<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 28 Oct 2026 21:08:12 +0000</lastBuildDate>
    <item>
      <title>5fbfd3f3-70d7-4efc-9f9e-354a716c2392</title>
      <link>https://vulnerability.circl.lu/sighting/5fbfd3f3-70d7-4efc-9f9e-354a716c2392/export</link>
      <description>{"uuid": "5fbfd3f3-70d7-4efc-9f9e-354a716c2392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101767", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3myxnubi7dy2p", "content": "\ud83e\udd16 CVE-2026-101767 (CVSS 9.8): improper auth in Oracle E-Business Suite's Application Object Library, patched last week. Attackers already probing for the RCE days after the fix (Defused Cyber).\nhttps://thehackernews.com/2026/10/hackers-target-critical-oracle-e.html", "creation_timestamp": "2026-10-28T21:07:48.211638Z"}</description>
      <content:encoded>{"uuid": "5fbfd3f3-70d7-4efc-9f9e-354a716c2392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-101767", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3myxnubi7dy2p", "content": "\ud83e\udd16 CVE-2026-101767 (CVSS 9.8): improper auth in Oracle E-Business Suite's Application Object Library, patched last week. Attackers already probing for the RCE days after the fix (Defused Cyber).\nhttps://thehackernews.com/2026/10/hackers-target-critical-oracle-e.html", "creation_timestamp": "2026-10-28T21:07:48.211638Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5fbfd3f3-70d7-4efc-9f9e-354a716c2392/export</guid>
      <pubDate>Wed, 28 Oct 2026 21:07:48 +0000</pubDate>
    </item>
    <item>
      <title>386d8436-2bfe-4928-b187-40db4da99e2e</title>
      <link>https://vulnerability.circl.lu/sighting/386d8436-2bfe-4928-b187-40db4da99e2e/export</link>
      <description>{"uuid": "386d8436-2bfe-4928-b187-40db4da99e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105042", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/goh37uc77ti5e", "content": "CVE-2026-105042: Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash", "creation_timestamp": "2026-10-28T21:06:01.646903Z"}</description>
      <content:encoded>{"uuid": "386d8436-2bfe-4928-b187-40db4da99e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105042", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/goh37uc77ti5e", "content": "CVE-2026-105042: Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash", "creation_timestamp": "2026-10-28T21:06:01.646903Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/386d8436-2bfe-4928-b187-40db4da99e2e/export</guid>
      <pubDate>Wed, 28 Oct 2026 21:06:01 +0000</pubDate>
    </item>
    <item>
      <title>a98bab80-d951-4693-9f2d-f5475a07f0c7</title>
      <link>https://vulnerability.circl.lu/sighting/a98bab80-d951-4693-9f2d-f5475a07f0c7/export</link>
      <description>{"uuid": "a98bab80-d951-4693-9f2d-f5475a07f0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105031", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/7byeudi26au6v", "content": "CVE-2026-105031: Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.", "creation_timestamp": "2026-10-28T21:04:01.634852Z"}</description>
      <content:encoded>{"uuid": "a98bab80-d951-4693-9f2d-f5475a07f0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105031", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/7byeudi26au6v", "content": "CVE-2026-105031: Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.", "creation_timestamp": "2026-10-28T21:04:01.634852Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a98bab80-d951-4693-9f2d-f5475a07f0c7/export</guid>
      <pubDate>Wed, 28 Oct 2026 21:04:01 +0000</pubDate>
    </item>
    <item>
      <title>d4667641-cd0f-46da-8e6c-e07b0ed9682f</title>
      <link>https://vulnerability.circl.lu/sighting/d4667641-cd0f-46da-8e6c-e07b0ed9682f/export</link>
      <description>{"uuid": "d4667641-cd0f-46da-8e6c-e07b0ed9682f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111497", "type": "seen", "source": "https://bsky.app/profile/lamw.bsky.social/post/3myxnllht4c2p", "content": "\ud83d\udce2 JFYI - CVE-2026-111497 (Brotli RCE) only applies to the SDDC Manager component in #VCF and to quickly address issue, there are manual interim workarounds for now\n\n\ud83d\udfe0 VCF 9.1.1 - knowledge.broadcom.com/external/art... \n\n\ud83d\udd35 VCF 5.x / 9.0.x / 9.1.0 - knowledge.broadcom.com/external/art...", "creation_timestamp": "2026-10-28T21:02:56.441410Z"}</description>
