<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 24 Jul 2026 13:39:26 +0000</lastBuildDate>
    <item>
      <title>e65576b2-5edc-49e5-8ac2-107ca1ed9c02</title>
      <link>https://vulnerability.circl.lu/sighting/e65576b2-5edc-49e5-8ac2-107ca1ed9c02/export</link>
      <description>{"uuid": "e65576b2-5edc-49e5-8ac2-107ca1ed9c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26295", "type": "seen", "source": "https://t.me/cibsecurity/22487", "content": "\u203c CVE-2020-26295 \u203c\n\nOpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrator with permission to import/export data and to edit cms pages was able to inject an executable file on the server via layout xml. The latest OpenMage Versions up from 19.4.9 and 20.0.5 have this Issue solved\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-21T16:28:13.000000Z"}</description>
      <content:encoded>{"uuid": "e65576b2-5edc-49e5-8ac2-107ca1ed9c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26295", "type": "seen", "source": "https://t.me/cibsecurity/22487", "content": "\u203c CVE-2020-26295 \u203c\n\nOpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrator with permission to import/export data and to edit cms pages was able to inject an executable file on the server via layout xml. The latest OpenMage Versions up from 19.4.9 and 20.0.5 have this Issue solved\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-21T16:28:13.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e65576b2-5edc-49e5-8ac2-107ca1ed9c02/export</guid>
      <pubDate>Thu, 21 Jan 2021 16:28:13 +0000</pubDate>
    </item>
  </channel>
</rss>
