<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 13 Aug 2026 21:49:12 +0000</lastBuildDate>
    <item>
      <title>f098c920-e675-44ab-8a89-6accb2ea0b93</title>
      <link>https://vulnerability.circl.lu/sighting/f098c920-e675-44ab-8a89-6accb2ea0b93/export</link>
      <description>{"uuid": "f098c920-e675-44ab-8a89-6accb2ea0b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4879", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m", "content": "\ud83d\udd17 CVE : CVE-2025-9486, CVE-2026-15216, CVE-2026-15217, CVE-2026-15423, CVE-2026-16494, CVE-2026-16627, CVE-2026-18244, CVE-2026-18433, CVE-2026-19228, CVE-2026-4879, CVE-2026-6821, CVE-2026-7427, CVE-2026-8667", "creation_timestamp": "2026-08-13T14:05:08.242447Z"}</description>
      <content:encoded>{"uuid": "f098c920-e675-44ab-8a89-6accb2ea0b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4879", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m", "content": "\ud83d\udd17 CVE : CVE-2025-9486, CVE-2026-15216, CVE-2026-15217, CVE-2026-15423, CVE-2026-16494, CVE-2026-16627, CVE-2026-18244, CVE-2026-18433, CVE-2026-19228, CVE-2026-4879, CVE-2026-6821, CVE-2026-7427, CVE-2026-8667", "creation_timestamp": "2026-08-13T14:05:08.242447Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f098c920-e675-44ab-8a89-6accb2ea0b93/export</guid>
      <pubDate>Thu, 13 Aug 2026 14:05:08 +0000</pubDate>
    </item>
    <item>
      <title>5e3c0ee4-6382-479d-b6f1-c815c7e67194</title>
      <link>https://vulnerability.circl.lu/sighting/5e3c0ee4-6382-479d-b6f1-c815c7e67194/export</link>
      <description>{"uuid": "5e3c0ee4-6382-479d-b6f1-c815c7e67194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48791", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-48791", "content": "", "creation_timestamp": "2026-08-13T04:15:10.401335Z"}</description>
      <content:encoded>{"uuid": "5e3c0ee4-6382-479d-b6f1-c815c7e67194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48791", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-48791", "content": "", "creation_timestamp": "2026-08-13T04:15:10.401335Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5e3c0ee4-6382-479d-b6f1-c815c7e67194/export</guid>
      <pubDate>Thu, 13 Aug 2026 04:15:10 +0000</pubDate>
    </item>
    <item>
      <title>be9c58ae-a0eb-430b-927b-6d160dfd2a6b</title>
      <link>https://vulnerability.circl.lu/sighting/be9c58ae-a0eb-430b-927b-6d160dfd2a6b/export</link>
      <description>{"uuid": "be9c58ae-a0eb-430b-927b-6d160dfd2a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48795", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpy2lqb3e2s", "content": "CVE-2026-48795 - Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparser\nCVE ID : CVE-2026-48795\n \n Published : July 15, 2026, 10:16 p.m. | 17\u00a0minutes ago\n \n Description : AdonisJS is a TypeScript-first web framework. From 10.1.3 until 10.1.5 and 11.0.3, AdonisJS @adonisjs/b...", "creation_timestamp": "2026-07-16T00:27:26.328942Z"}</description>
      <content:encoded>{"uuid": "be9c58ae-a0eb-430b-927b-6d160dfd2a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48795", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpy2lqb3e2s", "content": "CVE-2026-48795 - Incomplete fix for CVE-2026-25754 in @adonisjs/bodyparser\nCVE ID : CVE-2026-48795\n \n Published : July 15, 2026, 10:16 p.m. | 17\u00a0minutes ago\n \n Description : AdonisJS is a TypeScript-first web framework. From 10.1.3 until 10.1.5 and 11.0.3, AdonisJS @adonisjs/b...", "creation_timestamp": "2026-07-16T00:27:26.328942Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/be9c58ae-a0eb-430b-927b-6d160dfd2a6b/export</guid>
      <pubDate>Thu, 16 Jul 2026 00:27:26 +0000</pubDate>
    </item>
    <item>
      <title>2c296f9b-24a2-45e9-8627-7c4a1db323d2</title>
      <link>https://vulnerability.circl.lu/sighting/2c296f9b-24a2-45e9-8627-7c4a1db323d2/export</link>
      <description>{"uuid": "2c296f9b-24a2-45e9-8627-7c4a1db323d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48791", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-qqw8-7c2r-jxch", "content": "", "creation_timestamp": "2026-07-01T02:50:25.995467Z"}</description>
      <content:encoded>{"uuid": "2c296f9b-24a2-45e9-8627-7c4a1db323d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48791", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-qqw8-7c2r-jxch", "content": "", "creation_timestamp": "2026-07-01T02:50:25.995467Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2c296f9b-24a2-45e9-8627-7c4a1db323d2/export</guid>
      <pubDate>Wed, 01 Jul 2026 02:50:25 +0000</pubDate>
    </item>
    <item>
      <title>59ca5e9b-b185-4023-9e4e-474ee20e5ed9</title>
      <link>https://vulnerability.circl.lu/sighting/59ca5e9b-b185-4023-9e4e-474ee20e5ed9/export</link>
      <description>{"uuid": "59ca5e9b-b185-4023-9e4e-474ee20e5ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48796", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-85jm-cwp2-mvpv", "content": "", "creation_timestamp": "2026-07-01T02:50:16.405948Z"}</description>
      <content:encoded>{"uuid": "59ca5e9b-b185-4023-9e4e-474ee20e5ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48796", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-85jm-cwp2-mvpv", "content": "", "creation_timestamp": "2026-07-01T02:50:16.405948Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/59ca5e9b-b185-4023-9e4e-474ee20e5ed9/export</guid>
