<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 19:51:16 +0000</lastBuildDate>
    <item>
      <title>c748e297-a0ad-4134-a6dc-f30518d9eff5</title>
      <link>https://vulnerability.circl.lu/sighting/c748e297-a0ad-4134-a6dc-f30518d9eff5/export</link>
      <description>{"uuid": "c748e297-a0ad-4134-a6dc-f30518d9eff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2l747p7b2y", "content": "CVE-2026-48891 - Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target\nCVE ID : CVE-2026-48891\n \n Published : July 7, 2026, 10:16 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : A bug in Apache Airflow's `/ui...", "creation_timestamp": "2026-07-07T12:11:27.734881Z"}</description>
      <content:encoded>{"uuid": "c748e297-a0ad-4134-a6dc-f30518d9eff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2l747p7b2y", "content": "CVE-2026-48891 - Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target\nCVE ID : CVE-2026-48891\n \n Published : July 7, 2026, 10:16 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : A bug in Apache Airflow's `/ui...", "creation_timestamp": "2026-07-07T12:11:27.734881Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c748e297-a0ad-4134-a6dc-f30518d9eff5/export</guid>
      <pubDate>Tue, 07 Jul 2026 12:11:27 +0000</pubDate>
    </item>
    <item>
      <title>55e48f25-839a-41ab-b847-91169c35cd58</title>
      <link>https://vulnerability.circl.lu/sighting/55e48f25-839a-41ab-b847-91169c35cd58/export</link>
      <description>{"uuid": "55e48f25-839a-41ab-b847-91169c35cd58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2kw5rdo32e", "content": "CVE-2026-48892 - Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options\nCVE ID : CVE-2026-48892\n \n Published : July 7, 2026, 10:16 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : The Config API in Apache Airflow surfaced per-key sec...", "creation_timestamp": "2026-07-07T12:06:24.407418Z"}</description>
      <content:encoded>{"uuid": "55e48f25-839a-41ab-b847-91169c35cd58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2kw5rdo32e", "content": "CVE-2026-48892 - Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options\nCVE ID : CVE-2026-48892\n \n Published : July 7, 2026, 10:16 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : The Config API in Apache Airflow surfaced per-key sec...", "creation_timestamp": "2026-07-07T12:06:24.407418Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/55e48f25-839a-41ab-b847-91169c35cd58/export</guid>
      <pubDate>Tue, 07 Jul 2026 12:06:24 +0000</pubDate>
    </item>
    <item>
      <title>80068cdc-ffc0-45fe-8121-c203773328f4</title>
      <link>https://vulnerability.circl.lu/sighting/80068cdc-ffc0-45fe-8121-c203773328f4/export</link>
      <description>{"uuid": "80068cdc-ffc0-45fe-8121-c203773328f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48891", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jwvygdg2y", "content": "CVE-2026-48891: Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target", "creation_timestamp": "2026-07-07T11:48:56.039120Z"}</description>
      <content:encoded>{"uuid": "80068cdc-ffc0-45fe-8121-c203773328f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48891", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jwvygdg2y", "content": "CVE-2026-48891: Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target", "creation_timestamp": "2026-07-07T11:48:56.039120Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/80068cdc-ffc0-45fe-8121-c203773328f4/export</guid>
      <pubDate>Tue, 07 Jul 2026 11:48:56 +0000</pubDate>
    </item>
    <item>
      <title>bc0ad59a-65ce-4df0-b5f2-d1d03d2aaff9</title>
      <link>https://vulnerability.circl.lu/sighting/bc0ad59a-65ce-4df0-b5f2-d1d03d2aaff9/export</link>
      <description>{"uuid": "bc0ad59a-65ce-4df0-b5f2-d1d03d2aaff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48892", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jnxkscc2t", "content": "CVE-2026-48892: Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options", "creation_timestamp": "2026-07-07T11:44:14.705738Z"}</description>
      <content:encoded>{"uuid": "bc0ad59a-65ce-4df0-b5f2-d1d03d2aaff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48892", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jnxkscc2t", "content": "CVE-2026-48892: Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options", "creation_timestamp": "2026-07-07T11:44:14.705738Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bc0ad59a-65ce-4df0-b5f2-d1d03d2aaff9/export</guid>
      <pubDate>Tue, 07 Jul 2026 11:44:14 +0000</pubDate>
    </item>
    <item>
      <title>ccf3f634-e832-44e9-b034-6e0482ef6f1e</title>
      <link>https://vulnerability.circl.lu/sighting/ccf3f634-e832-44e9-b034-6e0482ef6f1e/export</link>
      <description>{"uuid": "ccf3f634-e832-44e9-b034-6e0482ef6f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48899", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou5v3jzmx27", "content": "\ud83d\udea8  ALERT: CVE-2026-48899\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nAn improper access check allows privilege escalation through the com_users batch task.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Joomla\\!\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  ", "creation_timestamp": "2026-06-22T05:31:59.499346Z"}</description>
