<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 27 May 2026 18:40:40 +0000</lastBuildDate>
    <item>
      <title>0bc554f2-b39a-47ce-b12c-ad1e59ed3b37</title>
      <link>https://vulnerability.circl.lu/sighting/0bc554f2-b39a-47ce-b12c-ad1e59ed3b37/export</link>
      <description>{"uuid": "0bc554f2-b39a-47ce-b12c-ad1e59ed3b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlaimg64462k", "content": "CVE-2026-41002 - Spring Cloud Config Git Repository TOCTOU Vulnerability\nCVE ID : CVE-2026-41002\n \n Published : May 7, 2026, 3:53 a.m. | 31\u00a0minutes ago\n \n Description : The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clon...", "creation_timestamp": "2026-05-07T05:35:10.661072Z"}</description>
      <content:encoded>{"uuid": "0bc554f2-b39a-47ce-b12c-ad1e59ed3b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlaimg64462k", "content": "CVE-2026-41002 - Spring Cloud Config Git Repository TOCTOU Vulnerability\nCVE ID : CVE-2026-41002\n \n Published : May 7, 2026, 3:53 a.m. | 31\u00a0minutes ago\n \n Description : The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clon...", "creation_timestamp": "2026-05-07T05:35:10.661072Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0bc554f2-b39a-47ce-b12c-ad1e59ed3b37/export</guid>
      <pubDate>Thu, 07 May 2026 05:35:10 +0000</pubDate>
    </item>
    <item>
      <title>58d89070-377d-4d59-b891-24e07f3bbe9d</title>
      <link>https://vulnerability.circl.lu/sighting/58d89070-377d-4d59-b891-24e07f3bbe9d/export</link>
      <description>{"uuid": "58d89070-377d-4d59-b891-24e07f3bbe9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlakplsqy52v", "content": "CVE-2026-41004 - Spring Cloud Config: Information Disclosure through Trace Logging\nCVE ID : CVE-2026-41004\n \n Published : May 7, 2026, 3:51 a.m. | 33\u00a0minutes ago\n \n Description : When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plai...", "creation_timestamp": "2026-05-07T06:12:44.558474Z"}</description>
      <content:encoded>{"uuid": "58d89070-377d-4d59-b891-24e07f3bbe9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlakplsqy52v", "content": "CVE-2026-41004 - Spring Cloud Config: Information Disclosure through Trace Logging\nCVE ID : CVE-2026-41004\n \n Published : May 7, 2026, 3:51 a.m. | 33\u00a0minutes ago\n \n Description : When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plai...", "creation_timestamp": "2026-05-07T06:12:44.558474Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/58d89070-377d-4d59-b891-24e07f3bbe9d/export</guid>
      <pubDate>Thu, 07 May 2026 06:12:44 +0000</pubDate>
    </item>
    <item>
      <title>1add11f9-d011-440f-8b21-927e05f9a27d</title>
      <link>https://vulnerability.circl.lu/sighting/1add11f9-d011-440f-8b21-927e05f9a27d/export</link>
      <description>{"uuid": "1add11f9-d011-440f-8b21-927e05f9a27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-431", "content": "", "creation_timestamp": "2026-05-07T06:48:23.000000Z"}</description>
      <content:encoded>{"uuid": "1add11f9-d011-440f-8b21-927e05f9a27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-431", "content": "", "creation_timestamp": "2026-05-07T06:48:23.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1add11f9-d011-440f-8b21-927e05f9a27d/export</guid>
      <pubDate>Thu, 07 May 2026 06:48:23 +0000</pubDate>
    </item>
    <item>
      <title>be5abccc-dbb9-43b6-bbc4-0e7cffa8bcca</title>
      <link>https://vulnerability.circl.lu/sighting/be5abccc-dbb9-43b6-bbc4-0e7cffa8bcca/export</link>
      <description>{"uuid": "be5abccc-dbb9-43b6-bbc4-0e7cffa8bcca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41004", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-spring-cloud-config", "content": "", "creation_timestamp": "2026-05-07T07:29:50.000000Z"}</description>
      <content:encoded>{"uuid": "be5abccc-dbb9-43b6-bbc4-0e7cffa8bcca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41004", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-spring-cloud-config", "content": "", "creation_timestamp": "2026-05-07T07:29:50.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/be5abccc-dbb9-43b6-bbc4-0e7cffa8bcca/export</guid>
      <pubDate>Thu, 07 May 2026 07:29:50 +0000</pubDate>
    </item>
    <item>
      <title>5f615537-bd45-4d1c-a25c-752821bbb6b5</title>
      <link>https://vulnerability.circl.lu/sighting/5f615537-bd45-4d1c-a25c-752821bbb6b5/export</link>
      <description>{"uuid": "5f615537-bd45-4d1c-a25c-752821bbb6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-spring-cloud-config", "content": "", "creation_timestamp": "2026-05-07T07:29:50.000000Z"}</description>
      <content:encoded>{"uuid": "5f615537-bd45-4d1c-a25c-752821bbb6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-spring-cloud-config", "content": "", "creation_timestamp": "2026-05-07T07:29:50.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5f615537-bd45-4d1c-a25c-752821bbb6b5/export</guid>
      <pubDate>Thu, 07 May 2026 07:29:50 +0000</pubDate>
