<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 14 Aug 2026 02:54:23 +0000</lastBuildDate>
    <item>
      <title>1788e3af-cbe4-4545-ad95-cf566f13478c</title>
      <link>https://vulnerability.circl.lu/sighting/1788e3af-cbe4-4545-ad95-cf566f13478c/export</link>
      <description>{"uuid": "1788e3af-cbe4-4545-ad95-cf566f13478c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28672", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvkyosmvz26", "content": "CVE-2026-28672 - apache ranger\nApache Ranger versions 0.6 to 2.8 are vulnerable to an issue where an attacker can execute arbitrary operating system commands by manipulating the username. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apacheranger #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-12T16:40:05.464112Z"}</description>
      <content:encoded>{"uuid": "1788e3af-cbe4-4545-ad95-cf566f13478c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28672", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvkyosmvz26", "content": "CVE-2026-28672 - apache ranger\nApache Ranger versions 0.6 to 2.8 are vulnerable to an issue where an attacker can execute arbitrary operating system commands by manipulating the username. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apacheranger #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-12T16:40:05.464112Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1788e3af-cbe4-4545-ad95-cf566f13478c/export</guid>
      <pubDate>Wed, 12 Aug 2026 16:40:05 +0000</pubDate>
    </item>
    <item>
      <title>9fa5f040-63b4-4a3f-a95b-539aaae3bcf5</title>
      <link>https://vulnerability.circl.lu/sighting/9fa5f040-63b4-4a3f-a95b-539aaae3bcf5/export</link>
      <description>{"uuid": "9fa5f040-63b4-4a3f-a95b-539aaae3bcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5if5ljlxwuhwj", "content": "CVE-2026-28672 - Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder\nCVE ID : CVE-2026-28672\n \n Published : Aug. 10, 2026, 10:26 a.m. | 3\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in a Command ('Command Injection') vulne...", "creation_timestamp": "2026-08-10T10:59:32.611834Z"}</description>
      <content:encoded>{"uuid": "9fa5f040-63b4-4a3f-a95b-539aaae3bcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5if5ljlxwuhwj", "content": "CVE-2026-28672 - Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder\nCVE ID : CVE-2026-28672\n \n Published : Aug. 10, 2026, 10:26 a.m. | 3\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in a Command ('Command Injection') vulne...", "creation_timestamp": "2026-08-10T10:59:32.611834Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9fa5f040-63b4-4a3f-a95b-539aaae3bcf5/export</guid>
      <pubDate>Mon, 10 Aug 2026 10:59:32 +0000</pubDate>
    </item>
  </channel>
</rss>
