<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 31 May 2026 14:39:15 +0000</lastBuildDate>
    <item>
      <title>2297a9ff-e188-4b48-8a35-8decb065a4c5</title>
      <link>https://vulnerability.circl.lu/sighting/2297a9ff-e188-4b48-8a35-8decb065a4c5/export</link>
      <description>{"uuid": "2297a9ff-e188-4b48-8a35-8decb065a4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/citrix_netscaler_cve_2026_3055.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"watchTowr\", \"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module scans for a vulnerability that allows a remote, unauthenticated attacker to leak memory from a\\n          target Citrix ADC server configured as a SAML IdP. The leaked memory is then scanned for session cookies\\n          which can be hijacked if found.\", \"disclosure_date\": \"2026-03-23\", \"fullname\": \"auxiliary/scanner/http/citrix_netscaler_cve_2026_3055\", \"is_install_path\": true, \"mod_time\": \"2026-05-20 10:03:51 +0000\", \"name\": \"Citrix ADC (NetScaler) CVE-2026-3055 Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/citrix_netscaler_cve_2026_3055.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/citrix_netscaler_cve_2026_3055\", \"references\": [\"CVE-2026-3055\", \"URL-https://labs.watchtowr.com/the-sequels-are-never-as-good-but-were-still-in-pain-citrix-netscaler-cve-2026-3055-memory-overread/\", \"URL-https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-05-20T17:09:03.000000Z"}</description>
      <content:encoded>{"uuid": "2297a9ff-e188-4b48-8a35-8decb065a4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/citrix_netscaler_cve_2026_3055.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"watchTowr\", \"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module scans for a vulnerability that allows a remote, unauthenticated attacker to leak memory from a\\n          target Citrix ADC server configured as a SAML IdP. The leaked memory is then scanned for session cookies\\n          which can be hijacked if found.\", \"disclosure_date\": \"2026-03-23\", \"fullname\": \"auxiliary/scanner/http/citrix_netscaler_cve_2026_3055\", \"is_install_path\": true, \"mod_time\": \"2026-05-20 10:03:51 +0000\", \"name\": \"Citrix ADC (NetScaler) CVE-2026-3055 Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/citrix_netscaler_cve_2026_3055.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/citrix_netscaler_cve_2026_3055\", \"references\": [\"CVE-2026-3055\", \"URL-https://labs.watchtowr.com/the-sequels-are-never-as-good-but-were-still-in-pain-citrix-netscaler-cve-2026-3055-memory-overread/\", \"URL-https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-05-20T17:09:03.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2297a9ff-e188-4b48-8a35-8decb065a4c5/export</guid>
      <pubDate>Wed, 20 May 2026 17:09:03 +0000</pubDate>
    </item>
    <item>
      <title>3c182e1e-e3aa-459e-959b-93c5a4ec0db4</title>
      <link>https://vulnerability.circl.lu/sighting/3c182e1e-e3aa-459e-959b-93c5a4ec0db4/export</link>
      <description>{"uuid": "3c182e1e-e3aa-459e-959b-93c5a4ec0db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "published-proof-of-concept", "source": "Telegram/8XMYNKwrAfZdRqR9ubtjXzgzOw6F5g1aYGu8o-Ioo35SIYg", "content": "", "creation_timestamp": "2026-05-20T23:00:11.000000Z"}</description>
      <content:encoded>{"uuid": "3c182e1e-e3aa-459e-959b-93c5a4ec0db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "published-proof-of-concept", "source": "Telegram/8XMYNKwrAfZdRqR9ubtjXzgzOw6F5g1aYGu8o-Ioo35SIYg", "content": "", "creation_timestamp": "2026-05-20T23:00:11.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3c182e1e-e3aa-459e-959b-93c5a4ec0db4/export</guid>
      <pubDate>Wed, 20 May 2026 23:00:11 +0000</pubDate>
    </item>
    <item>
      <title>08f6c3bd-5529-443b-902e-72184535e45e</title>
      <link>https://vulnerability.circl.lu/sighting/08f6c3bd-5529-443b-902e-72184535e45e/export</link>
      <description>{"uuid": "08f6c3bd-5529-443b-902e-72184535e45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-21)", "content": "", "creation_timestamp": "2026-05-21T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "08f6c3bd-5529-443b-902e-72184535e45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-21)", "content": "", "creation_timestamp": "2026-05-21T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/08f6c3bd-5529-443b-902e-72184535e45e/export</guid>
