https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 12 Aug 2026 01:30:40 +0000 https://vulnerability.circl.lu/sighting/85edb4bf-b6e9-4df2-939d-e4e589da9540/export {"uuid": "85edb4bf-b6e9-4df2-939d-e4e589da9540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72581", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117071813538439961", "content": "CVE-2026-72581 - SSRF in duhow/xiaoai-patch lets attackers hit internal networks via Xiaomi smart speaker. CVSS 8.6. Unpatched. Block access or update once fixed. #CVE #infosec #IoT\nhttps://www.valtersit.com/cve/CVE-2026-72581/", "creation_timestamp": "2026-08-10T15:03:02.887586Z"} {"uuid": "85edb4bf-b6e9-4df2-939d-e4e589da9540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72581", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117071813538439961", "content": "CVE-2026-72581 - SSRF in duhow/xiaoai-patch lets attackers hit internal networks via Xiaomi smart speaker. CVSS 8.6. Unpatched. Block access or update once fixed. #CVE #infosec #IoT\nhttps://www.valtersit.com/cve/CVE-2026-72581/", "creation_timestamp": "2026-08-10T15:03:02.887586Z"} https://vulnerability.circl.lu/sighting/85edb4bf-b6e9-4df2-939d-e4e589da9540/export Mon, 10 Aug 2026 15:03:02 +0000 https://vulnerability.circl.lu/sighting/3a913e8c-5db0-4570-b4d0-fb6f7beed246/export {"uuid": "3a913e8c-5db0-4570-b4d0-fb6f7beed246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72581", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msqel3mkyb22", "content": "CVE-2026-72581 - SSRF in duhow/xiaoai-patch lets attackers hit internal networks via Xiaomi smart speaker. CVSS 8.6. Unpatched. Block access or update once fixed. #CVE #infosec #IoT\n\nhttps://www.valtersit.com/cve/CVE-2026-72581/", "creation_timestamp": "2026-08-10T15:01:48.237081Z"} {"uuid": "3a913e8c-5db0-4570-b4d0-fb6f7beed246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72581", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msqel3mkyb22", "content": "CVE-2026-72581 - SSRF in duhow/xiaoai-patch lets attackers hit internal networks via Xiaomi smart speaker. CVSS 8.6. Unpatched. Block access or update once fixed. #CVE #infosec #IoT\n\nhttps://www.valtersit.com/cve/CVE-2026-72581/", "creation_timestamp": "2026-08-10T15:01:48.237081Z"} https://vulnerability.circl.lu/sighting/3a913e8c-5db0-4570-b4d0-fb6f7beed246/export Mon, 10 Aug 2026 15:01:48 +0000 https://vulnerability.circl.lu/sighting/944ccda3-7645-402d-8165-db341a957230/export {"uuid": "944ccda3-7645-402d-8165-db341a957230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fg6gdf2cjbu76", "content": "CVE-2026-72581 - duhow xiaoai-patch - Server-Side Request Forgery in /auth Endpoint\nCVE ID : CVE-2026-72581\n \n Published : Aug. 10, 2026, 11:17 a.m. | 43\u00a0minutes ago\n \n Description : A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb0704...", "creation_timestamp": "2026-08-10T12:04:41.812754Z"} {"uuid": "944ccda3-7645-402d-8165-db341a957230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fg6gdf2cjbu76", "content": "CVE-2026-72581 - duhow xiaoai-patch - Server-Side Request Forgery in /auth Endpoint\nCVE ID : CVE-2026-72581\n \n Published : Aug. 10, 2026, 11:17 a.m. | 43\u00a0minutes ago\n \n Description : A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb0704...", "creation_timestamp": "2026-08-10T12:04:41.812754Z"} https://vulnerability.circl.lu/sighting/944ccda3-7645-402d-8165-db341a957230/export Mon, 10 Aug 2026 12:04:41 +0000