<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 16 Aug 2026 10:26:00 +0000</lastBuildDate>
    <item>
      <title>91706235-3d02-4807-b645-f9935f077549</title>
      <link>https://vulnerability.circl.lu/sighting/91706235-3d02-4807-b645-f9935f077549/export</link>
      <description>{"uuid": "91706235-3d02-4807-b645-f9935f077549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6639", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u", "content": "CVE-2026-6639 ai-copilot-content-generator (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T08:15:10.456160Z"}</description>
      <content:encoded>{"uuid": "91706235-3d02-4807-b645-f9935f077549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6639", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u", "content": "CVE-2026-6639 ai-copilot-content-generator (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T08:15:10.456160Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/91706235-3d02-4807-b645-f9935f077549/export</guid>
      <pubDate>Thu, 06 Aug 2026 08:15:10 +0000</pubDate>
    </item>
    <item>
      <title>60a5406b-fd9d-4676-8793-4a2bdf2f37ab</title>
      <link>https://vulnerability.circl.lu/sighting/60a5406b-fd9d-4676-8793-4a2bdf2f37ab/export</link>
      <description>{"uuid": "60a5406b-fd9d-4676-8793-4a2bdf2f37ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltwvjt2e", "content": "CVE-2026-66398\nAuthenticated administrators with specific privileges can upload malicious files and execute code on the server. This allows attackers to access sensitive data and potentially take control of the system. Update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:09.208479Z"}</description>
      <content:encoded>{"uuid": "60a5406b-fd9d-4676-8793-4a2bdf2f37ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltwvjt2e", "content": "CVE-2026-66398\nAuthenticated administrators with specific privileges can upload malicious files and execute code on the server. This allows attackers to access sensitive data and potentially take control of the system. Update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:09.208479Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/60a5406b-fd9d-4676-8793-4a2bdf2f37ab/export</guid>
      <pubDate>Thu, 30 Jul 2026 04:56:09 +0000</pubDate>
    </item>
    <item>
      <title>a98670e4-3d66-4f64-9869-0de25d14c57d</title>
      <link>https://vulnerability.circl.lu/sighting/a98670e4-3d66-4f64-9869-0de25d14c57d/export</link>
      <description>{"uuid": "a98670e4-3d66-4f64-9869-0de25d14c57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltbwyb2j", "content": "CVE-2026-66396\nSiYuan, a software used for managing documents, has a security issue. An attacker with permission to edit documents can embed malicious code in an image, which can then be executed when the document is opened.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:04.163402Z"}</description>
      <content:encoded>{"uuid": "a98670e4-3d66-4f64-9869-0de25d14c57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnltbwyb2j", "content": "CVE-2026-66396\nSiYuan, a software used for managing documents, has a security issue. An attacker with permission to edit documents can embed malicious code in an image, which can then be executed when the document is opened.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:56:04.163402Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a98670e4-3d66-4f64-9869-0de25d14c57d/export</guid>
      <pubDate>Thu, 30 Jul 2026 04:56:04 +0000</pubDate>
    </item>
    <item>
      <title>f18a3ae1-3f59-477e-816d-eed24b4fc63c</title>
      <link>https://vulnerability.circl.lu/sighting/f18a3ae1-3f59-477e-816d-eed24b4fc63c/export</link>
      <description>{"uuid": "f18a3ae1-3f59-477e-816d-eed24b4fc63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66397", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniawca42i", "content": "CVE-2026-66397\nA vulnerability in phpMyFAQ, a FAQ management system, allows authenticated attackers to delete any file on the server. This could allow an attacker to disable security features and create new administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.553722Z"}</description>
      <content:encoded>{"uuid": "f18a3ae1-3f59-477e-816d-eed24b4fc63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66397", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniawca42i", "content": "CVE-2026-66397\nA vulnerability in phpMyFAQ, a FAQ management system, allows authenticated attackers to delete any file on the server. This could allow an attacker to disable security features and create new administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.553722Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f18a3ae1-3f59-477e-816d-eed24b4fc63c/export</guid>
      <pubDate>Thu, 30 Jul 2026 04:54:04 +0000</pubDate>
    </item>
    <item>
      <title>ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d</title>
      <link>https://vulnerability.circl.lu/sighting/ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d/export</link>
      <description>{"uuid": "ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66395", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniagskn23", "content": "CVE-2026-66395\nA security flaw in SiYuan Desktop's bazaar plugin allows attackers to inject malicious code by sending a specially crafted web link. This could potentially allow attackers to take control of a user's computer.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.037819Z"}</description>
      <content:encoded>{"uuid": "ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66395", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtniagskn23", "content": "CVE-2026-66395\nA security flaw in SiYuan Desktop's bazaar plugin allows attackers to inject malicious code by sending a specially crafted web link. This could potentially allow attackers to take control of a user's computer.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:54:04.037819Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ca4f4db1-af8e-4c23-ae2b-f2667ab7e89d/export</guid>
      <pubDate>Thu, 30 Jul 2026 04:54:04 +0000</pubDate>
    </item>
    <item>
      <title>7dee0ca6-d535-440e-8110-905d74fdb87a</title>
