<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 25 Jun 2026 04:20:33 +0000</lastBuildDate>
    <item>
      <title>28cc0ca9-0754-40fa-8044-7862b87a950f</title>
      <link>https://vulnerability.circl.lu/sighting/28cc0ca9-0754-40fa-8044-7862b87a950f/export</link>
      <description>{"uuid": "28cc0ca9-0754-40fa-8044-7862b87a950f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1078", "type": "published-proof-of-concept", "source": "Telegram/8eXn4QLj3W1_8AYc2pIsiDgfSWsuolTpz1YwE008yOgTXtw", "content": "", "creation_timestamp": "2026-04-07T17:29:14.000000Z"}</description>
      <content:encoded>{"uuid": "28cc0ca9-0754-40fa-8044-7862b87a950f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1078", "type": "published-proof-of-concept", "source": "Telegram/8eXn4QLj3W1_8AYc2pIsiDgfSWsuolTpz1YwE008yOgTXtw", "content": "", "creation_timestamp": "2026-04-07T17:29:14.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/28cc0ca9-0754-40fa-8044-7862b87a950f/export</guid>
      <pubDate>Tue, 07 Apr 2026 17:29:14 +0000</pubDate>
    </item>
    <item>
      <title>2907145d-76ac-405c-a016-fccaa47823ce</title>
      <link>https://vulnerability.circl.lu/sighting/2907145d-76ac-405c-a016-fccaa47823ce/export</link>
      <description>{"uuid": "2907145d-76ac-405c-a016-fccaa47823ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mngh7z7r5x2p", "content": "CVE-2026-10783 - gradio-app gradio Audio Cache Key save_audio_to_cache weak hash\nCVE ID : CVE-2026-10783\n \n Published : June 3, 2026, 11:30 p.m. | 59\u00a0minutes ago\n \n Description : A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_au...", "creation_timestamp": "2026-06-04T01:16:42.171040Z"}</description>
      <content:encoded>{"uuid": "2907145d-76ac-405c-a016-fccaa47823ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mngh7z7r5x2p", "content": "CVE-2026-10783 - gradio-app gradio Audio Cache Key save_audio_to_cache weak hash\nCVE ID : CVE-2026-10783\n \n Published : June 3, 2026, 11:30 p.m. | 59\u00a0minutes ago\n \n Description : A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_au...", "creation_timestamp": "2026-06-04T01:16:42.171040Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2907145d-76ac-405c-a016-fccaa47823ce/export</guid>
      <pubDate>Thu, 04 Jun 2026 01:16:42 +0000</pubDate>
    </item>
    <item>
      <title>2a47b805-ca10-4929-8308-9019bcc2aae2</title>
      <link>https://vulnerability.circl.lu/sighting/2a47b805-ca10-4929-8308-9019bcc2aae2/export</link>
      <description>{"uuid": "2a47b805-ca10-4929-8308-9019bcc2aae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnskgyyezw2t", "content": "CVE-2026-10786 - Devolutions Server Improper Access Control Information Disclosure\nCVE ID : CVE-2026-10786\n \n Published : June 8, 2026, 7:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Improper access control in the ticketing integration settings in Devolutions Server allow...", "creation_timestamp": "2026-06-08T20:46:14.907158Z"}</description>
      <content:encoded>{"uuid": "2a47b805-ca10-4929-8308-9019bcc2aae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnskgyyezw2t", "content": "CVE-2026-10786 - Devolutions Server Improper Access Control Information Disclosure\nCVE ID : CVE-2026-10786\n \n Published : June 8, 2026, 7:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Improper access control in the ticketing integration settings in Devolutions Server allow...", "creation_timestamp": "2026-06-08T20:46:14.907158Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2a47b805-ca10-4929-8308-9019bcc2aae2/export</guid>
      <pubDate>Mon, 08 Jun 2026 20:46:14 +0000</pubDate>
    </item>
    <item>
      <title>dc16d5b7-752e-4fbf-aa92-a4cd74c4e7c2</title>
      <link>https://vulnerability.circl.lu/sighting/dc16d5b7-752e-4fbf-aa92-a4cd74c4e7c2/export</link>
