<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 10 Jun 2026 18:57:12 +0000</lastBuildDate>
    <item>
      <title>7c7243ef-8ac4-42b9-8f9c-612300d82156</title>
      <link>https://vulnerability.circl.lu/sighting/7c7243ef-8ac4-42b9-8f9c-612300d82156/export</link>
      <description>{"uuid": "7c7243ef-8ac4-42b9-8f9c-612300d82156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4503", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqllcixu326", "content": "\ud83d\udfe0 CVE-2026-4503 - High (7.5)\n\nIBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view oth...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4503/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T21:45:38.853150Z"}</description>
      <content:encoded>{"uuid": "7c7243ef-8ac4-42b9-8f9c-612300d82156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4503", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqllcixu326", "content": "\ud83d\udfe0 CVE-2026-4503 - High (7.5)\n\nIBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view oth...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4503/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T21:45:38.853150Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7c7243ef-8ac4-42b9-8f9c-612300d82156/export</guid>
      <pubDate>Thu, 30 Apr 2026 21:45:38 +0000</pubDate>
    </item>
    <item>
      <title>924a16ec-359c-45a4-b01f-239555e3c569</title>
      <link>https://vulnerability.circl.lu/sighting/924a16ec-359c-45a4-b01f-239555e3c569/export</link>
      <description>{"uuid": "924a16ec-359c-45a4-b01f-239555e3c569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4503", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqoxati4x2t", "content": "CVE-2026-4503 - Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint\nCVE ID : CVE-2026-4503\n \n Published : April 30, 2026, 9:16 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : IBM Langflow Desktop 1.0.0 through 1.8.4 L...", "creation_timestamp": "2026-04-30T22:46:00.488059Z"}</description>
      <content:encoded>{"uuid": "924a16ec-359c-45a4-b01f-239555e3c569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4503", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqoxati4x2t", "content": "CVE-2026-4503 - Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint\nCVE ID : CVE-2026-4503\n \n Published : April 30, 2026, 9:16 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : IBM Langflow Desktop 1.0.0 through 1.8.4 L...", "creation_timestamp": "2026-04-30T22:46:00.488059Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/924a16ec-359c-45a4-b01f-239555e3c569/export</guid>
      <pubDate>Thu, 30 Apr 2026 22:46:00 +0000</pubDate>
    </item>
    <item>
      <title>e05432e6-402a-4b19-9ec3-2288c6dc1e4c</title>
      <link>https://vulnerability.circl.lu/sighting/e05432e6-402a-4b19-9ec3-2288c6dc1e4c/export</link>
      <description>{"uuid": "e05432e6-402a-4b19-9ec3-2288c6dc1e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlrd7htx5x2n", "content": "CVE-2026-45033 - GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor\nCVE ID : CVE-2026-45033\n \n Published : May 13, 2026, 4:17 p.m. | 4\u00a0hours, 8\u00a0minutes ago\n \n Description : GitHub Copilot CLI brings AI-powered coding assistance directl...", "creation_timestamp": "2026-05-13T22:13:43.044275Z"}</description>
      <content:encoded>{"uuid": "e05432e6-402a-4b19-9ec3-2288c6dc1e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlrd7htx5x2n", "content": "CVE-2026-45033 - GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor\nCVE ID : CVE-2026-45033\n \n Published : May 13, 2026, 4:17 p.m. | 4\u00a0hours, 8\u00a0minutes ago\n \n Description : GitHub Copilot CLI brings AI-powered coding assistance directl...", "creation_timestamp": "2026-05-13T22:13:43.044275Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e05432e6-402a-4b19-9ec3-2288c6dc1e4c/export</guid>
      <pubDate>Wed, 13 May 2026 22:13:43 +0000</pubDate>
    </item>
    <item>
      <title>5e32154a-dbbe-469d-99a6-96421b998f63</title>
      <link>https://vulnerability.circl.lu/sighting/5e32154a-dbbe-469d-99a6-96421b998f63/export</link>
      <description>{"uuid": "5e32154a-dbbe-469d-99a6-96421b998f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45035", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlx67zbdpu2m", "content": "CRITICAL: Tabby &amp;lt; 1.0.233 lets attackers run OS commands via tabby:// links \u2014 zero-click RCE! Upgrade to 1.0.233+ ASAP. Avoid untrusted links. https://radar.offseq.com/threat/cve-2026-45035-cwe-78-improper-neutralization-of-s-e1b4240b #OffSeq #SecurityAlert #Tabby", "creation_timestamp": "2026-05-16T06:02:35.142804Z"}</description>
      <content:encoded>{"uuid": "5e32154a-dbbe-469d-99a6-96421b998f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45035", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlx67zbdpu2m", "content": "CRITICAL: Tabby &amp;lt; 1.0.233 lets attackers run OS commands via tabby:// links \u2014 zero-click RCE! Upgrade to 1.0.233+ ASAP. Avoid untrusted links. https://radar.offseq.com/threat/cve-2026-45035-cwe-78-improper-neutralization-of-s-e1b4240b #OffSeq #SecurityAlert #Tabby", "creation_timestamp": "2026-05-16T06:02:35.142804Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5e32154a-dbbe-469d-99a6-96421b998f63/export</guid>
      <pubDate>Sat, 16 May 2026 06:02:35 +0000</pubDate>
    </item>
    <item>
      <title>c84dcb83-970c-4d2f-9fdf-161d004a0ffe</title>
      <link>https://vulnerability.circl.lu/sighting/c84dcb83-970c-4d2f-9fdf-161d004a0ffe/export</link>
      <description>{"uuid": "c84dcb83-970c-4d2f-9fdf-161d004a0ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45039", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwsu52wag2z", "content": "\ud83d\udd34 CVE-2026-45039 - Critical (9.8)\n\nRustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the internode...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45039/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T20:02:13.661516Z"}</description>
      <content:encoded>{"uuid": "c84dcb83-970c-4d2f-9fdf-161d004a0ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45039", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwsu52wag2z", "content": "\ud83d\udd34 CVE-2026-45039 - Critical (9.8)\n\nRustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the internode...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45039/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T20:02:13.661516Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c84dcb83-970c-4d2f-9fdf-161d004a0ffe/export</guid>
      <pubDate>Thu, 28 May 2026 20:02:13 +0000</pubDate>
    </item>
    <item>
      <title>19914a5b-d16d-4264-95e6-87e957b98592</title>
      <link>https://vulnerability.circl.lu/sighting/19914a5b-d16d-4264-95e6-87e957b98592/export</link>
      <description>{"uuid": "19914a5b-d16d-4264-95e6-87e957b98592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45034", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-87m4-826x-3crx", "content": "", "creation_timestamp": "2026-06-07T04:04:34.000000Z"}</description>
      <content:encoded>{"uuid": "19914a5b-d16d-4264-95e6-87e957b98592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45034", "type": "published-proof-of-concept", "source": "https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-87m4-826x-3crx", "content": "", "creation_timestamp": "2026-06-07T04:04:34.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/19914a5b-d16d-4264-95e6-87e957b98592/export</guid>
      <pubDate>Sun, 07 Jun 2026 04:04:34 +0000</pubDate>
    </item>
  </channel>
</rss>