      <link>https://vulnerability.circl.lu/sighting/7dee0ca6-d535-440e-8110-905d74fdb87a/export</link>
      <description>{"uuid": "7dee0ca6-d535-440e-8110-905d74fdb87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnia5azfv2a", "content": "CVE-2026-66396\nSiYuan, a software tool, fails to properly protect against malicious images. This means an attacker with permission to edit documents can inject code that runs in your browser when you open the document. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-27T18:04:04.974808Z"}</description>
      <content:encoded>{"uuid": "7dee0ca6-d535-440e-8110-905d74fdb87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66396", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnia5azfv2a", "content": "CVE-2026-66396\nSiYuan, a software tool, fails to properly protect against malicious images. This means an attacker with permission to edit documents can inject code that runs in your browser when you open the document. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-27T18:04:04.974808Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7dee0ca6-d535-440e-8110-905d74fdb87a/export</guid>
      <pubDate>Mon, 27 Jul 2026 18:04:04 +0000</pubDate>
    </item>
    <item>
      <title>451fec1a-6d5d-4694-a2f9-ba873f104c03</title>
      <link>https://vulnerability.circl.lu/sighting/451fec1a-6d5d-4694-a2f9-ba873f104c03/export</link>
      <description>{"uuid": "451fec1a-6d5d-4694-a2f9-ba873f104c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66394", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrni4m3hix23", "content": "CVE-2026-66394\nSiYuan, a web application, is vulnerable to a type of cyber attack that allows an attacker to execute malicious code on the application's server. This can happen when an attacker tricks the application into\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-27T18:02:05.873024Z"}</description>
      <content:encoded>{"uuid": "451fec1a-6d5d-4694-a2f9-ba873f104c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66394", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrni4m3hix23", "content": "CVE-2026-66394\nSiYuan, a web application, is vulnerable to a type of cyber attack that allows an attacker to execute malicious code on the application's server. This can happen when an attacker tricks the application into\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-27T18:02:05.873024Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/451fec1a-6d5d-4694-a2f9-ba873f104c03/export</guid>
      <pubDate>Mon, 27 Jul 2026 18:02:05 +0000</pubDate>
    </item>
    <item>
      <title>ad6841b5-0485-42ca-a602-650edc3e439f</title>
      <link>https://vulnerability.circl.lu/sighting/ad6841b5-0485-42ca-a602-650edc3e439f/export</link>
      <description>{"uuid": "ad6841b5-0485-42ca-a602-650edc3e439f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnhyzne4w22", "content": "CVE-2026-66398 - phpmyfaq\nAuthenticated administrators with certain privileges can upload malicious code to a phpMyFAQ installation. This can lead to unauthorized changes to the system, potentially causing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpmyfaq #thorsten #CVE #infosec", "creation_timestamp": "2026-07-27T18:00:06.023929Z"}</description>
      <content:encoded>{"uuid": "ad6841b5-0485-42ca-a602-650edc3e439f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnhyzne4w22", "content": "CVE-2026-66398 - phpmyfaq\nAuthenticated administrators with certain privileges can upload malicious code to a phpMyFAQ installation. This can lead to unauthorized changes to the system, potentially causing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpmyfaq #thorsten #CVE #infosec", "creation_timestamp": "2026-07-27T18:00:06.023929Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ad6841b5-0485-42ca-a602-650edc3e439f/export</guid>
      <pubDate>Mon, 27 Jul 2026 18:00:06 +0000</pubDate>
    </item>
    <item>
      <title>9820086c-205e-4674-9fa2-e86ca1611ac3</title>
      <link>https://vulnerability.circl.lu/sighting/9820086c-205e-4674-9fa2-e86ca1611ac3/export</link>
      <description>{"uuid": "9820086c-205e-4674-9fa2-e86ca1611ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66395", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnhyyb7zo2z", "content": "CVE-2026-66395 - siyuan\nSiYuan Desktop users are at risk if they click on a specially crafted link. This could allow an attacker to take control of their computer. To stay safe, update SiYuan Desktop to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-07-27T18:00:04.892366Z"}</description>
      <content:encoded>{"uuid": "9820086c-205e-4674-9fa2-e86ca1611ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66395", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnhyyb7zo2z", "content": "CVE-2026-66395 - siyuan\nSiYuan Desktop users are at risk if they click on a specially crafted link. This could allow an attacker to take control of their computer. To stay safe, update SiYuan Desktop to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-07-27T18:00:04.892366Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9820086c-205e-4674-9fa2-e86ca1611ac3/export</guid>
      <pubDate>Mon, 27 Jul 2026 18:00:04 +0000</pubDate>
    </item>
    <item>
      <title>9f8cfbeb-f084-4f5d-bb34-1e8acae82da0</title>
      <link>https://vulnerability.circl.lu/sighting/9f8cfbeb-f084-4f5d-bb34-1e8acae82da0/export</link>
      <description>{"uuid": "9f8cfbeb-f084-4f5d-bb34-1e8acae82da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66391", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrnelnpg2m24", "content": "CVE-2026-66391: Apache Wicket: leaked and missing CSP headers", "creation_timestamp": "2026-07-27T16:58:56.019180Z"}</description>
      <content:encoded>{"uuid": "9f8cfbeb-f084-4f5d-bb34-1e8acae82da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66391", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrnelnpg2m24", "content": "CVE-2026-66391: Apache Wicket: leaked and missing CSP headers", "creation_timestamp": "2026-07-27T16:58:56.019180Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9f8cfbeb-f084-4f5d-bb34-1e8acae82da0/export</guid>
      <pubDate>Mon, 27 Jul 2026 16:58:56 +0000</pubDate>
    </item>
  </channel>
</rss>
