<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 02:29:27 +0000</lastBuildDate>
    <item>
      <title>fbe1fb6c-3c1d-4224-899d-b46c1d07e1cb</title>
      <link>https://vulnerability.circl.lu/sighting/fbe1fb6c-3c1d-4224-899d-b46c1d07e1cb/export</link>
      <description>{"uuid": "fbe1fb6c-3c1d-4224-899d-b46c1d07e1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88861", "type": "published-proof-of-concept", "source": "Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3_XacHD49buP-a4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.416941Z"}</description>
      <content:encoded>{"uuid": "fbe1fb6c-3c1d-4224-899d-b46c1d07e1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88861", "type": "published-proof-of-concept", "source": "Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3_XacHD49buP-a4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.416941Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fbe1fb6c-3c1d-4224-899d-b46c1d07e1cb/export</guid>
      <pubDate>Tue, 15 Sep 2026 00:00:21 +0000</pubDate>
    </item>
    <item>
      <title>99a2fd60-0564-4f36-ab32-ab784bc79728</title>
      <link>https://vulnerability.circl.lu/sighting/99a2fd60-0564-4f36-ab32-ab784bc79728/export</link>
      <description>{"uuid": "99a2fd60-0564-4f36-ab32-ab784bc79728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88861", "type": "seen", "source": "Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3_XacHD49buP-a4", "content": "", "creation_timestamp": "2026-09-14T03:00:15.091953Z"}</description>
      <content:encoded>{"uuid": "99a2fd60-0564-4f36-ab32-ab784bc79728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88861", "type": "seen", "source": "Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3_XacHD49buP-a4", "content": "", "creation_timestamp": "2026-09-14T03:00:15.091953Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/99a2fd60-0564-4f36-ab32-ab784bc79728/export</guid>
      <pubDate>Mon, 14 Sep 2026 03:00:15 +0000</pubDate>
    </item>
    <item>
      <title>156e0571-ab71-4c29-b386-2e703dd9bb15</title>
      <link>https://vulnerability.circl.lu/sighting/156e0571-ab71-4c29-b386-2e703dd9bb15/export</link>
      <description>{"uuid": "156e0571-ab71-4c29-b386-2e703dd9bb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88862", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvcbroayk42y", "content": "CVE-2026-88862 - capgo.app\nCapgo's backend does not properly check a special header, so a user who has a limited API key can tell the system to use the ID of a more powerful key that belongs to the same\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#capgoapp #capgo #CVE #infosec", "creation_timestamp": "2026-09-12T04:50:06.422875Z"}</description>
      <content:encoded>{"uuid": "156e0571-ab71-4c29-b386-2e703dd9bb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88862", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvcbroayk42y", "content": "CVE-2026-88862 - capgo.app\nCapgo's backend does not properly check a special header, so a user who has a limited API key can tell the system to use the ID of a more powerful key that belongs to the same\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#capgoapp #capgo #CVE #infosec", "creation_timestamp": "2026-09-12T04:50:06.422875Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/156e0571-ab71-4c29-b386-2e703dd9bb15/export</guid>
      <pubDate>Sat, 12 Sep 2026 04:50:06 +0000</pubDate>
    </item>
    <item>
      <title>8404c661-2ab0-456c-a9dc-7a7671718e0a</title>
      <link>https://vulnerability.circl.lu/sighting/8404c661-2ab0-456c-a9dc-7a7671718e0a/export</link>
      <description>{"uuid": "8404c661-2ab0-456c-a9dc-7a7671718e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88869", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gqat32v2y", "content": "\ud83d\udea8 CVE-2026-88869 \u2014 CVSS 9.3 CRITICAL\n\nAVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulne...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88869\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:08:08.551610Z"}</description>
      <content:encoded>{"uuid": "8404c661-2ab0-456c-a9dc-7a7671718e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88869", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gqat32v2y", "content": "\ud83d\udea8 CVE-2026-88869 \u2014 CVSS 9.3 CRITICAL\n\nAVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulne...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88869\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:08:08.551610Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8404c661-2ab0-456c-a9dc-7a7671718e0a/export</guid>
      <pubDate>Thu, 10 Sep 2026 16:08:08 +0000</pubDate>
    </item>
    <item>
      <title>bdb6da03-53fe-4bd6-8a2e-68a4880c741b</title>
      <link>https://vulnerability.circl.lu/sighting/bdb6da03-53fe-4bd6-8a2e-68a4880c741b/export</link>
      <description>{"uuid": "bdb6da03-53fe-4bd6-8a2e-68a4880c741b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88868", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gpws3p425", "content": "\ud83d\udea8 CVE-2026-88868 \u2014 CVSS 9.3 CRITICAL\n\nAVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulne...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88868\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:58.106757Z"}</description>
      <content:encoded>{"uuid": "bdb6da03-53fe-4bd6-8a2e-68a4880c741b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88868", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gpws3p425", "content": "\ud83d\udea8 CVE-2026-88868 \u2014 CVSS 9.3 CRITICAL\n\nAVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulne...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88868\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:58.106757Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bdb6da03-53fe-4bd6-8a2e-68a4880c741b/export</guid>
      <pubDate>Thu, 10 Sep 2026 16:07:58 +0000</pubDate>
    </item>
    <item>
      <title>e4c8dd21-553f-44e9-a678-e6bfbe499d7c</title>
      <link>https://vulnerability.circl.lu/sighting/e4c8dd21-553f-44e9-a678-e6bfbe499d7c/export</link>
