<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 04 Jun 2026 08:13:52 +0000</lastBuildDate>
    <item>
      <title>dd67c5b1-aa24-4dd4-a7a0-b928e4c62bf0</title>
      <link>https://vulnerability.circl.lu/sighting/dd67c5b1-aa24-4dd4-a7a0-b928e4c62bf0/export</link>
      <description>{"uuid": "dd67c5b1-aa24-4dd4-a7a0-b928e4c62bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8293", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116679339265385389", "content": "\ud83d\udd0e HIGH severity: CVE-2026-8293 in Really Simple Security WP plugin (&amp;lt;9.5.10.1) allows 2FA bypass via REST endpoints if password is known. Update to 9.5.10.1+ or disable affected endpoints. https://radar.offseq.com/threat/cve-2026-8293-cwe-287-improper-authentication-in-r-fe9aba14 #OffSeq #WordPress #CVE20268293 #Security", "creation_timestamp": "2026-06-02T07:30:26.994261Z"}</description>
      <content:encoded>{"uuid": "dd67c5b1-aa24-4dd4-a7a0-b928e4c62bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8293", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116679339265385389", "content": "\ud83d\udd0e HIGH severity: CVE-2026-8293 in Really Simple Security WP plugin (&amp;lt;9.5.10.1) allows 2FA bypass via REST endpoints if password is known. Update to 9.5.10.1+ or disable affected endpoints. https://radar.offseq.com/threat/cve-2026-8293-cwe-287-improper-authentication-in-r-fe9aba14 #OffSeq #WordPress #CVE20268293 #Security", "creation_timestamp": "2026-06-02T07:30:26.994261Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dd67c5b1-aa24-4dd4-a7a0-b928e4c62bf0/export</guid>
      <pubDate>Tue, 02 Jun 2026 07:30:26 +0000</pubDate>
    </item>
    <item>
      <title>067184a9-66c3-4a91-bdef-389630909293</title>
      <link>https://vulnerability.circl.lu/sighting/067184a9-66c3-4a91-bdef-389630909293/export</link>
      <description>{"uuid": "067184a9-66c3-4a91-bdef-389630909293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8293", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnc36jcnba2k", "content": "Really Simple Security WP plugin (&amp;lt;9.5.10.1) has a HIGH severity 2FA bypass flaw. Attackers with a valid password can skip email OTP. Update ASAP or disable risky endpoints. https://radar.offseq.com/threat/cve-2026-8293-cwe-287-improper-authentication-in-r-fe9aba14 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-06-02T07:30:28.502756Z"}</description>
      <content:encoded>{"uuid": "067184a9-66c3-4a91-bdef-389630909293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8293", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnc36jcnba2k", "content": "Really Simple Security WP plugin (&amp;lt;9.5.10.1) has a HIGH severity 2FA bypass flaw. Attackers with a valid password can skip email OTP. Update ASAP or disable risky endpoints. https://radar.offseq.com/threat/cve-2026-8293-cwe-287-improper-authentication-in-r-fe9aba14 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-06-02T07:30:28.502756Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/067184a9-66c3-4a91-bdef-389630909293/export</guid>
      <pubDate>Tue, 02 Jun 2026 07:30:28 +0000</pubDate>
    </item>
    <item>
      <title>4c9b83f3-1882-4ebf-a889-62d631c44238</title>
      <link>https://vulnerability.circl.lu/sighting/4c9b83f3-1882-4ebf-a889-62d631c44238/export</link>
      <description>{"uuid": "4c9b83f3-1882-4ebf-a889-62d631c44238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mncclxnq2l2d", "content": "CVE-2026-8293 - Really Simple Security\nCVE ID : CVE-2026-8293\n \n Published : June 2, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor auth...", "creation_timestamp": "2026-06-02T09:43:15.364651Z"}</description>
      <content:encoded>{"uuid": "4c9b83f3-1882-4ebf-a889-62d631c44238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mncclxnq2l2d", "content": "CVE-2026-8293 - Really Simple Security\nCVE ID : CVE-2026-8293\n \n Published : June 2, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor auth...", "creation_timestamp": "2026-06-02T09:43:15.364651Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4c9b83f3-1882-4ebf-a889-62d631c44238/export</guid>
      <pubDate>Tue, 02 Jun 2026 09:43:15 +0000</pubDate>
    </item>
  </channel>
</rss>
