<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 20 Oct 2026 07:46:44 +0000</lastBuildDate>
    <item>
      <title>cb532291-54a6-481b-b7f4-1a32a238e70f</title>
      <link>https://vulnerability.circl.lu/sighting/cb532291-54a6-481b-b7f4-1a32a238e70f/export</link>
      <description>{"uuid": "cb532291-54a6-481b-b7f4-1a32a238e70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7767", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117431156287892048", "content": "CVE-2026-7767 URL Redirection to Untrusted Site ('Open Redirect') in GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.\nhttps://www.cve.org/CVERecord?id=CVE-2026-7767https://gitlab.com/gitlab-org/gitlab/-/work_items/598965https://hackerone.com/reports/3597095https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/#gitlab #GitLab#CVE_2026_7767#bot", "creation_timestamp": "2026-10-13T02:07:23.656129Z"}</description>
      <content:encoded>{"uuid": "cb532291-54a6-481b-b7f4-1a32a238e70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7767", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117431156287892048", "content": "CVE-2026-7767 URL Redirection to Untrusted Site ('Open Redirect') in GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.\nhttps://www.cve.org/CVERecord?id=CVE-2026-7767https://gitlab.com/gitlab-org/gitlab/-/work_items/598965https://hackerone.com/reports/3597095https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/#gitlab #GitLab#CVE_2026_7767#bot", "creation_timestamp": "2026-10-13T02:07:23.656129Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cb532291-54a6-481b-b7f4-1a32a238e70f/export</guid>
      <pubDate>Tue, 13 Oct 2026 02:07:23 +0000</pubDate>
    </item>
    <item>
      <title>ada58678-09b4-4199-b1a9-44948c07b5ae</title>
      <link>https://vulnerability.circl.lu/sighting/ada58678-09b4-4199-b1a9-44948c07b5ae/export</link>
      <description>{"uuid": "ada58678-09b4-4199-b1a9-44948c07b5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7767", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20261013", "content": "", "creation_timestamp": "2026-10-12T18:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "ada58678-09b4-4199-b1a9-44948c07b5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7767", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20261013", "content": "", "creation_timestamp": "2026-10-12T18:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ada58678-09b4-4199-b1a9-44948c07b5ae/export</guid>
      <pubDate>Mon, 12 Oct 2026 18:00:00 +0000</pubDate>
    </item>
  </channel>
</rss>
