<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 14 Jul 2026 22:15:28 +0000</lastBuildDate>
    <item>
      <title>5a8b0c73-9090-45ae-9bef-c27ae84123af</title>
      <link>https://vulnerability.circl.lu/sighting/5a8b0c73-9090-45ae-9bef-c27ae84123af/export</link>
      <description>{"uuid": "5a8b0c73-9090-45ae-9bef-c27ae84123af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn4bus4py2s", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver &amp;amp; Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data &amp;amp; trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:05:06.472746Z"}</description>
      <content:encoded>{"uuid": "5a8b0c73-9090-45ae-9bef-c27ae84123af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn4bus4py2s", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver &amp;amp; Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data &amp;amp; trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:05:06.472746Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5a8b0c73-9090-45ae-9bef-c27ae84123af/export</guid>
      <pubDate>Tue, 14 Jul 2026 21:05:06 +0000</pubDate>
    </item>
    <item>
      <title>2d37c9e1-b44a-4a01-a260-ad2d636631b4</title>
      <link>https://vulnerability.circl.lu/sighting/2d37c9e1-b44a-4a01-a260-ad2d636631b4/export</link>
      <description>{"uuid": "2d37c9e1-b44a-4a01-a260-ad2d636631b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn45xkzmd26", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver &amp;amp; Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data &amp;amp; trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:02:55.014595Z"}</description>
      <content:encoded>{"uuid": "2d37c9e1-b44a-4a01-a260-ad2d636631b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn45xkzmd26", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver &amp;amp; Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data &amp;amp; trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:02:55.014595Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2d37c9e1-b44a-4a01-a260-ad2d636631b4/export</guid>
      <pubDate>Tue, 14 Jul 2026 21:02:55 +0000</pubDate>
    </item>
    <item>
      <title>aedbe625-2ee8-482e-b242-26a3e2d4b407</title>
      <link>https://vulnerability.circl.lu/sighting/aedbe625-2ee8-482e-b242-26a3e2d4b407/export</link>
      <description>{"uuid": "aedbe625-2ee8-482e-b242-26a3e2d4b407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116918218287332576", "content": "SAP July 2026 patch day delivers CRITICAL fixes: NetWeaver (CVE-2026-44747, memory corruption), Approuter (CVE-2026-27690, HTTP smuggling), Commerce Cloud (CVE-2026-44761, hardcoded creds). Patch ASAP. https://radar.offseq.com/threat/sap-patches-critical-vulnerabilities-in-netweaver--aa75f703df9065e4 #OffSeq #SAP #Vuln #PatchTuesday", "creation_timestamp": "2026-07-14T12:00:31.386680Z"}</description>
      <content:encoded>{"uuid": "aedbe625-2ee8-482e-b242-26a3e2d4b407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116918218287332576", "content": "SAP July 2026 patch day delivers CRITICAL fixes: NetWeaver (CVE-2026-44747, memory corruption), Approuter (CVE-2026-27690, HTTP smuggling), Commerce Cloud (CVE-2026-44761, hardcoded creds). Patch ASAP. https://radar.offseq.com/threat/sap-patches-critical-vulnerabilities-in-netweaver--aa75f703df9065e4 #OffSeq #SAP #Vuln #PatchTuesday", "creation_timestamp": "2026-07-14T12:00:31.386680Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aedbe625-2ee8-482e-b242-26a3e2d4b407/export</guid>
      <pubDate>Tue, 14 Jul 2026 12:00:31 +0000</pubDate>
    </item>
    <item>
      <title>4fa38082-4a52-474b-b970-cbb25b2791e1</title>
      <link>https://vulnerability.circl.lu/sighting/4fa38082-4a52-474b-b970-cbb25b2791e1/export</link>
      <description>{"uuid": "4fa38082-4a52-474b-b970-cbb25b2791e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjwjtly2o", "content": "Daily IT Security Digest \u2014 2026-07-14\nconfigurations as a mitigation.\nSources: https://infosec.exchange/@offseq/116916448461094889 \u00b7 https://radar.offseq.com/threat/cve-2026-27690\n\n## 2. CRITICAL \u2014 Chrome 150 Patches 27 Vulnerabilities Including 2 Use-After-Free Bugs\nGoogle Chrome 150 addresses 27", "creation_timestamp": "2026-07-14T05:03:14.627990Z"}</description>