      <content:encoded>{"uuid": "ccf3f634-e832-44e9-b034-6e0482ef6f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48899", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou5v3jzmx27", "content": "\ud83d\udea8  ALERT: CVE-2026-48899\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nAn improper access check allows privilege escalation through the com_users batch task.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Joomla\\!\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  ", "creation_timestamp": "2026-06-22T05:31:59.499346Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ccf3f634-e832-44e9-b034-6e0482ef6f1e/export</guid>
      <pubDate>Mon, 22 Jun 2026 05:31:59 +0000</pubDate>
    </item>
    <item>
      <title>701b12e1-310c-4359-8e76-ac1500d3aa7b</title>
      <link>https://vulnerability.circl.lu/sighting/701b12e1-310c-4359-8e76-ac1500d3aa7b/export</link>
      <description>{"uuid": "701b12e1-310c-4359-8e76-ac1500d3aa7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48898", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou5uunp2t2b", "content": "\ud83d\udea8  ALERT: CVE-2026-48898\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nAn improper access check allows privilege escalation through the com_users batch task.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Joomla\\!\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  ", "creation_timestamp": "2026-06-22T05:31:52.464230Z"}</description>
      <content:encoded>{"uuid": "701b12e1-310c-4359-8e76-ac1500d3aa7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48898", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou5uunp2t2b", "content": "\ud83d\udea8  ALERT: CVE-2026-48898\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nAn improper access check allows privilege escalation through the com_users batch task.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Joomla\\!\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  ", "creation_timestamp": "2026-06-22T05:31:52.464230Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/701b12e1-310c-4359-8e76-ac1500d3aa7b/export</guid>
      <pubDate>Mon, 22 Jun 2026 05:31:52 +0000</pubDate>
    </item>
    <item>
      <title>a2d7b259-b988-432b-ad9c-ab345ab1c576</title>
      <link>https://vulnerability.circl.lu/sighting/a2d7b259-b988-432b-ad9c-ab345ab1c576/export</link>
      <description>{"uuid": "a2d7b259-b988-432b-ad9c-ab345ab1c576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48895", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3monnubysps2k", "content": "CVE-2026-48895: Apache APISIX: Cas-auth Host header influence on CAS service URL", "creation_timestamp": "2026-06-19T15:29:14.663025Z"}</description>
      <content:encoded>{"uuid": "a2d7b259-b988-432b-ad9c-ab345ab1c576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48895", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3monnubysps2k", "content": "CVE-2026-48895: Apache APISIX: Cas-auth Host header influence on CAS service URL", "creation_timestamp": "2026-06-19T15:29:14.663025Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a2d7b259-b988-432b-ad9c-ab345ab1c576/export</guid>
      <pubDate>Fri, 19 Jun 2026 15:29:14 +0000</pubDate>
    </item>
    <item>
      <title>433e339c-c216-4b08-b012-3fa4ecc9c727</title>
      <link>https://vulnerability.circl.lu/sighting/433e339c-c216-4b08-b012-3fa4ecc9c727/export</link>
      <description>{"uuid": "433e339c-c216-4b08-b012-3fa4ecc9c727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48899", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:36.428729Z"}</description>
      <content:encoded>{"uuid": "433e339c-c216-4b08-b012-3fa4ecc9c727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48899", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:36.428729Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/433e339c-c216-4b08-b012-3fa4ecc9c727/export</guid>
      <pubDate>Wed, 27 May 2026 14:35:36 +0000</pubDate>
    </item>
    <item>
      <title>19059e7f-3d8e-4ceb-9f86-c8aa0257099c</title>
      <link>https://vulnerability.circl.lu/sighting/19059e7f-3d8e-4ceb-9f86-c8aa0257099c/export</link>
      <description>{"uuid": "19059e7f-3d8e-4ceb-9f86-c8aa0257099c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48898", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:36.151211Z"}</description>
      <content:encoded>{"uuid": "19059e7f-3d8e-4ceb-9f86-c8aa0257099c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48898", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:36.151211Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/19059e7f-3d8e-4ceb-9f86-c8aa0257099c/export</guid>
      <pubDate>Wed, 27 May 2026 14:35:36 +0000</pubDate>
    </item>
    <item>
      <title>9f49be4c-05ab-48b2-8e88-14f1e7806f15</title>
      <link>https://vulnerability.circl.lu/sighting/9f49be4c-05ab-48b2-8e88-14f1e7806f15/export</link>
      <description>{"uuid": "9f49be4c-05ab-48b2-8e88-14f1e7806f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48897", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:35.972604Z"}</description>
      <content:encoded>{"uuid": "9f49be4c-05ab-48b2-8e88-14f1e7806f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48897", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:35.972604Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9f49be4c-05ab-48b2-8e88-14f1e7806f15/export</guid>
      <pubDate>Wed, 27 May 2026 14:35:35 +0000</pubDate>
    </item>
  </channel>
</rss>
