<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 23 Jun 2026 11:00:47 +0000</lastBuildDate>
    <item>
      <title>585a9874-8acc-4006-ba97-a0d31deae0a5</title>
      <link>https://vulnerability.circl.lu/sighting/585a9874-8acc-4006-ba97-a0d31deae0a5/export</link>
      <description>{"uuid": "585a9874-8acc-4006-ba97-a0d31deae0a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44914", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3moqfnp5qnq2s", "content": "CVE-2026-44914: Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow Contents", "creation_timestamp": "2026-06-20T17:40:22.920729Z"}</description>
      <content:encoded>{"uuid": "585a9874-8acc-4006-ba97-a0d31deae0a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44914", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3moqfnp5qnq2s", "content": "CVE-2026-44914: Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow Contents", "creation_timestamp": "2026-06-20T17:40:22.920729Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/585a9874-8acc-4006-ba97-a0d31deae0a5/export</guid>
      <pubDate>Sat, 20 Jun 2026 17:40:22 +0000</pubDate>
    </item>
    <item>
      <title>d201d66e-df75-4059-a5fb-9163c340858b</title>
      <link>https://vulnerability.circl.lu/sighting/d201d66e-df75-4059-a5fb-9163c340858b/export</link>
      <description>{"uuid": "d201d66e-df75-4059-a5fb-9163c340858b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44914", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moujjvtdeq2m", "content": "Apache NiFi 1.12.0 \u2013 2.9.0: HIGH severity flaw lets users with write access add restricted components. Upgrade to 2.9.0 or enforce extra controls. CVE-2026-44914. https://radar.offseq.com/threat/cve-2026-44914-cwe-862-missing-authorization-in-ap-41e3d5d03a56632c #OffSeq #Cybersecurity #NiFi", "creation_timestamp": "2026-06-22T09:00:29.965510Z"}</description>
      <content:encoded>{"uuid": "d201d66e-df75-4059-a5fb-9163c340858b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44914", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moujjvtdeq2m", "content": "Apache NiFi 1.12.0 \u2013 2.9.0: HIGH severity flaw lets users with write access add restricted components. Upgrade to 2.9.0 or enforce extra controls. CVE-2026-44914. https://radar.offseq.com/threat/cve-2026-44914-cwe-862-missing-authorization-in-ap-41e3d5d03a56632c #OffSeq #Cybersecurity #NiFi", "creation_timestamp": "2026-06-22T09:00:29.965510Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d201d66e-df75-4059-a5fb-9163c340858b/export</guid>
      <pubDate>Mon, 22 Jun 2026 09:00:29 +0000</pubDate>
    </item>
    <item>
      <title>7ecbc043-6df4-4f7b-bfba-ddd134240034</title>
      <link>https://vulnerability.circl.lu/sighting/7ecbc043-6df4-4f7b-bfba-ddd134240034/export</link>
      <description>{"uuid": "7ecbc043-6df4-4f7b-bfba-ddd134240034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44914", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116792939472856881", "content": "CVE-2026-44914: HIGH severity in Apache NiFi (1.12.0 \u2013 2.9.0). Missing authorization lets users with write access add restricted components. Upgrade to 2.9.0 or enforce specific controls. https://radar.offseq.com/threat/cve-2026-44914-cwe-862-missing-authorization-in-ap-41e3d5d03a56632c #OffSeq #NiFi #Vuln #Infosec", "creation_timestamp": "2026-06-22T09:00:38.439396Z"}</description>
      <content:encoded>{"uuid": "7ecbc043-6df4-4f7b-bfba-ddd134240034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44914", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116792939472856881", "content": "CVE-2026-44914: HIGH severity in Apache NiFi (1.12.0 \u2013 2.9.0). Missing authorization lets users with write access add restricted components. Upgrade to 2.9.0 or enforce specific controls. https://radar.offseq.com/threat/cve-2026-44914-cwe-862-missing-authorization-in-ap-41e3d5d03a56632c #OffSeq #NiFi #Vuln #Infosec", "creation_timestamp": "2026-06-22T09:00:38.439396Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7ecbc043-6df4-4f7b-bfba-ddd134240034/export</guid>
      <pubDate>Mon, 22 Jun 2026 09:00:38 +0000</pubDate>
    </item>
    <item>
      <title>b964c619-3adb-4d24-bbd0-67abde11f22f</title>
