<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 14 Aug 2026 08:47:55 +0000</lastBuildDate>
    <item>
      <title>a58d7aa5-7b55-496c-859b-a9e9f74feb3a</title>
      <link>https://vulnerability.circl.lu/sighting/a58d7aa5-7b55-496c-859b-a9e9f74feb3a/export</link>
      <description>{"uuid": "a58d7aa5-7b55-496c-859b-a9e9f74feb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117077526984432106", "content": "CVE-2026-72878 - Critical RCE in Dokploy PaaS. Backup pipeline injects user-controlled fields into shell commands, allowing authenticated admins to execute OS-level commands on the host. CVSS 9.6. Update to 0.29.13 immediately. #CVE #Dokploy #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72878/", "creation_timestamp": "2026-08-11T15:15:01.673205Z"}</description>
      <content:encoded>{"uuid": "a58d7aa5-7b55-496c-859b-a9e9f74feb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117077526984432106", "content": "CVE-2026-72878 - Critical RCE in Dokploy PaaS. Backup pipeline injects user-controlled fields into shell commands, allowing authenticated admins to execute OS-level commands on the host. CVSS 9.6. Update to 0.29.13 immediately. #CVE #Dokploy #infosec\nhttps://www.valtersit.com/cve/CVE-2026-72878/", "creation_timestamp": "2026-08-11T15:15:01.673205Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a58d7aa5-7b55-496c-859b-a9e9f74feb3a/export</guid>
      <pubDate>Tue, 11 Aug 2026 15:15:01 +0000</pubDate>
    </item>
    <item>
      <title>914078d5-efc9-4746-b2aa-d4f3812bfafe</title>
      <link>https://vulnerability.circl.lu/sighting/914078d5-efc9-4746-b2aa-d4f3812bfafe/export</link>
      <description>{"uuid": "914078d5-efc9-4746-b2aa-d4f3812bfafe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mssvrauood2p", "content": "CVE-2026-72878 - Critical RCE in Dokploy PaaS. Backup pipeline injects user-controlled fields into shell commands, allowing authenticated admins to execute OS-level commands on the host. CVSS 9.6. Update to 0.29.13 immediately. #CVE #Dokplo...\n\nhttps://www.valtersit.com/cve/CVE-2026-72878/", "creation_timestamp": "2026-08-11T15:14:50.695273Z"}</description>
      <content:encoded>{"uuid": "914078d5-efc9-4746-b2aa-d4f3812bfafe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mssvrauood2p", "content": "CVE-2026-72878 - Critical RCE in Dokploy PaaS. Backup pipeline injects user-controlled fields into shell commands, allowing authenticated admins to execute OS-level commands on the host. CVSS 9.6. Update to 0.29.13 immediately. #CVE #Dokplo...\n\nhttps://www.valtersit.com/cve/CVE-2026-72878/", "creation_timestamp": "2026-08-11T15:14:50.695273Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/914078d5-efc9-4746-b2aa-d4f3812bfafe/export</guid>
      <pubDate>Tue, 11 Aug 2026 15:14:50 +0000</pubDate>
    </item>
    <item>
      <title>15a4b453-ccdb-46e7-a28a-df8e0a6b446e</title>
      <link>https://vulnerability.circl.lu/sighting/15a4b453-ccdb-46e7-a28a-df8e0a6b446e/export</link>
      <description>{"uuid": "15a4b453-ccdb-46e7-a28a-df8e0a6b446e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqwowoee625", "content": "CVE-2026-72878 - dokploy\nDokploy's backup and restore feature allows an attacker with admin access to inject malicious commands that can execute on the host machine, potentially leading to unauthorized access or data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:26:04.439113Z"}</description>
      <content:encoded>{"uuid": "15a4b453-ccdb-46e7-a28a-df8e0a6b446e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqwowoee625", "content": "CVE-2026-72878 - dokploy\nDokploy's backup and restore feature allows an attacker with admin access to inject malicious commands that can execute on the host machine, potentially leading to unauthorized access or data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dokploy #CVE #infosec", "creation_timestamp": "2026-08-10T20:26:04.439113Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/15a4b453-ccdb-46e7-a28a-df8e0a6b446e/export</guid>
      <pubDate>Mon, 10 Aug 2026 20:26:04 +0000</pubDate>
    </item>
  </channel>
</rss>