      <content:encoded>{"uuid": "d4667641-cd0f-46da-8e6c-e07b0ed9682f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111497", "type": "seen", "source": "https://bsky.app/profile/lamw.bsky.social/post/3myxnllht4c2p", "content": "\ud83d\udce2 JFYI - CVE-2026-111497 (Brotli RCE) only applies to the SDDC Manager component in #VCF and to quickly address issue, there are manual interim workarounds for now\n\n\ud83d\udfe0 VCF 9.1.1 - knowledge.broadcom.com/external/art... \n\n\ud83d\udd35 VCF 5.x / 9.0.x / 9.1.0 - knowledge.broadcom.com/external/art...", "creation_timestamp": "2026-10-28T21:02:56.441410Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d4667641-cd0f-46da-8e6c-e07b0ed9682f/export</guid>
      <pubDate>Wed, 28 Oct 2026 21:02:56 +0000</pubDate>
    </item>
    <item>
      <title>a45107cd-9841-43ae-b8a3-6a832dbaeb6d</title>
      <link>https://vulnerability.circl.lu/sighting/a45107cd-9841-43ae-b8a3-6a832dbaeb6d/export</link>
      <description>{"uuid": "a45107cd-9841-43ae-b8a3-6a832dbaeb6d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48356", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/beba3015-09e3-4e53-8171-0094c4b96c71", "content": "", "creation_timestamp": "2026-10-28T21:00:26.983001Z"}</description>
      <content:encoded>{"uuid": "a45107cd-9841-43ae-b8a3-6a832dbaeb6d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48356", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/beba3015-09e3-4e53-8171-0094c4b96c71", "content": "", "creation_timestamp": "2026-10-28T21:00:26.983001Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a45107cd-9841-43ae-b8a3-6a832dbaeb6d/export</guid>
      <pubDate>Wed, 28 Oct 2026 21:00:26 +0000</pubDate>
    </item>
    <item>
      <title>96a3a6cb-6763-4ac6-a3d5-2ded56e2f8e3</title>
      <link>https://vulnerability.circl.lu/sighting/96a3a6cb-6763-4ac6-a3d5-2ded56e2f8e3/export</link>
      <description>{"uuid": "96a3a6cb-6763-4ac6-a3d5-2ded56e2f8e3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111497", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5e391e1f-e4c6-4180-8825-14998c1c2429", "content": "", "creation_timestamp": "2026-10-28T21:00:26.827216Z"}</description>
      <content:encoded>{"uuid": "96a3a6cb-6763-4ac6-a3d5-2ded56e2f8e3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111497", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5e391e1f-e4c6-4180-8825-14998c1c2429", "content": "", "creation_timestamp": "2026-10-28T21:00:26.827216Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/96a3a6cb-6763-4ac6-a3d5-2ded56e2f8e3/export</guid>
      <pubDate>Wed, 28 Oct 2026 21:00:26 +0000</pubDate>
    </item>
    <item>
      <title>54b82092-f260-47cb-8c03-d1e2bd43dadf</title>
      <link>https://vulnerability.circl.lu/sighting/54b82092-f260-47cb-8c03-d1e2bd43dadf/export</link>
      <description>{"uuid": "54b82092-f260-47cb-8c03-d1e2bd43dadf", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3848", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/552ab7d3-2843-4c10-836b-574d0d18403a", "content": "", "creation_timestamp": "2026-10-28T21:00:26.461118Z"}</description>
      <content:encoded>{"uuid": "54b82092-f260-47cb-8c03-d1e2bd43dadf", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3848", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/552ab7d3-2843-4c10-836b-574d0d18403a", "content": "", "creation_timestamp": "2026-10-28T21:00:26.461118Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/54b82092-f260-47cb-8c03-d1e2bd43dadf/export</guid>
      <pubDate>Wed, 28 Oct 2026 21:00:26 +0000</pubDate>
    </item>
    <item>
      <title>548b7db2-0564-4557-adf5-45c4c19816c2</title>
      <link>https://vulnerability.circl.lu/sighting/548b7db2-0564-4557-adf5-45c4c19816c2/export</link>