      <content:encoded>{"uuid": "4fa38082-4a52-474b-b970-cbb25b2791e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjwjtly2o", "content": "Daily IT Security Digest \u2014 2026-07-14\nconfigurations as a mitigation.\nSources: https://infosec.exchange/@offseq/116916448461094889 \u00b7 https://radar.offseq.com/threat/cve-2026-27690\n\n## 2. CRITICAL \u2014 Chrome 150 Patches 27 Vulnerabilities Including 2 Use-After-Free Bugs\nGoogle Chrome 150 addresses 27", "creation_timestamp": "2026-07-14T05:03:14.627990Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4fa38082-4a52-474b-b970-cbb25b2791e1/export</guid>
      <pubDate>Tue, 14 Jul 2026 05:03:14 +0000</pubDate>
    </item>
    <item>
      <title>b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6</title>
      <link>https://vulnerability.circl.lu/sighting/b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6/export</link>
      <description>{"uuid": "b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjvxlep22", "content": "Daily IT Security Digest \u2014 2026-07-14\n# Daily IT Security Digest \u2014 2026-07-14\n\n## 1. CRITICAL \u2014 SAP Approuter HTTP Request Smuggling (CVE-2026-27690, CVSS 9.1)\nA critical HTTP request smuggling flaw was disclosed in SAP Approuter, scored 9.1 on the CVSS v3.1 scale. Remote attackers can exploit the", "creation_timestamp": "2026-07-14T05:03:14.144599Z"}</description>
      <content:encoded>{"uuid": "b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjvxlep22", "content": "Daily IT Security Digest \u2014 2026-07-14\n# Daily IT Security Digest \u2014 2026-07-14\n\n## 1. CRITICAL \u2014 SAP Approuter HTTP Request Smuggling (CVE-2026-27690, CVSS 9.1)\nA critical HTTP request smuggling flaw was disclosed in SAP Approuter, scored 9.1 on the CVSS v3.1 scale. Remote attackers can exploit the", "creation_timestamp": "2026-07-14T05:03:14.144599Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6/export</guid>
      <pubDate>Tue, 14 Jul 2026 05:03:14 +0000</pubDate>
    </item>
    <item>
      <title>bf472dfa-623c-4c7d-8ca3-9bad64449c47</title>
      <link>https://vulnerability.circl.lu/sighting/bf472dfa-623c-4c7d-8ca3-9bad64449c47/export</link>
      <description>{"uuid": "bf472dfa-623c-4c7d-8ca3-9bad64449c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqlepceb3g2f", "content": "CVE-2026-27690: SAP Approuter faces CRITICAL HTTP request smuggling (CVSS 9.1). Unauthenticated attackers can expose user data &amp;amp; disrupt services. No patch \u2014 monitor SAP for updates. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #...", "creation_timestamp": "2026-07-14T04:30:30.982493Z"}</description>
      <content:encoded>{"uuid": "bf472dfa-623c-4c7d-8ca3-9bad64449c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqlepceb3g2f", "content": "CVE-2026-27690: SAP Approuter faces CRITICAL HTTP request smuggling (CVSS 9.1). Unauthenticated attackers can expose user data &amp;amp; disrupt services. No patch \u2014 monitor SAP for updates. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #...", "creation_timestamp": "2026-07-14T04:30:30.982493Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bf472dfa-623c-4c7d-8ca3-9bad64449c47/export</guid>
      <pubDate>Tue, 14 Jul 2026 04:30:30 +0000</pubDate>
    </item>
    <item>
      <title>bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb</title>
      <link>https://vulnerability.circl.lu/sighting/bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb/export</link>
      <description>{"uuid": "bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116916448461094889", "content": "CVE-2026-27690: CRITICAL HTTP request smuggling flaw in SAP Approuter (CVSS 9.1). Remote attackers can cause desynchronization, exposing user responses &amp;amp; disrupting availability. No patch yet \u2014 monitor SAP advisories. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #InfoSec", "creation_timestamp": "2026-07-14T04:30:25.758605Z"}</description>
