<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 14 Aug 2026 07:39:53 +0000</lastBuildDate>
    <item>
      <title>32c11b64-a959-4186-96a1-a409867363a9</title>
      <link>https://vulnerability.circl.lu/sighting/32c11b64-a959-4186-96a1-a409867363a9/export</link>
      <description>{"uuid": "32c11b64-a959-4186-96a1-a409867363a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69102", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxccvukns25", "content": "CVE-2026-69102\nA vulnerability in MaxKey exposes a secret key that attackers can use to create fake login tokens, allowing them to access any user account, including admin sessions. This can lead to unauthorized access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-13T09:10:04.346458Z"}</description>
      <content:encoded>{"uuid": "32c11b64-a959-4186-96a1-a409867363a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69102", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxccvukns25", "content": "CVE-2026-69102\nA vulnerability in MaxKey exposes a secret key that attackers can use to create fake login tokens, allowing them to access any user account, including admin sessions. This can lead to unauthorized access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-13T09:10:04.346458Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/32c11b64-a959-4186-96a1-a409867363a9/export</guid>
      <pubDate>Thu, 13 Aug 2026 09:10:04 +0000</pubDate>
    </item>
    <item>
      <title>bd15097d-9c42-4fe6-88b2-5228571a15f3</title>
      <link>https://vulnerability.circl.lu/sighting/bd15097d-9c42-4fe6-88b2-5228571a15f3/export</link>
      <description>{"uuid": "bd15097d-9c42-4fe6-88b2-5228571a15f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69102", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstgbcaj7i2d", "content": "CVE-2026-69102 - maxkey\nMaxKey's login system has a secret key stored in plain sight, making it easy for attackers to create fake login tokens. This allows anyone to log in as any user, including\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxkey #dromara #CVE #infosec", "creation_timestamp": "2026-08-11T20:10:06.822496Z"}</description>
      <content:encoded>{"uuid": "bd15097d-9c42-4fe6-88b2-5228571a15f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69102", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstgbcaj7i2d", "content": "CVE-2026-69102 - maxkey\nMaxKey's login system has a secret key stored in plain sight, making it easy for attackers to create fake login tokens. This allows anyone to log in as any user, including\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxkey #dromara #CVE #infosec", "creation_timestamp": "2026-08-11T20:10:06.822496Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bd15097d-9c42-4fe6-88b2-5228571a15f3/export</guid>
      <pubDate>Tue, 11 Aug 2026 20:10:06 +0000</pubDate>
    </item>
    <item>
      <title>a9a40e01-47d1-4d92-ae1b-b96b120d23df</title>
      <link>https://vulnerability.circl.lu/sighting/a9a40e01-47d1-4d92-ae1b-b96b120d23df/export</link>
      <description>{"uuid": "a9a40e01-47d1-4d92-ae1b-b96b120d23df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69102", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bqex4nfpmc6j7", "content": "CVE-2026-69102 - MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust\nCVE ID : CVE-2026-69102\n \n Published : Aug. 11, 2026, 6:04 p.m. | 21\u00a0minutes ago\n \n Description : MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret ...", "creation_timestamp": "2026-08-11T18:53:30.148533Z"}</description>
      <content:encoded>{"uuid": "a9a40e01-47d1-4d92-ae1b-b96b120d23df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69102", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bqex4nfpmc6j7", "content": "CVE-2026-69102 - MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust\nCVE ID : CVE-2026-69102\n \n Published : Aug. 11, 2026, 6:04 p.m. | 21\u00a0minutes ago\n \n Description : MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret ...", "creation_timestamp": "2026-08-11T18:53:30.148533Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a9a40e01-47d1-4d92-ae1b-b96b120d23df/export</guid>
      <pubDate>Tue, 11 Aug 2026 18:53:30 +0000</pubDate>
    </item>
  </channel>
</rss>
