<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 24 Jul 2026 01:52:14 +0000</lastBuildDate>
    <item>
      <title>626a9895-e050-467e-be87-fbfc0b139441</title>
      <link>https://vulnerability.circl.lu/sighting/626a9895-e050-467e-be87-fbfc0b139441/export</link>
      <description>{"uuid": "626a9895-e050-467e-be87-fbfc0b139441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrd3ubuonu2e", "content": "CVE-2026-65317 - verba\nA weakness in Verba RAG application version 2.1.3 allows hackers to trick the server into making unauthorized requests to any website. This could potentially be used to steal sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#verba #weaviate #CVE #infosec", "creation_timestamp": "2026-07-23T14:56:04.620745Z"}</description>
      <content:encoded>{"uuid": "626a9895-e050-467e-be87-fbfc0b139441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrd3ubuonu2e", "content": "CVE-2026-65317 - verba\nA weakness in Verba RAG application version 2.1.3 allows hackers to trick the server into making unauthorized requests to any website. This could potentially be used to steal sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#verba #weaviate #CVE #infosec", "creation_timestamp": "2026-07-23T14:56:04.620745Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/626a9895-e050-467e-be87-fbfc0b139441/export</guid>
      <pubDate>Thu, 23 Jul 2026 14:56:04 +0000</pubDate>
    </item>
    <item>
      <title>864cd2ff-2fa9-44cb-bb47-ca19a19e3f80</title>
      <link>https://vulnerability.circl.lu/sighting/864cd2ff-2fa9-44cb-bb47-ca19a19e3f80/export</link>
      <description>{"uuid": "864cd2ff-2fa9-44cb-bb47-ca19a19e3f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7bgwhw5z2o", "content": "CVE-2026-65317 - Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass\nCVE ID : CVE-2026-65317\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Verba RAG application version 2.1.3 contains a server...", "creation_timestamp": "2026-07-22T02:25:20.044197Z"}</description>
      <content:encoded>{"uuid": "864cd2ff-2fa9-44cb-bb47-ca19a19e3f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7bgwhw5z2o", "content": "CVE-2026-65317 - Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass\nCVE ID : CVE-2026-65317\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Verba RAG application version 2.1.3 contains a server...", "creation_timestamp": "2026-07-22T02:25:20.044197Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/864cd2ff-2fa9-44cb-bb47-ca19a19e3f80/export</guid>
      <pubDate>Wed, 22 Jul 2026 02:25:20 +0000</pubDate>
    </item>
    <item>
      <title>280a2b74-d0d9-4609-abce-35e2d54d80c1</title>
      <link>https://vulnerability.circl.lu/sighting/280a2b74-d0d9-4609-abce-35e2d54d80c1/export</link>
      <description>{"uuid": "280a2b74-d0d9-4609-abce-35e2d54d80c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vywsrey23", "content": "\ud83d\udfe0 CVE-2026-65317 - High (8.6)\n\nVerba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65317/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T23:00:39.829320Z"}</description>
      <content:encoded>{"uuid": "280a2b74-d0d9-4609-abce-35e2d54d80c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vywsrey23", "content": "\ud83d\udfe0 CVE-2026-65317 - High (8.6)\n\nVerba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65317/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T23:00:39.829320Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/280a2b74-d0d9-4609-abce-35e2d54d80c1/export</guid>
      <pubDate>Tue, 21 Jul 2026 23:00:39 +0000</pubDate>
    </item>
  </channel>
</rss>