      <content:encoded>{"uuid": "bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116916448461094889", "content": "CVE-2026-27690: CRITICAL HTTP request smuggling flaw in SAP Approuter (CVSS 9.1). Remote attackers can cause desynchronization, exposing user responses &amp;amp; disrupting availability. No patch yet \u2014 monitor SAP advisories. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #InfoSec", "creation_timestamp": "2026-07-14T04:30:25.758605Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb/export</guid>
      <pubDate>Tue, 14 Jul 2026 04:30:25 +0000</pubDate>
    </item>
    <item>
      <title>96eef161-0088-4b78-8ddf-59233cb5646f</title>
      <link>https://vulnerability.circl.lu/sighting/96eef161-0088-4b78-8ddf-59233cb5646f/export</link>
      <description>{"uuid": "96eef161-0088-4b78-8ddf-59233cb5646f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mql7p4eot62k", "content": "\ud83d\udd34 CVE-2026-27690 - Critical (9.1)\n\nDue to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker coul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27690/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T03:00:52.862961Z"}</description>
      <content:encoded>{"uuid": "96eef161-0088-4b78-8ddf-59233cb5646f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mql7p4eot62k", "content": "\ud83d\udd34 CVE-2026-27690 - Critical (9.1)\n\nDue to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker coul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27690/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T03:00:52.862961Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/96eef161-0088-4b78-8ddf-59233cb5646f/export</guid>
      <pubDate>Tue, 14 Jul 2026 03:00:52 +0000</pubDate>
    </item>
    <item>
      <title>3744940e-934d-489e-bdb1-15067bd813ea</title>
      <link>https://vulnerability.circl.lu/sighting/3744940e-934d-489e-bdb1-15067bd813ea/export</link>
      <description>{"uuid": "3744940e-934d-489e-bdb1-15067bd813ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql3r2jehe26", "content": "CVE-2026-27690 - HTTP Request Smuggling in SAP Approuter\nCVE ID : CVE-2026-27690\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafte...", "creation_timestamp": "2026-07-14T01:50:22.725463Z"}</description>
      <content:encoded>{"uuid": "3744940e-934d-489e-bdb1-15067bd813ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql3r2jehe26", "content": "CVE-2026-27690 - HTTP Request Smuggling in SAP Approuter\nCVE ID : CVE-2026-27690\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafte...", "creation_timestamp": "2026-07-14T01:50:22.725463Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3744940e-934d-489e-bdb1-15067bd813ea/export</guid>
      <pubDate>Tue, 14 Jul 2026 01:50:22 +0000</pubDate>
    </item>
    <item>
      <title>88011d0a-405f-4e76-9e3d-97cc060b6fc2</title>
      <link>https://vulnerability.circl.lu/sighting/88011d0a-405f-4e76-9e3d-97cc060b6fc2/export</link>
      <description>{"uuid": "88011d0a-405f-4e76-9e3d-97cc060b6fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqkymet66f2b", "content": "CVE-2026-27690 - sap approuter\nAn attacker can send a special request to SAP Approuter, potentially exposing user responses and making the system unavailable. This is a serious issue because it affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sapapprouter #sapse #CVE #infosec", "creation_timestamp": "2026-07-14T00:54:07.134760Z"}</description>
      <content:encoded>{"uuid": "88011d0a-405f-4e76-9e3d-97cc060b6fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqkymet66f2b", "content": "CVE-2026-27690 - sap approuter\nAn attacker can send a special request to SAP Approuter, potentially exposing user responses and making the system unavailable. This is a serious issue because it affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sapapprouter #sapse #CVE #infosec", "creation_timestamp": "2026-07-14T00:54:07.134760Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/88011d0a-405f-4e76-9e3d-97cc060b6fc2/export</guid>
      <pubDate>Tue, 14 Jul 2026 00:54:07 +0000</pubDate>
    </item>
  </channel>
</rss>