      <pubDate>Wed, 01 Jul 2026 02:50:16 +0000</pubDate>
    </item>
    <item>
      <title>327b419a-9eef-49fe-afb7-3493c13d311a</title>
      <link>https://vulnerability.circl.lu/sighting/327b419a-9eef-49fe-afb7-3493c13d311a/export</link>
      <description>{"uuid": "327b419a-9eef-49fe-afb7-3493c13d311a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48790", "type": "published-proof-of-concept", "source": "https://github.com/tursodatabase/turso-cli/security/advisories/GHSA-57f6-pvx8-hwj6", "content": "", "creation_timestamp": "2026-06-26T22:35:34.832149Z"}</description>
      <content:encoded>{"uuid": "327b419a-9eef-49fe-afb7-3493c13d311a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48790", "type": "published-proof-of-concept", "source": "https://github.com/tursodatabase/turso-cli/security/advisories/GHSA-57f6-pvx8-hwj6", "content": "", "creation_timestamp": "2026-06-26T22:35:34.832149Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/327b419a-9eef-49fe-afb7-3493c13d311a/export</guid>
      <pubDate>Fri, 26 Jun 2026 22:35:34 +0000</pubDate>
    </item>
    <item>
      <title>851c6a2b-24ba-4181-8db7-e5274f37f0dd</title>
      <link>https://vulnerability.circl.lu/sighting/851c6a2b-24ba-4181-8db7-e5274f37f0dd/export</link>
      <description>{"uuid": "851c6a2b-24ba-4181-8db7-e5274f37f0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48794", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mooekjem2o2z", "content": "CVE-2026-48794 - Authelia has an Edge Case Access Control Rule Mismatch\nCVE ID : CVE-2026-48794\n \n Published : June 19, 2026, 8:23 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Authelia is an open-source authentication and authorization server providing two-factor authenticat...", "creation_timestamp": "2026-06-19T22:15:22.766809Z"}</description>
      <content:encoded>{"uuid": "851c6a2b-24ba-4181-8db7-e5274f37f0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48794", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mooekjem2o2z", "content": "CVE-2026-48794 - Authelia has an Edge Case Access Control Rule Mismatch\nCVE ID : CVE-2026-48794\n \n Published : June 19, 2026, 8:23 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Authelia is an open-source authentication and authorization server providing two-factor authenticat...", "creation_timestamp": "2026-06-19T22:15:22.766809Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/851c6a2b-24ba-4181-8db7-e5274f37f0dd/export</guid>
      <pubDate>Fri, 19 Jun 2026 22:15:22 +0000</pubDate>
    </item>
    <item>
      <title>9e952a95-cd85-4ce5-86a4-1d640f06535a</title>
      <link>https://vulnerability.circl.lu/sighting/9e952a95-cd85-4ce5-86a4-1d640f06535a/export</link>
      <description>{"uuid": "9e952a95-cd85-4ce5-86a4-1d640f06535a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48797", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mohf6t5rnw25", "content": "CVE-2026-48797 - Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication\nCVE ID : CVE-2026-48797\n \n Published : June 16, 2026, 11:35 p.m. | 2\u00a0hours, 7\u00a0minutes ago\n \n Description : Backpropagate is a Python library for fine-tuning large language ...", "creation_timestamp": "2026-06-17T03:38:06.640520Z"}</description>
      <content:encoded>{"uuid": "9e952a95-cd85-4ce5-86a4-1d640f06535a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48797", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mohf6t5rnw25", "content": "CVE-2026-48797 - Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication\nCVE ID : CVE-2026-48797\n \n Published : June 16, 2026, 11:35 p.m. | 2\u00a0hours, 7\u00a0minutes ago\n \n Description : Backpropagate is a Python library for fine-tuning large language ...", "creation_timestamp": "2026-06-17T03:38:06.640520Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9e952a95-cd85-4ce5-86a4-1d640f06535a/export</guid>
      <pubDate>Wed, 17 Jun 2026 03:38:06 +0000</pubDate>
    </item>
    <item>
      <title>9dbcccec-3496-4ded-97b8-2f3037a4b327</title>
      <link>https://vulnerability.circl.lu/sighting/9dbcccec-3496-4ded-97b8-2f3037a4b327/export</link>
      <description>{"uuid": "9dbcccec-3496-4ded-97b8-2f3037a4b327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48797", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mogyzyan552s", "content": "CRITICAL vuln: mcp-tool-shop-org backpropagate &amp;lt;1.2.0 exposes Reflex UI with no real auth \u2014 attackers can control training &amp;amp; access data. Upgrade to 1.2.0 now! https://radar.offseq.com/threat/cve-2026-48797-cwe-358-improperly-implemented-secu-63bfdfdd #OffSeq #Python #Security", "creation_timestamp": "2026-06-17T00:00:39.164771Z"}</description>
      <content:encoded>{"uuid": "9dbcccec-3496-4ded-97b8-2f3037a4b327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48797", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mogyzyan552s", "content": "CRITICAL vuln: mcp-tool-shop-org backpropagate &amp;lt;1.2.0 exposes Reflex UI with no real auth \u2014 attackers can control training &amp;amp; access data. Upgrade to 1.2.0 now! https://radar.offseq.com/threat/cve-2026-48797-cwe-358-improperly-implemented-secu-63bfdfdd #OffSeq #Python #Security", "creation_timestamp": "2026-06-17T00:00:39.164771Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9dbcccec-3496-4ded-97b8-2f3037a4b327/export</guid>
      <pubDate>Wed, 17 Jun 2026 00:00:39 +0000</pubDate>
    </item>
  </channel>
</rss>
