<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 12 Aug 2026 21:58:22 +0000</lastBuildDate>
    <item>
      <title>9904477e-147f-4afb-a32e-e28bd089e9b1</title>
      <link>https://vulnerability.circl.lu/sighting/9904477e-147f-4afb-a32e-e28bd089e9b1/export</link>
      <description>{"uuid": "9904477e-147f-4afb-a32e-e28bd089e9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72740", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqta4hrup2b", "content": "CVE-2026-72740\nDokploy users with deployment permission and SSH keys can execute arbitrary commands on the Dokploy server, potentially leading to unauthorized access or data loss. To fix this, update to Dokploy version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-10T19:24:05.888288Z"}</description>
      <content:encoded>{"uuid": "9904477e-147f-4afb-a32e-e28bd089e9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72740", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqta4hrup2b", "content": "CVE-2026-72740\nDokploy users with deployment permission and SSH keys can execute arbitrary commands on the Dokploy server, potentially leading to unauthorized access or data loss. To fix this, update to Dokploy version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-10T19:24:05.888288Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9904477e-147f-4afb-a32e-e28bd089e9b1/export</guid>
      <pubDate>Mon, 10 Aug 2026 19:24:05 +0000</pubDate>
    </item>
    <item>
      <title>0a2e54e1-41dc-43d5-846a-0aa9021d24eb</title>
      <link>https://vulnerability.circl.lu/sighting/0a2e54e1-41dc-43d5-846a-0aa9021d24eb/export</link>
      <description>{"uuid": "0a2e54e1-41dc-43d5-846a-0aa9021d24eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aemh5cwnsrtqh", "content": "CVE-2026-72740 - Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`\nCVE ID : CVE-2026-72740\n \n Published : Aug. 10, 2026, 6:18 p.m. | 11\u00a0minutes ago\n \n Description : Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13,...", "creation_timestamp": "2026-08-10T18:38:58.635822Z"}</description>
      <content:encoded>{"uuid": "0a2e54e1-41dc-43d5-846a-0aa9021d24eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aemh5cwnsrtqh", "content": "CVE-2026-72740 - Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`\nCVE ID : CVE-2026-72740\n \n Published : Aug. 10, 2026, 6:18 p.m. | 11\u00a0minutes ago\n \n Description : Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13,...", "creation_timestamp": "2026-08-10T18:38:58.635822Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0a2e54e1-41dc-43d5-846a-0aa9021d24eb/export</guid>
      <pubDate>Mon, 10 Aug 2026 18:38:58 +0000</pubDate>
    </item>
  </channel>
</rss>