    </item>
    <item>
      <title>5c087124-999c-4dad-8db8-0b1ec15c84ab</title>
      <link>https://vulnerability.circl.lu/sighting/5c087124-999c-4dad-8db8-0b1ec15c84ab/export</link>
      <description>{"uuid": "5c087124-999c-4dad-8db8-0b1ec15c84ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh3arwaw2e", "content": "\ud83d\udd17 CVE : CVE-2026-40981, CVE-2026-40982, CVE-2026-41002, CVE-2026-41004", "creation_timestamp": "2026-05-07T14:40:20.558435Z"}</description>
      <content:encoded>{"uuid": "5c087124-999c-4dad-8db8-0b1ec15c84ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41002", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh3arwaw2e", "content": "\ud83d\udd17 CVE : CVE-2026-40981, CVE-2026-40982, CVE-2026-41002, CVE-2026-41004", "creation_timestamp": "2026-05-07T14:40:20.558435Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5c087124-999c-4dad-8db8-0b1ec15c84ab/export</guid>
      <pubDate>Thu, 07 May 2026 14:40:20 +0000</pubDate>
    </item>
    <item>
      <title>902f12d6-ca8a-4462-aca8-e85146dca4f7</title>
      <link>https://vulnerability.circl.lu/sighting/902f12d6-ca8a-4462-aca8-e85146dca4f7/export</link>
      <description>{"uuid": "902f12d6-ca8a-4462-aca8-e85146dca4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41004", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh3arwaw2e", "content": "\ud83d\udd17 CVE : CVE-2026-40981, CVE-2026-40982, CVE-2026-41002, CVE-2026-41004", "creation_timestamp": "2026-05-07T14:40:20.722675Z"}</description>
      <content:encoded>{"uuid": "902f12d6-ca8a-4462-aca8-e85146dca4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41004", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh3arwaw2e", "content": "\ud83d\udd17 CVE : CVE-2026-40981, CVE-2026-40982, CVE-2026-41002, CVE-2026-41004", "creation_timestamp": "2026-05-07T14:40:20.722675Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/902f12d6-ca8a-4462-aca8-e85146dca4f7/export</guid>
      <pubDate>Thu, 07 May 2026 14:40:20 +0000</pubDate>
    </item>
    <item>
      <title>82feaa8b-a76e-477d-9fad-dde312b1885b</title>
      <link>https://vulnerability.circl.lu/sighting/82feaa8b-a76e-477d-9fad-dde312b1885b/export</link>
      <description>{"uuid": "82feaa8b-a76e-477d-9fad-dde312b1885b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4100", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mlxp2p5ko22h", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-4100 Paid Memberships\u00a0Pro\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nPaid Memberships Pro\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u3001\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\uff083.6.5\u3092\u542b\u3080\uff09\u306b\u304a\u3044\u3066\u3001Stripe webhook\u306e\u8a2d\u5b9a\u304c\u4e0d\u6b63\u306b\u5909\u66f4\u3055\u308c\u308b\u8106\u5f31\u6027\u3092\u62b1\u3048\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-05-16T11:02:08.797878Z"}</description>
      <content:encoded>{"uuid": "82feaa8b-a76e-477d-9fad-dde312b1885b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4100", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mlxp2p5ko22h", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-4100 Paid Memberships\u00a0Pro\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nPaid Memberships Pro\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u3001\u3059\u3079\u3066\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\uff083.6.5\u3092\u542b\u3080\uff09\u306b\u304a\u3044\u3066\u3001Stripe webhook\u306e\u8a2d\u5b9a\u304c\u4e0d\u6b63\u306b\u5909\u66f4\u3055\u308c\u308b\u8106\u5f31\u6027\u3092\u62b1\u3048\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-05-16T11:02:08.797878Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/82feaa8b-a76e-477d-9fad-dde312b1885b/export</guid>
      <pubDate>Sat, 16 May 2026 11:02:08 +0000</pubDate>
    </item>
    <item>
      <title>aaff4eea-e638-4de2-a6e5-d54aac6b71bf</title>
      <link>https://vulnerability.circl.lu/sighting/aaff4eea-e638-4de2-a6e5-d54aac6b71bf/export</link>
      <description>{"uuid": "aaff4eea-e638-4de2-a6e5-d54aac6b71bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt6mzraeh2k", "content": "CVE-2026-41009 - Local Blobstore may allow arbitrary reads/deletes\nCVE ID : CVE-2026-41009\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by Agen...", "creation_timestamp": "2026-05-27T09:22:20.219393Z"}</description>
      <content:encoded>{"uuid": "aaff4eea-e638-4de2-a6e5-d54aac6b71bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt6mzraeh2k", "content": "CVE-2026-41009 - Local Blobstore may allow arbitrary reads/deletes\nCVE ID : CVE-2026-41009\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by Agen...", "creation_timestamp": "2026-05-27T09:22:20.219393Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aaff4eea-e638-4de2-a6e5-d54aac6b71bf/export</guid>
      <pubDate>Wed, 27 May 2026 09:22:20 +0000</pubDate>
    </item>
  </channel>
</rss>