      <link>https://vulnerability.circl.lu/sighting/b964c619-3adb-4d24-bbd0-67abde11f22f/export</link>
      <description>{"uuid": "b964c619-3adb-4d24-bbd0-67abde11f22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44914", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3moum3dbxrd2y", "content": "Apache NiFi 2.10.0 (June 20) fixes CVE-2026-44914, where a user with general write access could add components requiring Restricted permissions, bypassing authorization. It affects 1.12.0 to 2.9.0. How do you gate Restricted components in NiFi?\n#security", "creation_timestamp": "2026-06-22T09:46:01.994703Z"}</description>
      <content:encoded>{"uuid": "b964c619-3adb-4d24-bbd0-67abde11f22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44914", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3moum3dbxrd2y", "content": "Apache NiFi 2.10.0 (June 20) fixes CVE-2026-44914, where a user with general write access could add components requiring Restricted permissions, bypassing authorization. It affects 1.12.0 to 2.9.0. How do you gate Restricted components in NiFi?\n#security", "creation_timestamp": "2026-06-22T09:46:01.994703Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b964c619-3adb-4d24-bbd0-67abde11f22f/export</guid>
      <pubDate>Mon, 22 Jun 2026 09:46:01 +0000</pubDate>
    </item>
    <item>
      <title>8c1b951d-b913-4005-bd0e-a65cb0d3a94c</title>
      <link>https://vulnerability.circl.lu/sighting/8c1b951d-b913-4005-bd0e-a65cb0d3a94c/export</link>
      <description>{"uuid": "8c1b951d-b913-4005-bd0e-a65cb0d3a94c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44914", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moutcafs422s", "content": "CVE-2026-44914 - Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow Contents\nCVE ID : CVE-2026-44914\n \n Published : June 22, 2026, 7:38 a.m. | 4\u00a0hours, 5\u00a0minutes ago\n \n Description : Apache NiFi 1.12.0 through 2.9.0 are missing authorization when ...", "creation_timestamp": "2026-06-22T11:55:09.440421Z"}</description>
      <content:encoded>{"uuid": "8c1b951d-b913-4005-bd0e-a65cb0d3a94c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44914", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moutcafs422s", "content": "CVE-2026-44914 - Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow Contents\nCVE ID : CVE-2026-44914\n \n Published : June 22, 2026, 7:38 a.m. | 4\u00a0hours, 5\u00a0minutes ago\n \n Description : Apache NiFi 1.12.0 through 2.9.0 are missing authorization when ...", "creation_timestamp": "2026-06-22T11:55:09.440421Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8c1b951d-b913-4005-bd0e-a65cb0d3a94c/export</guid>
      <pubDate>Mon, 22 Jun 2026 11:55:09 +0000</pubDate>
    </item>
    <item>
      <title>05f43efe-fbff-42f5-ac2d-fc6073710565</title>
      <link>https://vulnerability.circl.lu/sighting/05f43efe-fbff-42f5-ac2d-fc6073710565/export</link>
      <description>{"uuid": "05f43efe-fbff-42f5-ac2d-fc6073710565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44914", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mowzgqkgoc2a", "content": "\ud83d\udea8 CVE-2026-44914 (High) affects Apache NiFi versions 1.12.0 through 2.9.0.\n\nThe vulnerability allows users with general write access to add Restricted components when replacing Process Groups due to missing authorization checks.\n\nUpgrade to Apache NiFi 2.9.0 to mitigate the issue.", "creation_timestamp": "2026-06-23T08:50:22.762018Z"}</description>
      <content:encoded>{"uuid": "05f43efe-fbff-42f5-ac2d-fc6073710565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44914", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mowzgqkgoc2a", "content": "\ud83d\udea8 CVE-2026-44914 (High) affects Apache NiFi versions 1.12.0 through 2.9.0.\n\nThe vulnerability allows users with general write access to add Restricted components when replacing Process Groups due to missing authorization checks.\n\nUpgrade to Apache NiFi 2.9.0 to mitigate the issue.", "creation_timestamp": "2026-06-23T08:50:22.762018Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/05f43efe-fbff-42f5-ac2d-fc6073710565/export</guid>
      <pubDate>Tue, 23 Jun 2026 08:50:22 +0000</pubDate>
    </item>
  </channel>
</rss>
