<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 19:42:40 +0000</lastBuildDate>
    <item>
      <title>14bfd34d-b987-444d-83d8-0bb4e0227e95</title>
      <link>https://vulnerability.circl.lu/sighting/14bfd34d-b987-444d-83d8-0bb4e0227e95/export</link>
      <description>{"uuid": "14bfd34d-b987-444d-83d8-0bb4e0227e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvzvgskwqkh2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-089\nLenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT Gateway\nCVE-2026-75925\n\nThe Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the [\u2026]", "creation_timestamp": "2026-09-21T14:13:16.201468Z"}</description>
      <content:encoded>{"uuid": "14bfd34d-b987-444d-83d8-0bb4e0227e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvzvgskwqkh2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-089\nLenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT Gateway\nCVE-2026-75925\n\nThe Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the [\u2026]", "creation_timestamp": "2026-09-21T14:13:16.201468Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/14bfd34d-b987-444d-83d8-0bb4e0227e95/export</guid>
      <pubDate>Mon, 21 Sep 2026 14:13:16 +0000</pubDate>
    </item>
    <item>
      <title>9253cd03-05df-4a59-bd67-5e726a691cf9</title>
      <link>https://vulnerability.circl.lu/sighting/9253cd03-05df-4a59-bd67-5e726a691cf9/export</link>
      <description>{"uuid": "9253cd03-05df-4a59-bd67-5e726a691cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117309439231849832", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-089Lenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT GatewayCVE-2026-75925\nThe Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the computer running the client with elevated privile\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-089CSAF JSON: https://lenze.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-089.json\n#OT #Advisory", "creation_timestamp": "2026-09-21T14:13:08.665090Z"}</description>
      <content:encoded>{"uuid": "9253cd03-05df-4a59-bd67-5e726a691cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117309439231849832", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-089Lenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT GatewayCVE-2026-75925\nThe Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the computer running the client with elevated privile\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-089CSAF JSON: https://lenze.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-089.json\n#OT #Advisory", "creation_timestamp": "2026-09-21T14:13:08.665090Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9253cd03-05df-4a59-bd67-5e726a691cf9/export</guid>
      <pubDate>Mon, 21 Sep 2026 14:13:08 +0000</pubDate>
    </item>
    <item>
      <title>584cdaf5-ed78-4585-b71f-3115847f46f1</title>
      <link>https://vulnerability.circl.lu/sighting/584cdaf5-ed78-4585-b71f-3115847f46f1/export</link>
      <description>{"uuid": "584cdaf5-ed78-4585-b71f-3115847f46f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117232828506352595", "content": "CVE-2026-75925: CRLF injection in IXON VPN Client (&amp;lt;1.4.7) lets unauthenticated attackers execute commands as root/SYSTEM via crafted config values. CVSS 9.6. Unpatched\u2014assume risk now. Update immediately if using this client. Details: https://www.valtersit.com/cve/CVE-2026-75925", "creation_timestamp": "2026-09-08T01:30:02.949688Z"}</description>
      <content:encoded>{"uuid": "584cdaf5-ed78-4585-b71f-3115847f46f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117232828506352595", "content": "CVE-2026-75925: CRLF injection in IXON VPN Client (&amp;lt;1.4.7) lets unauthenticated attackers execute commands as root/SYSTEM via crafted config values. CVSS 9.6. Unpatched\u2014assume risk now. Update immediately if using this client. Details: https://www.valtersit.com/cve/CVE-2026-75925", "creation_timestamp": "2026-09-08T01:30:02.949688Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/584cdaf5-ed78-4585-b71f-3115847f46f1/export</guid>
      <pubDate>Tue, 08 Sep 2026 01:30:02 +0000</pubDate>
    </item>
    <item>
      <title>56d2dc72-0564-4878-9722-7333e3937912</title>
      <link>https://vulnerability.circl.lu/sighting/56d2dc72-0564-4878-9722-7333e3937912/export</link>
      <description>{"uuid": "56d2dc72-0564-4878-9722-7333e3937912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxuqa775u27", "content": "CVE-2026-75925: CRLF injection in IXON VPN Client (&amp;lt;1.4.7) lets unauthenticated attackers execute commands as root/SYSTEM via crafted config values. CVSS 9.6. Unpatched\u2014assume risk now. Update immediately if using this client. Details: https://www.valtersit.com/cve/CVE-2026-75925", "creation_timestamp": "2026-09-08T01:30:02.000486Z"}</description>
      <content:encoded>{"uuid": "56d2dc72-0564-4878-9722-7333e3937912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxuqa775u27", "content": "CVE-2026-75925: CRLF injection in IXON VPN Client (&amp;lt;1.4.7) lets unauthenticated attackers execute commands as root/SYSTEM via crafted config values. CVSS 9.6. Unpatched\u2014assume risk now. Update immediately if using this client. Details: https://www.valtersit.com/cve/CVE-2026-75925", "creation_timestamp": "2026-09-08T01:30:02.000486Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/56d2dc72-0564-4878-9722-7333e3937912/export</guid>
