<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 09 May 2026 19:21:37 +0000</lastBuildDate>
    <item>
      <title>b18173a9-c491-4ce4-b11f-57b0b1fd91d8</title>
      <link>https://vulnerability.circl.lu/sighting/b18173a9-c491-4ce4-b11f-57b0b1fd91d8/export</link>
      <description>{"uuid": "b18173a9-c491-4ce4-b11f-57b0b1fd91d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4281", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4281", "content": "", "creation_timestamp": "2026-03-26T04:16:40.000000Z"}</description>
      <content:encoded>{"uuid": "b18173a9-c491-4ce4-b11f-57b0b1fd91d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4281", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4281", "content": "", "creation_timestamp": "2026-03-26T04:16:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b18173a9-c491-4ce4-b11f-57b0b1fd91d8/export</guid>
      <pubDate>Thu, 26 Mar 2026 04:16:40 +0000</pubDate>
    </item>
    <item>
      <title>0a8bd2e2-9e9d-4fea-9e01-474acd93d80e</title>
      <link>https://vulnerability.circl.lu/sighting/0a8bd2e2-9e9d-4fea-9e01-474acd93d80e/export</link>
      <description>{"uuid": "0a8bd2e2-9e9d-4fea-9e01-474acd93d80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4281", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwz4gyfxf2g", "content": "", "creation_timestamp": "2026-03-26T06:48:16.314873Z"}</description>
      <content:encoded>{"uuid": "0a8bd2e2-9e9d-4fea-9e01-474acd93d80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4281", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwz4gyfxf2g", "content": "", "creation_timestamp": "2026-03-26T06:48:16.314873Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0a8bd2e2-9e9d-4fea-9e01-474acd93d80e/export</guid>
      <pubDate>Thu, 26 Mar 2026 06:48:16 +0000</pubDate>
    </item>
    <item>
      <title>0d0afca3-7503-407e-b549-6223ad980591</title>
      <link>https://vulnerability.circl.lu/sighting/0d0afca3-7503-407e-b549-6223ad980591/export</link>
      <description>{"uuid": "0d0afca3-7503-407e-b549-6223ad980591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42810", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2avc356h2k", "content": "\ud83d\udd34 CVE-2026-42810 - Critical (9.9)\n\nApache Polaris accepts literal `*` characters in namespace and table names. When it\nlater builds ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42810/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:01:00.287213Z"}</description>
      <content:encoded>{"uuid": "0d0afca3-7503-407e-b549-6223ad980591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42810", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2avc356h2k", "content": "\ud83d\udd34 CVE-2026-42810 - Critical (9.9)\n\nApache Polaris accepts literal `*` characters in namespace and table names. When it\nlater builds ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42810/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:01:00.287213Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0d0afca3-7503-407e-b549-6223ad980591/export</guid>
      <pubDate>Mon, 04 May 2026 18:01:00 +0000</pubDate>
    </item>
    <item>
      <title>aa648ebe-1c29-494d-ab1e-f1e9a0785487</title>
      <link>https://vulnerability.circl.lu/sighting/aa648ebe-1c29-494d-ab1e-f1e9a0785487/export</link>
      <description>{"uuid": "aa648ebe-1c29-494d-ab1e-f1e9a0785487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42811", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2awtnhos2e", "content": "\ud83d\udd34 CVE-2026-42811 - Critical (9.9)\n\nIn plain terms, Apache Polaris is supposed to issue short-lived GCS credentials\nthat\nonly work fo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42811/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:01:52.576959Z"}</description>
      <content:encoded>{"uuid": "aa648ebe-1c29-494d-ab1e-f1e9a0785487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42811", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2awtnhos2e", "content": "\ud83d\udd34 CVE-2026-42811 - Critical (9.9)\n\nIn plain terms, Apache Polaris is supposed to issue short-lived GCS credentials\nthat\nonly work fo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42811/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:01:52.576959Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aa648ebe-1c29-494d-ab1e-f1e9a0785487/export</guid>
      <pubDate>Mon, 04 May 2026 18:01:52 +0000</pubDate>
    </item>
    <item>
      <title>ad967b87-2858-4009-8d9c-cbcf27cb9d03</title>
      <link>https://vulnerability.circl.lu/sighting/ad967b87-2858-4009-8d9c-cbcf27cb9d03/export</link>
