<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 02 Sep 2026 21:54:44 +0000</lastBuildDate>
    <item>
      <title>87f884ed-61cd-4c2a-aa7f-d599c0543da7</title>
      <link>https://vulnerability.circl.lu/sighting/87f884ed-61cd-4c2a-aa7f-d599c0543da7/export</link>
      <description>{"uuid": "87f884ed-61cd-4c2a-aa7f-d599c0543da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mukqlj5nou2r", "content": "~Cybergcca~\nSonicWall CVE-2026-83548/83549 and JFrog CVE-2026-82329 are being exploited and added to CISA KEV.\n-\nIOCs: CVE-2026-83548, CVE-2026-83549, CVE-2026-82329\n-\n#CVE #KEV #ThreatIntel", "creation_timestamp": "2026-09-02T20:11:12.022947Z"}</description>
      <content:encoded>{"uuid": "87f884ed-61cd-4c2a-aa7f-d599c0543da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mukqlj5nou2r", "content": "~Cybergcca~\nSonicWall CVE-2026-83548/83549 and JFrog CVE-2026-82329 are being exploited and added to CISA KEV.\n-\nIOCs: CVE-2026-83548, CVE-2026-83549, CVE-2026-82329\n-\n#CVE #KEV #ThreatIntel", "creation_timestamp": "2026-09-02T20:11:12.022947Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/87f884ed-61cd-4c2a-aa7f-d599c0543da7/export</guid>
      <pubDate>Wed, 02 Sep 2026 20:11:12 +0000</pubDate>
    </item>
    <item>
      <title>03a0a6eb-511a-48f1-8d35-8c2cfd6f8d04</title>
      <link>https://vulnerability.circl.lu/sighting/03a0a6eb-511a-48f1-8d35-8c2cfd6f8d04/export</link>
      <description>{"uuid": "03a0a6eb-511a-48f1-8d35-8c2cfd6f8d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202988713449046", "content": "Looks like CISA's on a roll. Seven vulnerabilities have been added to the catalogue.\n- CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83549\n- CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83548\n- CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-9586\n- CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-82329\n- CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-49869\n- CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48710\n- CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-59822 #CISA #infosec #vulnerability", "creation_timestamp": "2026-09-02T19:01:24.559299Z"}</description>
      <content:encoded>{"uuid": "03a0a6eb-511a-48f1-8d35-8c2cfd6f8d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202988713449046", "content": "Looks like CISA's on a roll. Seven vulnerabilities have been added to the catalogue.\n- CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83549\n- CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83548\n- CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-9586\n- CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-82329\n- CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-49869\n- CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48710\n- CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-59822 #CISA #infosec #vulnerability", "creation_timestamp": "2026-09-02T19:01:24.559299Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/03a0a6eb-511a-48f1-8d35-8c2cfd6f8d04/export</guid>
      <pubDate>Wed, 02 Sep 2026 19:01:24 +0000</pubDate>
    </item>
    <item>
      <title>b6222f55-bb44-4c72-a195-892f5b21d610</title>
      <link>https://vulnerability.circl.lu/sighting/b6222f55-bb44-4c72-a195-892f5b21d610/export</link>
      <description>{"uuid": "b6222f55-bb44-4c72-a195-892f5b21d610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "exploited", "source": "https://t.me/BleepingComputer/25466", "content": "\u200aHackers exploit critical JFrog Artifactory flaw to forge admin tokens\n\nA critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-jfrog-artifactory-flaw-to-forge-admin-tokens/", "creation_timestamp": "2026-09-02T19:00:05.414627Z"}</description>
      <content:encoded>{"uuid": "b6222f55-bb44-4c72-a195-892f5b21d610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "exploited", "source": "https://t.me/BleepingComputer/25466", "content": "\u200aHackers exploit critical JFrog Artifactory flaw to forge admin tokens\n\nA critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-jfrog-artifactory-flaw-to-forge-admin-tokens/", "creation_timestamp": "2026-09-02T19:00:05.414627Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b6222f55-bb44-4c72-a195-892f5b21d610/export</guid>