      <description>{"uuid": "548b7db2-0564-4557-adf5-45c4c19816c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80097", "type": "seen", "source": "https://bsky.app/profile/elcompilado.com/post/3myxngjx4c52c", "content": "Una falla en Microsoft Authenticator dejaba a una app Android sin permisos robar tokens de cuentas de trabajo\n\nCVE-2026-80097, que Microsoft punt\u00faa 8,6 e \"Importante\", la encontr\u00f3 Ofek Levin por un programa de fellowship de la firma Enclave y Microsoft la arregl\u00f3 en el Patch Tuesday de septiembre.", "creation_timestamp": "2026-10-28T21:00:07.442622Z"}</description>
      <content:encoded>{"uuid": "548b7db2-0564-4557-adf5-45c4c19816c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80097", "type": "seen", "source": "https://bsky.app/profile/elcompilado.com/post/3myxngjx4c52c", "content": "Una falla en Microsoft Authenticator dejaba a una app Android sin permisos robar tokens de cuentas de trabajo\n\nCVE-2026-80097, que Microsoft punt\u00faa 8,6 e \"Importante\", la encontr\u00f3 Ofek Levin por un programa de fellowship de la firma Enclave y Microsoft la arregl\u00f3 en el Patch Tuesday de septiembre.", "creation_timestamp": "2026-10-28T21:00:07.442622Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/548b7db2-0564-4557-adf5-45c4c19816c2/export</guid>
      <pubDate>Wed, 28 Oct 2026 21:00:07 +0000</pubDate>
    </item>
    <item>
      <title>de2a46df-5c05-4e4c-8847-2dd275d6546a</title>
      <link>https://vulnerability.circl.lu/sighting/de2a46df-5c05-4e4c-8847-2dd275d6546a/export</link>
      <description>{"uuid": "de2a46df-5c05-4e4c-8847-2dd275d6546a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111497", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3myxngjlffo2d", "content": "\ud83d\udce2 CVE-2026-111497 (Node2Shell/Broccoli) : guide de d\u00e9tection pour l'OOB write du d\u00e9codeur Brotli\n\nCe document est un guide d'ing\u00e9nierie de d\u00e9tection pour CVE-2026-111497 (alias Node2Shell / Broccoli), une vuln\u00e9rabilit\u00e9 d'\u00e9criture\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#Brotli #Node2Shell #Cyberveille", "creation_timestamp": "2026-10-28T21:00:06.557328Z"}</description>
      <content:encoded>{"uuid": "de2a46df-5c05-4e4c-8847-2dd275d6546a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111497", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3myxngjlffo2d", "content": "\ud83d\udce2 CVE-2026-111497 (Node2Shell/Broccoli) : guide de d\u00e9tection pour l'OOB write du d\u00e9codeur Brotli\n\nCe document est un guide d'ing\u00e9nierie de d\u00e9tection pour CVE-2026-111497 (alias Node2Shell / Broccoli), une vuln\u00e9rabilit\u00e9 d'\u00e9criture\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#Brotli #Node2Shell #Cyberveille", "creation_timestamp": "2026-10-28T21:00:06.557328Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/de2a46df-5c05-4e4c-8847-2dd275d6546a/export</guid>
      <pubDate>Wed, 28 Oct 2026 21:00:06 +0000</pubDate>
    </item>
    <item>
      <title>10fc1cef-b557-4e20-a097-ee8cb22c9b17</title>
      <link>https://vulnerability.circl.lu/sighting/10fc1cef-b557-4e20-a097-ee8cb22c9b17/export</link>
      <description>{"uuid": "10fc1cef-b557-4e20-a097-ee8cb22c9b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46300", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3myxnatbqsj2t", "content": "CISA says a Linux kernel flaw, CVE-2026-46300, is now on its list of known exploited vulnerabilities.\nFederal agencies have until Oct. 31 to fix it.\n\nthecircuitry.to/article/cisa-adds-linux-kernel-cve-2026-46300-to-kev-federal-fix-due-oct-31-mvsl0prv", "creation_timestamp": "2026-10-28T20:56:55.535141Z"}</description>
      <content:encoded>{"uuid": "10fc1cef-b557-4e20-a097-ee8cb22c9b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46300", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3myxnatbqsj2t", "content": "CISA says a Linux kernel flaw, CVE-2026-46300, is now on its list of known exploited vulnerabilities.\nFederal agencies have until Oct. 31 to fix it.\n\nthecircuitry.to/article/cisa-adds-linux-kernel-cve-2026-46300-to-kev-federal-fix-due-oct-31-mvsl0prv", "creation_timestamp": "2026-10-28T20:56:55.535141Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/10fc1cef-b557-4e20-a097-ee8cb22c9b17/export</guid>
      <pubDate>Wed, 28 Oct 2026 20:56:55 +0000</pubDate>
    </item>
  </channel>
</rss>
