<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 02 Sep 2026 06:33:17 +0000</lastBuildDate>
    <item>
      <title>ee30de9b-93f5-46e2-a3b9-d80a8880e6d0</title>
      <link>https://vulnerability.circl.lu/sighting/ee30de9b-93f5-46e2-a3b9-d80a8880e6d0/export</link>
      <description>{"uuid": "ee30de9b-93f5-46e2-a3b9-d80a8880e6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "content": "", "creation_timestamp": "2026-09-01T10:15:06.835842Z"}</description>
      <content:encoded>{"uuid": "ee30de9b-93f5-46e2-a3b9-d80a8880e6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "content": "", "creation_timestamp": "2026-09-01T10:15:06.835842Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ee30de9b-93f5-46e2-a3b9-d80a8880e6d0/export</guid>
      <pubDate>Tue, 01 Sep 2026 10:15:06 +0000</pubDate>
    </item>
    <item>
      <title>801edf5f-2ab5-4dac-95a2-22744d5801c6</title>
      <link>https://vulnerability.circl.lu/sighting/801edf5f-2ab5-4dac-95a2-22744d5801c6/export</link>
      <description>{"uuid": "801edf5f-2ab5-4dac-95a2-22744d5801c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "content": "", "creation_timestamp": "2026-08-29T10:15:18.317396Z"}</description>
      <content:encoded>{"uuid": "801edf5f-2ab5-4dac-95a2-22744d5801c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "content": "", "creation_timestamp": "2026-08-29T10:15:18.317396Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/801edf5f-2ab5-4dac-95a2-22744d5801c6/export</guid>
      <pubDate>Sat, 29 Aug 2026 10:15:18 +0000</pubDate>
    </item>
    <item>
      <title>73303d83-6421-43a5-953e-35b842431be9</title>
      <link>https://vulnerability.circl.lu/sighting/73303d83-6421-43a5-953e-35b842431be9/export</link>
      <description>{"uuid": "73303d83-6421-43a5-953e-35b842431be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "seen", "source": "https://t.me/changelogWAF/6", "content": "New CVE Detections (2026-03-02)\n\nCVE-2025-52691: Arbitrary File Upload vulnerability in SmarterMail allowing attackers to upload malicious files, potentially leading to remote code execution.\n\nCVE-2026-23760: Authentication Bypass vulnerability in SmarterMail enabling unauthorized access to protected resources without valid credentials.\n\nCommand Injection \u2013 Nslookup: Detection for command injection via improper use of nslookup; this beta rule will be merged into the existing rule.", "creation_timestamp": "2026-08-29T00:00:08.177454Z"}</description>
      <content:encoded>{"uuid": "73303d83-6421-43a5-953e-35b842431be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "seen", "source": "https://t.me/changelogWAF/6", "content": "New CVE Detections (2026-03-02)\n\nCVE-2025-52691: Arbitrary File Upload vulnerability in SmarterMail allowing attackers to upload malicious files, potentially leading to remote code execution.\n\nCVE-2026-23760: Authentication Bypass vulnerability in SmarterMail enabling unauthorized access to protected resources without valid credentials.\n\nCommand Injection \u2013 Nslookup: Detection for command injection via improper use of nslookup; this beta rule will be merged into the existing rule.", "creation_timestamp": "2026-08-29T00:00:08.177454Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/73303d83-6421-43a5-953e-35b842431be9/export</guid>
      <pubDate>Sat, 29 Aug 2026 00:00:08 +0000</pubDate>
    </item>
    <item>
      <title>7512f0d6-6572-4454-b31b-3f05dd78cbd8</title>
      <link>https://vulnerability.circl.lu/sighting/7512f0d6-6572-4454-b31b-3f05dd78cbd8/export</link>
      <description>{"uuid": "7512f0d6-6572-4454-b31b-3f05dd78cbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "seen", "source": "https://t.me/changelogWAF/6", "content": "New CVE Detections (2026-03-02)\n\nCVE-2025-52691: Arbitrary File Upload vulnerability in SmarterMail allowing attackers to upload malicious files, potentially leading to remote code execution.\n\nCVE-2026-23760: Authentication Bypass vulnerability in SmarterMail enabling unauthorized access to protected resources without valid credentials.\n\nCommand Injection \u2013 Nslookup: Detection for command injection via improper use of nslookup; this beta rule will be merged into the existing rule.", "creation_timestamp": "2026-08-28T18:00:04.738830Z"}</description>
      <content:encoded>{"uuid": "7512f0d6-6572-4454-b31b-3f05dd78cbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "seen", "source": "https://t.me/changelogWAF/6", "content": "New CVE Detections (2026-03-02)\n\nCVE-2025-52691: Arbitrary File Upload vulnerability in SmarterMail allowing attackers to upload malicious files, potentially leading to remote code execution.\n\nCVE-2026-23760: Authentication Bypass vulnerability in SmarterMail enabling unauthorized access to protected resources without valid credentials.\n\nCommand Injection \u2013 Nslookup: Detection for command injection via improper use of nslookup; this beta rule will be merged into the existing rule.", "creation_timestamp": "2026-08-28T18:00:04.738830Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7512f0d6-6572-4454-b31b-3f05dd78cbd8/export</guid>