      <pubDate>Wed, 02 Sep 2026 19:00:05 +0000</pubDate>
    </item>
    <item>
      <title>df1eac68-136c-4c88-bf1c-46d3d01cfe66</title>
      <link>https://vulnerability.circl.lu/sighting/df1eac68-136c-4c88-bf1c-46d3d01cfe66/export</link>
      <description>{"uuid": "df1eac68-136c-4c88-bf1c-46d3d01cfe66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mukmcuh2bi2o", "content": "JFrog Artifactory has an unauthenticated bypass (CVE-2026-82329, CVSS 9.8) that lets a stranger forge admin tokens, exploited now.\n\nSelf-managed instances in default config are in scope.\n\nPatch, then rotate tokens: the upgrade won't revoke a forged one.", "creation_timestamp": "2026-09-02T18:54:47.291865Z"}</description>
      <content:encoded>{"uuid": "df1eac68-136c-4c88-bf1c-46d3d01cfe66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mukmcuh2bi2o", "content": "JFrog Artifactory has an unauthenticated bypass (CVE-2026-82329, CVSS 9.8) that lets a stranger forge admin tokens, exploited now.\n\nSelf-managed instances in default config are in scope.\n\nPatch, then rotate tokens: the upgrade won't revoke a forged one.", "creation_timestamp": "2026-09-02T18:54:47.291865Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/df1eac68-136c-4c88-bf1c-46d3d01cfe66/export</guid>
      <pubDate>Wed, 02 Sep 2026 18:54:47 +0000</pubDate>
    </item>
    <item>
      <title>9b6e92d6-0ee4-4f24-bce7-593222183e52</title>
      <link>https://vulnerability.circl.lu/sighting/9b6e92d6-0ee4-4f24-bce7-593222183e52/export</link>
      <description>{"uuid": "9b6e92d6-0ee4-4f24-bce7-593222183e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mukls44d6z25", "content": "Active exploitation of CVE-2026-82329 in JFrog Artifactory lets attackers forge admin tokens on self-managed instances, risking package poisoning and downstream code execution. #JFrogArtifactory #watchTowr #CVE202682329", "creation_timestamp": "2026-09-02T18:45:24.491660Z"}</description>
      <content:encoded>{"uuid": "9b6e92d6-0ee4-4f24-bce7-593222183e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mukls44d6z25", "content": "Active exploitation of CVE-2026-82329 in JFrog Artifactory lets attackers forge admin tokens on self-managed instances, risking package poisoning and downstream code execution. #JFrogArtifactory #watchTowr #CVE202682329", "creation_timestamp": "2026-09-02T18:45:24.491660Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9b6e92d6-0ee4-4f24-bce7-593222183e52/export</guid>
      <pubDate>Wed, 02 Sep 2026 18:45:24 +0000</pubDate>
    </item>
    <item>
      <title>2549e22a-150a-4fb5-939b-6220e67ba688</title>
      <link>https://vulnerability.circl.lu/sighting/2549e22a-150a-4fb5-939b-6220e67ba688/export</link>
      <description>{"uuid": "2549e22a-150a-4fb5-939b-6220e67ba688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukjsyh2kf22", "content": "\ud83d\uded1 CVE-2026-82329\nJFrog Artifactory\nCVSS 9.8 / EPSS 1% / KEV \u2705\nTL;DR: JFrog Artifactory contains an authentication weakness that, under default configuration, ma\u2026\nhttps://cvesentinel.com/report/CVE-2026-82329?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T18:10:08.020562Z"}</description>
      <content:encoded>{"uuid": "2549e22a-150a-4fb5-939b-6220e67ba688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukjsyh2kf22", "content": "\ud83d\uded1 CVE-2026-82329\nJFrog Artifactory\nCVSS 9.8 / EPSS 1% / KEV \u2705\nTL;DR: JFrog Artifactory contains an authentication weakness that, under default configuration, ma\u2026\nhttps://cvesentinel.com/report/CVE-2026-82329?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T18:10:08.020562Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2549e22a-150a-4fb5-939b-6220e67ba688/export</guid>
      <pubDate>Wed, 02 Sep 2026 18:10:08 +0000</pubDate>
    </item>
    <item>
      <title>ebe4f835-d46f-4946-92fc-d7f8922eea8f</title>
      <link>https://vulnerability.circl.lu/sighting/ebe4f835-d46f-4946-92fc-d7f8922eea8f/export</link>
