<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 15 Sep 2026 02:08:35 +0000</lastBuildDate>
    <item>
      <title>ecd6c118-b0da-4d36-ae10-9030c6c44507</title>
      <link>https://vulnerability.circl.lu/sighting/ecd6c118-b0da-4d36-ae10-9030c6c44507/export</link>
      <description>{"uuid": "ecd6c118-b0da-4d36-ae10-9030c6c44507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtu46sqzmk23", "content": "\u300cOpenAM\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\n\n\u300cOpenAM\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3082\u5224\u660e\u3057\u3066\u304a\u308a\u3001\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u3067\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670820\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3068\u306a\u308b\u300cOpenAM 16.1.2\u300d\u3092\u516c\u958b\u3002\u4f9d\u5b58\u95a2\u4fc2\u306b\u3042\u308b\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u88fd\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u8106\u5f31\u6027\u3092\u542b\u3081\u3001\u3042\u308f\u305b\u306618\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3057\u305f\u3002\n\n\u300cCVE-2026-62379\u300d\u306f\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u8a8d\u8a3c\u306b\u7528\u3044\u308b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u3002\u300cXML\u300d\u3067\u6307\u5b9a\u3055\u308c\u305f\u4efb\u610f\u306eJava\u30af\u30e9\u30b9\u3092\u691c\u8a3c\u3059\u308b...", "creation_timestamp": "2026-08-24T20:07:37.104240Z"}</description>
      <content:encoded>{"uuid": "ecd6c118-b0da-4d36-ae10-9030c6c44507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtu46sqzmk23", "content": "\u300cOpenAM\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\n\n\u300cOpenAM\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3082\u5224\u660e\u3057\u3066\u304a\u308a\u3001\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u3067\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670820\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3068\u306a\u308b\u300cOpenAM 16.1.2\u300d\u3092\u516c\u958b\u3002\u4f9d\u5b58\u95a2\u4fc2\u306b\u3042\u308b\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u88fd\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u8106\u5f31\u6027\u3092\u542b\u3081\u3001\u3042\u308f\u305b\u306618\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3057\u305f\u3002\n\n\u300cCVE-2026-62379\u300d\u306f\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u8a8d\u8a3c\u306b\u7528\u3044\u308b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u3002\u300cXML\u300d\u3067\u6307\u5b9a\u3055\u308c\u305f\u4efb\u610f\u306eJava\u30af\u30e9\u30b9\u3092\u691c\u8a3c\u3059\u308b...", "creation_timestamp": "2026-08-24T20:07:37.104240Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ecd6c118-b0da-4d36-ae10-9030c6c44507/export</guid>
      <pubDate>Mon, 24 Aug 2026 20:07:37 +0000</pubDate>
    </item>
    <item>
      <title>2f10766b-14ef-4e6b-86a3-2d8b1f37ce79</title>
      <link>https://vulnerability.circl.lu/sighting/2f10766b-14ef-4e6b-86a3-2d8b1f37ce79/export</link>
      <description>{"uuid": "2f10766b-14ef-4e6b-86a3-2d8b1f37ce79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3cv2epxz367pg", "content": "CVE-2026-62377 - libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110)\nCVE ID : CVE-2026-62377\n \n Published : Aug. 18, 2026, 9:22 p.m. | 9\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format de...", "creation_timestamp": "2026-08-18T23:00:56.935858Z"}</description>
      <content:encoded>{"uuid": "2f10766b-14ef-4e6b-86a3-2d8b1f37ce79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3cv2epxz367pg", "content": "CVE-2026-62377 - libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110)\nCVE ID : CVE-2026-62377\n \n Published : Aug. 18, 2026, 9:22 p.m. | 9\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format de...", "creation_timestamp": "2026-08-18T23:00:56.935858Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2f10766b-14ef-4e6b-86a3-2d8b1f37ce79/export</guid>
      <pubDate>Tue, 18 Aug 2026 23:00:56 +0000</pubDate>
    </item>
    <item>
      <title>046e2140-2638-48e6-a573-d932a56fbd25</title>
      <link>https://vulnerability.circl.lu/sighting/046e2140-2638-48e6-a573-d932a56fbd25/export</link>