      <description>{"uuid": "ad967b87-2858-4009-8d9c-cbcf27cb9d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42812", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ax33zfg2n", "content": "\ud83d\udd34 CVE-2026-42812 - Critical (9.9)\n\nIn Apache Iceberg, the table's metadata files are control files: they tell readers\nwhich data fil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42812/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:02:00.169434Z"}</description>
      <content:encoded>{"uuid": "ad967b87-2858-4009-8d9c-cbcf27cb9d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42812", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ax33zfg2n", "content": "\ud83d\udd34 CVE-2026-42812 - Critical (9.9)\n\nIn Apache Iceberg, the table's metadata files are control files: they tell readers\nwhich data fil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42812/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:02:00.169434Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ad967b87-2858-4009-8d9c-cbcf27cb9d03/export</guid>
      <pubDate>Mon, 04 May 2026 18:02:00 +0000</pubDate>
    </item>
    <item>
      <title>661c07fb-fd9e-43a0-be73-01f2950ab222</title>
      <link>https://vulnerability.circl.lu/sighting/661c07fb-fd9e-43a0-be73-01f2950ab222/export</link>
      <description>{"uuid": "661c07fb-fd9e-43a0-be73-01f2950ab222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2f4db6kr2i", "content": "CVE-2026-42812 - Apache Polaris: No protection on `write.metadata.path`\nCVE ID : CVE-2026-42812\n \n Published : May 4, 2026, 5:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In Apache Iceberg, the table's metadata files are control files: they tell readers\nwhich data files be...", "creation_timestamp": "2026-05-04T19:16:30.895202Z"}</description>
      <content:encoded>{"uuid": "661c07fb-fd9e-43a0-be73-01f2950ab222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2f4db6kr2i", "content": "CVE-2026-42812 - Apache Polaris: No protection on `write.metadata.path`\nCVE ID : CVE-2026-42812\n \n Published : May 4, 2026, 5:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In Apache Iceberg, the table's metadata files are control files: they tell readers\nwhich data files be...", "creation_timestamp": "2026-05-04T19:16:30.895202Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/661c07fb-fd9e-43a0-be73-01f2950ab222/export</guid>
      <pubDate>Mon, 04 May 2026 19:16:30 +0000</pubDate>
    </item>
    <item>
      <title>4d2ba79b-3e86-461c-99b2-4b1726f00a47</title>
      <link>https://vulnerability.circl.lu/sighting/4d2ba79b-3e86-461c-99b2-4b1726f00a47/export</link>
      <description>{"uuid": "4d2ba79b-3e86-461c-99b2-4b1726f00a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2ffbqa2m2r", "content": "CVE-2026-42810 - Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table names\nCVE ID : CVE-2026-42810\n \n Published : May 4, 2026, 5:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : Apache Polaris accepts literal `*` characters in namesp...", "creation_timestamp": "2026-05-04T19:21:31.044107Z"}</description>
      <content:encoded>{"uuid": "4d2ba79b-3e86-461c-99b2-4b1726f00a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2ffbqa2m2r", "content": "CVE-2026-42810 - Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table names\nCVE ID : CVE-2026-42810\n \n Published : May 4, 2026, 5:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : Apache Polaris accepts literal `*` characters in namesp...", "creation_timestamp": "2026-05-04T19:21:31.044107Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4d2ba79b-3e86-461c-99b2-4b1726f00a47/export</guid>
      <pubDate>Mon, 04 May 2026 19:21:31 +0000</pubDate>
    </item>
    <item>
      <title>7785bb17-33e2-47cb-8026-64bd315a55e6</title>
      <link>https://vulnerability.circl.lu/sighting/7785bb17-33e2-47cb-8026-64bd315a55e6/export</link>
      <description>{"uuid": "7785bb17-33e2-47cb-8026-64bd315a55e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2foaah4a2q", "content": "CVE-2026-42811 - Apache Polaris: could broaden vended GCS credentials through unescaped identifier content in access-boundary CEL conditions\nCVE ID : CVE-2026-42811\n \n Published : May 4, 2026, 5:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In plain terms, Apache Polaris is...", "creation_timestamp": "2026-05-04T19:26:31.598153Z"}</description>
      <content:encoded>{"uuid": "7785bb17-33e2-47cb-8026-64bd315a55e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2foaah4a2q", "content": "CVE-2026-42811 - Apache Polaris: could broaden vended GCS credentials through unescaped identifier content in access-boundary CEL conditions\nCVE ID : CVE-2026-42811\n \n Published : May 4, 2026, 5:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In plain terms, Apache Polaris is...", "creation_timestamp": "2026-05-04T19:26:31.598153Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7785bb17-33e2-47cb-8026-64bd315a55e6/export</guid>
      <pubDate>Mon, 04 May 2026 19:26:31 +0000</pubDate>
    </item>
  </channel>
</rss>