      <description>{"uuid": "ebe4f835-d46f-4946-92fc-d7f8922eea8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mukjipv5hy2r", "content": "Another Artifactory CVE under attack: Security researchers have detected active exploitation of CVE-2026-82329, a critical authentication-bypass vulnerability in JFrog Artifactory, shortly after the vendor issued a patch. The flaw, with a CVSS score of 9.8, enables u\u2026 https://ranked.news/1317809?u=b", "creation_timestamp": "2026-09-02T18:04:22.729680Z"}</description>
      <content:encoded>{"uuid": "ebe4f835-d46f-4946-92fc-d7f8922eea8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mukjipv5hy2r", "content": "Another Artifactory CVE under attack: Security researchers have detected active exploitation of CVE-2026-82329, a critical authentication-bypass vulnerability in JFrog Artifactory, shortly after the vendor issued a patch. The flaw, with a CVSS score of 9.8, enables u\u2026 https://ranked.news/1317809?u=b", "creation_timestamp": "2026-09-02T18:04:22.729680Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ebe4f835-d46f-4946-92fc-d7f8922eea8f/export</guid>
      <pubDate>Wed, 02 Sep 2026 18:04:22 +0000</pubDate>
    </item>
    <item>
      <title>cd2b0144-aa7c-4d6a-b248-71b808c7cc49</title>
      <link>https://vulnerability.circl.lu/sighting/cd2b0144-aa7c-4d6a-b248-71b808c7cc49/export</link>
      <description>{"uuid": "cd2b0144-aa7c-4d6a-b248-71b808c7cc49", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd4012f9-6a61-4a70-ae94-10a548c0536f", "content": "", "creation_timestamp": "2026-09-02T18:00:03.788916Z"}</description>
      <content:encoded>{"uuid": "cd2b0144-aa7c-4d6a-b248-71b808c7cc49", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd4012f9-6a61-4a70-ae94-10a548c0536f", "content": "", "creation_timestamp": "2026-09-02T18:00:03.788916Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cd2b0144-aa7c-4d6a-b248-71b808c7cc49/export</guid>
      <pubDate>Wed, 02 Sep 2026 18:00:03 +0000</pubDate>
    </item>
    <item>
      <title>5d75ea4d-c9e1-4c2c-a841-bfd7ffd37999</title>
      <link>https://vulnerability.circl.lu/sighting/5d75ea4d-c9e1-4c2c-a841-bfd7ffd37999/export</link>
      <description>{"uuid": "5d75ea4d-c9e1-4c2c-a841-bfd7ffd37999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mukj5hznsu2g", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-82329", "creation_timestamp": "2026-09-02T17:58:05.019599Z"}</description>
      <content:encoded>{"uuid": "5d75ea4d-c9e1-4c2c-a841-bfd7ffd37999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mukj5hznsu2g", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-82329", "creation_timestamp": "2026-09-02T17:58:05.019599Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5d75ea4d-c9e1-4c2c-a841-bfd7ffd37999/export</guid>
      <pubDate>Wed, 02 Sep 2026 17:58:05 +0000</pubDate>
    </item>
    <item>
      <title>8fa260cb-df39-4279-8918-e9229aae3603</title>
      <link>https://vulnerability.circl.lu/sighting/8fa260cb-df39-4279-8918-e9229aae3603/export</link>
      <description>{"uuid": "8fa260cb-df39-4279-8918-e9229aae3603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukhlai26k2i", "content": "\ud83d\uded1 CVE-2026-82329\nJFrog Artifactory\nCVSS 9.8 / EPSS 1% / KEV: No\nTL;DR: JFrog Artifactory contains an authentication weakness that, under default configuration, \u2026\nhttps://cvesentinel.com/report/CVE-2026-82329?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T17:29:59.260126Z"}</description>
      <content:encoded>{"uuid": "8fa260cb-df39-4279-8918-e9229aae3603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukhlai26k2i", "content": "\ud83d\uded1 CVE-2026-82329\nJFrog Artifactory\nCVSS 9.8 / EPSS 1% / KEV: No\nTL;DR: JFrog Artifactory contains an authentication weakness that, under default configuration, \u2026\nhttps://cvesentinel.com/report/CVE-2026-82329?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T17:29:59.260126Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8fa260cb-df39-4279-8918-e9229aae3603/export</guid>
      <pubDate>Wed, 02 Sep 2026 17:29:59 +0000</pubDate>
    </item>
  </channel>
</rss>