      <description>{"uuid": "046e2140-2638-48e6-a573-d932a56fbd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrx3gewobb2y", "content": "Four OpenAM vulnerabilities are fixed in 16.1.2. CVE-2026-62379 (CVSS 9.8) allows unauthenticated remote code execution; CVE-2026-62261 scores 9.9.\n\n#OpenAM #RCE #IAM #CVE202662379", "creation_timestamp": "2026-07-31T13:41:33.592809Z"}</description>
      <content:encoded>{"uuid": "046e2140-2638-48e6-a573-d932a56fbd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrx3gewobb2y", "content": "Four OpenAM vulnerabilities are fixed in 16.1.2. CVE-2026-62379 (CVSS 9.8) allows unauthenticated remote code execution; CVE-2026-62261 scores 9.9.\n\n#OpenAM #RCE #IAM #CVE202662379", "creation_timestamp": "2026-07-31T13:41:33.592809Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/046e2140-2638-48e6-a573-d932a56fbd25/export</guid>
      <pubDate>Fri, 31 Jul 2026 13:41:33 +0000</pubDate>
    </item>
    <item>
      <title>7aa2de40-edb2-44c3-b584-07bf08a18367</title>
      <link>https://vulnerability.circl.lu/sighting/7aa2de40-edb2-44c3-b584-07bf08a18367/export</link>
      <description>{"uuid": "7aa2de40-edb2-44c3-b584-07bf08a18367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p", "content": "Two critical OpenAM vulnerabilities demand attention: CVE-2026-62379 and CVE-2026-62263. Both are unauthenticated and pose serious risks. Patch your OpenAM instances immediately #OpenAM #CyberSecurity #VulnerabilityAlert", "creation_timestamp": "2026-07-28T18:15:20.036724Z"}</description>
      <content:encoded>{"uuid": "7aa2de40-edb2-44c3-b584-07bf08a18367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p", "content": "Two critical OpenAM vulnerabilities demand attention: CVE-2026-62379 and CVE-2026-62263. Both are unauthenticated and pose serious risks. Patch your OpenAM instances immediately #OpenAM #CyberSecurity #VulnerabilityAlert", "creation_timestamp": "2026-07-28T18:15:20.036724Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7aa2de40-edb2-44c3-b584-07bf08a18367/export</guid>
      <pubDate>Tue, 28 Jul 2026 18:15:20 +0000</pubDate>
    </item>
    <item>
      <title>0aec4a50-332a-472b-b3ec-d8e715f2075c</title>
      <link>https://vulnerability.circl.lu/sighting/0aec4a50-332a-472b-b3ec-d8e715f2075c/export</link>
      <description>{"uuid": "0aec4a50-332a-472b-b3ec-d8e715f2075c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkqdtsk2i", "content": "CVE-2026-62379 - org.openidentityplatform.openam:openam-core\nA security flaw in OpenAM allows an attacker to run code on the server without logging in. This affects all OpenAM versions up to 16.1.1. To fix this, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#Java #CVE #infosec", "creation_timestamp": "2026-07-24T21:16:05.736601Z"}</description>
      <content:encoded>{"uuid": "0aec4a50-332a-472b-b3ec-d8e715f2075c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkqdtsk2i", "content": "CVE-2026-62379 - org.openidentityplatform.openam:openam-core\nA security flaw in OpenAM allows an attacker to run code on the server without logging in. This affects all OpenAM versions up to 16.1.1. To fix this, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#Java #CVE #infosec", "creation_timestamp": "2026-07-24T21:16:05.736601Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0aec4a50-332a-472b-b3ec-d8e715f2075c/export</guid>
      <pubDate>Fri, 24 Jul 2026 21:16:05 +0000</pubDate>
    </item>
    <item>
      <title>97071e75-9ade-42da-927f-0ae4c5c41234</title>
      <link>https://vulnerability.circl.lu/sighting/97071e75-9ade-42da-927f-0ae4c5c41234/export</link>
      <description>{"uuid": "97071e75-9ade-42da-927f-0ae4c5c41234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfrawsdq2s", "content": "CVE-2026-62378\nThe RustFS Console allows attackers to inject malicious code into PDF files, potentially stealing administrator credentials. This issue affects versions 0.1.7 to 0.1.10 of the RustFS Console. To protect your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:16:04.152094Z"}</description>