      <description>{"uuid": "dc16d5b7-752e-4fbf-aa92-a4cd74c4e7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10789", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3movhp2dlvr2j", "content": "Autodesk Fusion MCP extension (v2703.1.11) hit by CRITICAL code injection (CVE-2026-10789). Visiting a malicious site can allow code execution. Limit risky browsing, monitor for updates. https://radar.offseq.com/threat/cve-2026-10789-cwe-94-improper-control-of-generati-267c2476d8e09380 #OffSeq #A...", "creation_timestamp": "2026-06-22T18:00:15.103758Z"}</description>
      <content:encoded>{"uuid": "dc16d5b7-752e-4fbf-aa92-a4cd74c4e7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10789", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3movhp2dlvr2j", "content": "Autodesk Fusion MCP extension (v2703.1.11) hit by CRITICAL code injection (CVE-2026-10789). Visiting a malicious site can allow code execution. Limit risky browsing, monitor for updates. https://radar.offseq.com/threat/cve-2026-10789-cwe-94-improper-control-of-generati-267c2476d8e09380 #OffSeq #A...", "creation_timestamp": "2026-06-22T18:00:15.103758Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dc16d5b7-752e-4fbf-aa92-a4cd74c4e7c2/export</guid>
      <pubDate>Mon, 22 Jun 2026 18:00:15 +0000</pubDate>
    </item>
    <item>
      <title>6995a3ee-1480-47c3-8996-cc83c5157c86</title>
      <link>https://vulnerability.circl.lu/sighting/6995a3ee-1480-47c3-8996-cc83c5157c86/export</link>
      <description>{"uuid": "6995a3ee-1480-47c3-8996-cc83c5157c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10789", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116795061835699125", "content": "CVE-2026-10789: CRITICAL code injection in Autodesk Fusion MCP ext (v2703.1.11). Visiting a crafted page can lead to arbitrary code execution with user rights. Update guidance pending. https://radar.offseq.com/threat/cve-2026-10789-cwe-94-improper-control-of-generati-267c2476d8e09380 #OffSeq #Vulnerability #Autodesk #CVE2026_10789", "creation_timestamp": "2026-06-22T18:00:22.563103Z"}</description>
      <content:encoded>{"uuid": "6995a3ee-1480-47c3-8996-cc83c5157c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10789", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116795061835699125", "content": "CVE-2026-10789: CRITICAL code injection in Autodesk Fusion MCP ext (v2703.1.11). Visiting a crafted page can lead to arbitrary code execution with user rights. Update guidance pending. https://radar.offseq.com/threat/cve-2026-10789-cwe-94-improper-control-of-generati-267c2476d8e09380 #OffSeq #Vulnerability #Autodesk #CVE2026_10789", "creation_timestamp": "2026-06-22T18:00:22.563103Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6995a3ee-1480-47c3-8996-cc83c5157c86/export</guid>
      <pubDate>Mon, 22 Jun 2026 18:00:22 +0000</pubDate>
    </item>
    <item>
      <title>2ca64326-7481-4c44-ae67-055e8b55095e</title>
      <link>https://vulnerability.circl.lu/sighting/2ca64326-7481-4c44-ae67-055e8b55095e/export</link>
      <description>{"uuid": "2ca64326-7481-4c44-ae67-055e8b55095e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10789", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3movner5taf2q", "content": "CVE-2026-10789 - MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop\nCVE ID : CVE-2026-10789\n \n Published : June 22, 2026, 5:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop r...", "creation_timestamp": "2026-06-22T19:41:51.963015Z"}</description>
      <content:encoded>{"uuid": "2ca64326-7481-4c44-ae67-055e8b55095e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10789", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3movner5taf2q", "content": "CVE-2026-10789 - MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop\nCVE ID : CVE-2026-10789\n \n Published : June 22, 2026, 5:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop r...", "creation_timestamp": "2026-06-22T19:41:51.963015Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2ca64326-7481-4c44-ae67-055e8b55095e/export</guid>
      <pubDate>Mon, 22 Jun 2026 19:41:51 +0000</pubDate>
    </item>
  </channel>
</rss>