      <pubDate>Thu, 21 May 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>8c4d3216-2845-4746-8e45-713a54c45db8</title>
      <link>https://vulnerability.circl.lu/sighting/8c4d3216-2845-4746-8e45-713a54c45db8/export</link>
      <description>{"uuid": "8c4d3216-2845-4746-8e45-713a54c45db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-24)", "content": "", "creation_timestamp": "2026-05-24T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "8c4d3216-2845-4746-8e45-713a54c45db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-24)", "content": "", "creation_timestamp": "2026-05-24T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8c4d3216-2845-4746-8e45-713a54c45db8/export</guid>
      <pubDate>Sun, 24 May 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>db4ff031-df37-4d2f-8433-9cc51cde4e53</title>
      <link>https://vulnerability.circl.lu/sighting/db4ff031-df37-4d2f-8433-9cc51cde4e53/export</link>
      <description>{"uuid": "db4ff031-df37-4d2f-8433-9cc51cde4e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-25)", "content": "", "creation_timestamp": "2026-05-25T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "db4ff031-df37-4d2f-8433-9cc51cde4e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-25)", "content": "", "creation_timestamp": "2026-05-25T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/db4ff031-df37-4d2f-8433-9cc51cde4e53/export</guid>
      <pubDate>Mon, 25 May 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>394c46f8-e127-463e-8e43-756f774bf96f</title>
      <link>https://vulnerability.circl.lu/sighting/394c46f8-e127-463e-8e43-756f774bf96f/export</link>
      <description>{"uuid": "394c46f8-e127-463e-8e43-756f774bf96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "394c46f8-e127-463e-8e43-756f774bf96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/394c46f8-e127-463e-8e43-756f774bf96f/export</guid>
      <pubDate>Tue, 26 May 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>1f8c4523-416b-4623-b6c7-69ac9075b083</title>
      <link>https://vulnerability.circl.lu/sighting/1f8c4523-416b-4623-b6c7-69ac9075b083/export</link>
      <description>{"uuid": "1f8c4523-416b-4623-b6c7-69ac9075b083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "1f8c4523-416b-4623-b6c7-69ac9075b083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1f8c4523-416b-4623-b6c7-69ac9075b083/export</guid>
      <pubDate>Thu, 28 May 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>5ca0ba6e-36fb-47e0-9b49-5cffecaeca8b</title>
      <link>https://vulnerability.circl.lu/sighting/5ca0ba6e-36fb-47e0-9b49-5cffecaeca8b/export</link>
      <description>{"uuid": "5ca0ba6e-36fb-47e0-9b49-5cffecaeca8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "5ca0ba6e-36fb-47e0-9b49-5cffecaeca8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5ca0ba6e-36fb-47e0-9b49-5cffecaeca8b/export</guid>
      <pubDate>Fri, 29 May 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>c00c20ee-b998-4b52-bbb4-39be2554580a</title>
      <link>https://vulnerability.circl.lu/sighting/c00c20ee-b998-4b52-bbb4-39be2554580a/export</link>
      <description>{"uuid": "c00c20ee-b998-4b52-bbb4-39be2554580a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-30)", "content": "", "creation_timestamp": "2026-05-30T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "c00c20ee-b998-4b52-bbb4-39be2554580a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-30)", "content": "", "creation_timestamp": "2026-05-30T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c00c20ee-b998-4b52-bbb4-39be2554580a/export</guid>
      <pubDate>Sat, 30 May 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>4d581104-ff16-4d10-b281-55de19534ba4</title>
      <link>https://vulnerability.circl.lu/sighting/4d581104-ff16-4d10-b281-55de19534ba4/export</link>
      <description>{"uuid": "4d581104-ff16-4d10-b281-55de19534ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-30)", "content": "", "creation_timestamp": "2026-05-30T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "4d581104-ff16-4d10-b281-55de19534ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3055", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-30)", "content": "", "creation_timestamp": "2026-05-30T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4d581104-ff16-4d10-b281-55de19534ba4/export</guid>
      <pubDate>Sat, 30 May 2026 00:00:00 +0000</pubDate>
    </item>
  </channel>
</rss>