      <content:encoded>{"uuid": "97071e75-9ade-42da-927f-0ae4c5c41234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfrawsdq2s", "content": "CVE-2026-62378\nThe RustFS Console allows attackers to inject malicious code into PDF files, potentially stealing administrator credentials. This issue affects versions 0.1.7 to 0.1.10 of the RustFS Console. To protect your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:16:04.152094Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/97071e75-9ade-42da-927f-0ae4c5c41234/export</guid>
      <pubDate>Sat, 18 Jul 2026 04:16:04 +0000</pubDate>
    </item>
    <item>
      <title>f5a0ff31-5469-4889-9ca7-dc55e623a7ff</title>
      <link>https://vulnerability.circl.lu/sighting/f5a0ff31-5469-4889-9ca7-dc55e623a7ff/export</link>
      <description>{"uuid": "f5a0ff31-5469-4889-9ca7-dc55e623a7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpghuqeib22", "content": "CVE-2026-62378 - RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover\nCVE ID : CVE-2026-62378\n \n Published : July 15, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : RustFS Console is a web management console for the RustFS ...", "creation_timestamp": "2026-07-15T19:12:44.767996Z"}</description>
      <content:encoded>{"uuid": "f5a0ff31-5469-4889-9ca7-dc55e623a7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpghuqeib22", "content": "CVE-2026-62378 - RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover\nCVE ID : CVE-2026-62378\n \n Published : July 15, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : RustFS Console is a web management console for the RustFS ...", "creation_timestamp": "2026-07-15T19:12:44.767996Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f5a0ff31-5469-4889-9ca7-dc55e623a7ff/export</guid>
      <pubDate>Wed, 15 Jul 2026 19:12:44 +0000</pubDate>
    </item>
    <item>
      <title>e6a616bb-aa8e-4614-acbe-d82615cd5d52</title>
      <link>https://vulnerability.circl.lu/sighting/e6a616bb-aa8e-4614-acbe-d82615cd5d52/export</link>
      <description>{"uuid": "e6a616bb-aa8e-4614-acbe-d82615cd5d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpcg2jm3y2e", "content": "\ud83d\udd34 CVE-2026-62378 - Critical (9)\n\nRustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 unt...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62378/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T18:00:09.309708Z"}</description>
      <content:encoded>{"uuid": "e6a616bb-aa8e-4614-acbe-d82615cd5d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpcg2jm3y2e", "content": "\ud83d\udd34 CVE-2026-62378 - Critical (9)\n\nRustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 unt...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62378/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T18:00:09.309708Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e6a616bb-aa8e-4614-acbe-d82615cd5d52/export</guid>
      <pubDate>Wed, 15 Jul 2026 18:00:09 +0000</pubDate>
    </item>
    <item>
      <title>a7a2df0f-d1ce-4907-8e30-c904a7783100</title>
      <link>https://vulnerability.circl.lu/sighting/a7a2df0f-d1ce-4907-8e30-c904a7783100/export</link>
      <description>{"uuid": "a7a2df0f-d1ce-4907-8e30-c904a7783100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjey2z52o", "content": "CVE-2026-62378 - console\nA vulnerability in the RustFS Console's PDF preview feature allows an attacker to inject malicious code into the management interface, potentially stealing sensitive administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#console #rustfs #CVE #infosec", "creation_timestamp": "2026-07-15T17:44:06.326274Z"}</description>
      <content:encoded>{"uuid": "a7a2df0f-d1ce-4907-8e30-c904a7783100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjey2z52o", "content": "CVE-2026-62378 - console\nA vulnerability in the RustFS Console's PDF preview feature allows an attacker to inject malicious code into the management interface, potentially stealing sensitive administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#console #rustfs #CVE #infosec", "creation_timestamp": "2026-07-15T17:44:06.326274Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a7a2df0f-d1ce-4907-8e30-c904a7783100/export</guid>
      <pubDate>Wed, 15 Jul 2026 17:44:06 +0000</pubDate>
    </item>
  </channel>
</rss>
