e-58a9-4633-96ed-7f6fd30850df/export"/>
    <published>2026-10-02T12:00:26.449812+00:00</published>
  </entry>
</feed>