      <pubDate>Fri, 28 Aug 2026 18:00:04 +0000</pubDate>
    </item>
    <item>
      <title>886f5e1e-6b4b-43b1-960d-db0f5b47b7f0</title>
      <link>https://vulnerability.circl.lu/sighting/886f5e1e-6b4b-43b1-960d-db0f5b47b7f0/export</link>
      <description>{"uuid": "886f5e1e-6b4b-43b1-960d-db0f5b47b7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:15:09.517167Z"}</description>
      <content:encoded>{"uuid": "886f5e1e-6b4b-43b1-960d-db0f5b47b7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:15:09.517167Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/886f5e1e-6b4b-43b1-960d-db0f5b47b7f0/export</guid>
      <pubDate>Thu, 27 Aug 2026 10:15:09 +0000</pubDate>
    </item>
    <item>
      <title>ce9bc4b8-8dec-4f3f-84ad-db5236600594</title>
      <link>https://vulnerability.circl.lu/sighting/ce9bc4b8-8dec-4f3f-84ad-db5236600594/export</link>
      <description>{"uuid": "ce9bc4b8-8dec-4f3f-84ad-db5236600594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "content": "", "creation_timestamp": "2026-08-26T10:15:15.992863Z"}</description>
      <content:encoded>{"uuid": "ce9bc4b8-8dec-4f3f-84ad-db5236600594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "content": "", "creation_timestamp": "2026-08-26T10:15:15.992863Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ce9bc4b8-8dec-4f3f-84ad-db5236600594/export</guid>
      <pubDate>Wed, 26 Aug 2026 10:15:15 +0000</pubDate>
    </item>
    <item>
      <title>0fce8f07-d995-4b3a-9a70-bdbabd0edd23</title>
      <link>https://vulnerability.circl.lu/sighting/0fce8f07-d995-4b3a-9a70-bdbabd0edd23/export</link>
      <description>{"uuid": "0fce8f07-d995-4b3a-9a70-bdbabd0edd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "content": "", "creation_timestamp": "2026-08-14T10:15:08.115112Z"}</description>
      <content:encoded>{"uuid": "0fce8f07-d995-4b3a-9a70-bdbabd0edd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "content": "", "creation_timestamp": "2026-08-14T10:15:08.115112Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0fce8f07-d995-4b3a-9a70-bdbabd0edd23/export</guid>
      <pubDate>Fri, 14 Aug 2026 10:15:08 +0000</pubDate>
    </item>
    <item>
      <title>78336f12-5aa1-4c9a-b14f-4f16a29d99ab</title>
      <link>https://vulnerability.circl.lu/sighting/78336f12-5aa1-4c9a-b14f-4f16a29d99ab/export</link>
      <description>{"uuid": "78336f12-5aa1-4c9a-b14f-4f16a29d99ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msb343n27e2o", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-23760: SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API\nCVSS 9.8 \u00b7 EPSS 96.3% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2026-23760\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-04T13:02:24.730581Z"}</description>
      <content:encoded>{"uuid": "78336f12-5aa1-4c9a-b14f-4f16a29d99ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msb343n27e2o", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-23760: SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API\nCVSS 9.8 \u00b7 EPSS 96.3% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2026-23760\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-04T13:02:24.730581Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/78336f12-5aa1-4c9a-b14f-4f16a29d99ab/export</guid>
      <pubDate>Tue, 04 Aug 2026 13:02:24 +0000</pubDate>
    </item>
    <item>
      <title>e5989e7d-2dc1-4b2d-8cd0-6911335f170c</title>
      <link>https://vulnerability.circl.lu/sighting/e5989e7d-2dc1-4b2d-8cd0-6911335f170c/export</link>
      <description>{"uuid": "e5989e7d-2dc1-4b2d-8cd0-6911335f170c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:06.309027Z"}</description>
      <content:encoded>{"uuid": "e5989e7d-2dc1-4b2d-8cd0-6911335f170c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:06.309027Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e5989e7d-2dc1-4b2d-8cd0-6911335f170c/export</guid>
      <pubDate>Sat, 01 Aug 2026 10:15:06 +0000</pubDate>
    </item>
    <item>
      <title>d9683694-cf92-442a-8750-dcfe63918f25</title>
      <link>https://vulnerability.circl.lu/sighting/d9683694-cf92-442a-8750-dcfe63918f25/export</link>
      <description>{"uuid": "d9683694-cf92-442a-8750-dcfe63918f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:15:06.430415Z"}</description>
      <content:encoded>{"uuid": "d9683694-cf92-442a-8750-dcfe63918f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23760", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:15:06.430415Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d9683694-cf92-442a-8750-dcfe63918f25/export</guid>
      <pubDate>Wed, 29 Jul 2026 10:15:06 +0000</pubDate>
    </item>
  </channel>
</rss>