      <pubDate>Tue, 08 Sep 2026 01:30:02 +0000</pubDate>
    </item>
    <item>
      <title>ea64060f-8cca-46df-8fd2-3e94cee1ac4b</title>
      <link>https://vulnerability.circl.lu/sighting/ea64060f-8cca-46df-8fd2-3e94cee1ac4b/export</link>
      <description>{"uuid": "ea64060f-8cca-46df-8fd2-3e94cee1ac4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muq6poakgw2t", "content": "\ud83d\udea8 CVE-2026-75925 \u2014 CVSS 9.4 CRITICAL\n\nImproper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to exe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75925\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T00:07:22.980345Z"}</description>
      <content:encoded>{"uuid": "ea64060f-8cca-46df-8fd2-3e94cee1ac4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muq6poakgw2t", "content": "\ud83d\udea8 CVE-2026-75925 \u2014 CVSS 9.4 CRITICAL\n\nImproper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to exe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75925\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T00:07:22.980345Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ea64060f-8cca-46df-8fd2-3e94cee1ac4b/export</guid>
      <pubDate>Sat, 05 Sep 2026 00:07:22 +0000</pubDate>
    </item>
    <item>
      <title>6f9ea744-691e-4e93-91b4-85d470710348</title>
      <link>https://vulnerability.circl.lu/sighting/6f9ea744-691e-4e93-91b4-85d470710348/export</link>
      <description>{"uuid": "6f9ea744-691e-4e93-91b4-85d470710348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muq336j23o2s", "content": "\ud83d\udd34 CVE-2026-75925 - Critical (9.6)\n\nImproper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75925/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T23:02:14.743104Z"}</description>
      <content:encoded>{"uuid": "6f9ea744-691e-4e93-91b4-85d470710348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muq336j23o2s", "content": "\ud83d\udd34 CVE-2026-75925 - Critical (9.6)\n\nImproper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75925/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T23:02:14.743104Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6f9ea744-691e-4e93-91b4-85d470710348/export</guid>
      <pubDate>Fri, 04 Sep 2026 23:02:14 +0000</pubDate>
    </item>
    <item>
      <title>820cadde-fa5d-43d8-afa1-95fde2baadd2</title>
      <link>https://vulnerability.circl.lu/sighting/820cadde-fa5d-43d8-afa1-95fde2baadd2/export</link>
      <description>{"uuid": "820cadde-fa5d-43d8-afa1-95fde2baadd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2bsq4p4l67sch", "content": "CVE-2026-75925 - IXON VPN Client CRLF Injection\nCVE ID : CVE-2026-75925\n \n Published : Sept. 4, 2026, 10:17 p.m. | 20\u00a0minutes ago\n \n Description : Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root o...", "creation_timestamp": "2026-09-04T22:58:56.506449Z"}</description>
      <content:encoded>{"uuid": "820cadde-fa5d-43d8-afa1-95fde2baadd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2bsq4p4l67sch", "content": "CVE-2026-75925 - IXON VPN Client CRLF Injection\nCVE ID : CVE-2026-75925\n \n Published : Sept. 4, 2026, 10:17 p.m. | 20\u00a0minutes ago\n \n Description : Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root o...", "creation_timestamp": "2026-09-04T22:58:56.506449Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/820cadde-fa5d-43d8-afa1-95fde2baadd2/export</guid>
      <pubDate>Fri, 04 Sep 2026 22:58:56 +0000</pubDate>
    </item>
    <item>
      <title>ec0cd7b9-4503-4326-acc8-4d4330ffa09e</title>
      <link>https://vulnerability.circl.lu/sighting/ec0cd7b9-4503-4326-acc8-4d4330ffa09e/export</link>
      <description>{"uuid": "ec0cd7b9-4503-4326-acc8-4d4330ffa09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupzboykz22j", "content": "CVE-2026-75925 - ixon vpn client\nThe IXON VPN client (versions before 1.4.7) can be tricked into adding extra commands to its own configuration file. Because the client does not check who is making changes, an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ixon #CVE #infosec", "creation_timestamp": "2026-09-04T22:30:04.809228Z"}</description>
      <content:encoded>{"uuid": "ec0cd7b9-4503-4326-acc8-4d4330ffa09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75925", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupzboykz22j", "content": "CVE-2026-75925 - ixon vpn client\nThe IXON VPN client (versions before 1.4.7) can be tricked into adding extra commands to its own configuration file. Because the client does not check who is making changes, an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ixon #CVE #infosec", "creation_timestamp": "2026-09-04T22:30:04.809228Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ec0cd7b9-4503-4326-acc8-4d4330ffa09e/export</guid>
      <pubDate>Fri, 04 Sep 2026 22:30:04 +0000</pubDate>
    </item>
  </channel>
</rss>