      <description>{"uuid": "e4c8dd21-553f-44e9-a678-e6bfbe499d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88867", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gpnjiyh22", "content": "\ud83d\udea8 CVE-2026-88867 \u2014 CVSS 9.3 CRITICAL\n\nWWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07ee78eaf330c1, contains a st...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88867\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:47.950899Z"}</description>
      <content:encoded>{"uuid": "e4c8dd21-553f-44e9-a678-e6bfbe499d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88867", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gpnjiyh22", "content": "\ud83d\udea8 CVE-2026-88867 \u2014 CVSS 9.3 CRITICAL\n\nWWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07ee78eaf330c1, contains a st...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88867\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:47.950899Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e4c8dd21-553f-44e9-a678-e6bfbe499d7c/export</guid>
      <pubDate>Thu, 10 Sep 2026 16:07:47 +0000</pubDate>
    </item>
    <item>
      <title>ddfed3ae-7e1e-40cc-9d03-898a1690ff87</title>
      <link>https://vulnerability.circl.lu/sighting/ddfed3ae-7e1e-40cc-9d03-898a1690ff87/export</link>
      <description>{"uuid": "ddfed3ae-7e1e-40cc-9d03-898a1690ff87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88866", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gpesrgf2y", "content": "\ud83d\udea8 CVE-2026-88866 \u2014 CVSS 9.3 CRITICAL\n\nWWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88866\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:38.781623Z"}</description>
      <content:encoded>{"uuid": "ddfed3ae-7e1e-40cc-9d03-898a1690ff87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88866", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gpesrgf2y", "content": "\ud83d\udea8 CVE-2026-88866 \u2014 CVSS 9.3 CRITICAL\n\nWWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88866\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:38.781623Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ddfed3ae-7e1e-40cc-9d03-898a1690ff87/export</guid>
      <pubDate>Thu, 10 Sep 2026 16:07:38 +0000</pubDate>
    </item>
    <item>
      <title>882b4f45-cc8e-420c-960a-3ec9d99dd301</title>
      <link>https://vulnerability.circl.lu/sighting/882b4f45-cc8e-420c-960a-3ec9d99dd301/export</link>
      <description>{"uuid": "882b4f45-cc8e-420c-960a-3ec9d99dd301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88864", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gp44tk22t", "content": "\ud83d\udea8 CVE-2026-88864 \u2014 CVSS 9.3 CRITICAL\n\nCapgo (capgo.app) fails to restrict direct write access to the public.sso_providers table exposed through S...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88864\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:29.679946Z"}</description>
      <content:encoded>{"uuid": "882b4f45-cc8e-420c-960a-3ec9d99dd301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88864", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gp44tk22t", "content": "\ud83d\udea8 CVE-2026-88864 \u2014 CVSS 9.3 CRITICAL\n\nCapgo (capgo.app) fails to restrict direct write access to the public.sso_providers table exposed through S...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88864\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:29.679946Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/882b4f45-cc8e-420c-960a-3ec9d99dd301/export</guid>
      <pubDate>Thu, 10 Sep 2026 16:07:29 +0000</pubDate>
    </item>
    <item>
      <title>71776686-dfbf-42a3-9969-45bd5b306179</title>
      <link>https://vulnerability.circl.lu/sighting/71776686-dfbf-42a3-9969-45bd5b306179/export</link>
      <description>{"uuid": "71776686-dfbf-42a3-9969-45bd5b306179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gotlnd722", "content": "\ud83d\udea8 CVE-2026-88860 \u2014 CVSS 9.3 CRITICAL\n\nCapgo fails to clean up channel permission overrides when a user's last organization role binding is delete...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:21.766760Z"}</description>
      <content:encoded>{"uuid": "71776686-dfbf-42a3-9969-45bd5b306179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gotlnd722", "content": "\ud83d\udea8 CVE-2026-88860 \u2014 CVSS 9.3 CRITICAL\n\nCapgo fails to clean up channel permission overrides when a user's last organization role binding is delete...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:21.766760Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/71776686-dfbf-42a3-9969-45bd5b306179/export</guid>
      <pubDate>Thu, 10 Sep 2026 16:07:21 +0000</pubDate>
    </item>
    <item>
      <title>2c4c1c93-d47c-4d90-a19a-6bfcb95cc6b7</title>
      <link>https://vulnerability.circl.lu/sighting/2c4c1c93-d47c-4d90-a19a-6bfcb95cc6b7/export</link>
      <description>{"uuid": "2c4c1c93-d47c-4d90-a19a-6bfcb95cc6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88868", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6bstzdrx2b", "content": "CVE-2026-88868 - avideo\nThe LiveLinks feature in AVideo does not clean up the text entered for titles and descriptions. This means someone with streaming rights could add hidden code that runs on every page\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-10T14:40:07.017052Z"}</description>
      <content:encoded>{"uuid": "2c4c1c93-d47c-4d90-a19a-6bfcb95cc6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88868", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6bstzdrx2b", "content": "CVE-2026-88868 - avideo\nThe LiveLinks feature in AVideo does not clean up the text entered for titles and descriptions. This means someone with streaming rights could add hidden code that runs on every page\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-10T14:40:07.017052Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2c4c1c93-d47c-4d90-a19a-6bfcb95cc6b7/export</guid>
      <pubDate>Thu, 10 Sep 2026 14:40:07 +0000</pubDate>
    </item>
  </channel>
</rss>
