<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 06 Oct 2026 17:52:22 +0000</lastBuildDate>
    <item>
      <title>6a44bb83-c83f-4dc7-895e-e4f055b30346</title>
      <link>https://vulnerability.circl.lu/sighting/6a44bb83-c83f-4dc7-895e-e4f055b30346/export</link>
      <description>{"uuid": "6a44bb83-c83f-4dc7-895e-e4f055b30346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "published-proof-of-concept", "source": "Telegram/O7QylDWIptZONXEuPsqIMfiYsCbRi0BZoyF_J21d4yXsw7o", "content": "", "creation_timestamp": "2026-10-06T09:00:04.000000Z"}</description>
      <content:encoded>{"uuid": "6a44bb83-c83f-4dc7-895e-e4f055b30346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "published-proof-of-concept", "source": "Telegram/O7QylDWIptZONXEuPsqIMfiYsCbRi0BZoyF_J21d4yXsw7o", "content": "", "creation_timestamp": "2026-10-06T09:00:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6a44bb83-c83f-4dc7-895e-e4f055b30346/export</guid>
      <pubDate>Tue, 06 Oct 2026 09:00:04 +0000</pubDate>
    </item>
    <item>
      <title>5853a57f-4eb9-43db-846a-e1250d32e5e4</title>
      <link>https://vulnerability.circl.lu/sighting/5853a57f-4eb9-43db-846a-e1250d32e5e4/export</link>
      <description>{"uuid": "5853a57f-4eb9-43db-846a-e1250d32e5e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "seen", "source": "Telegram/O7QylDWIptZONXEuPsqIMfiYsCbRi0BZoyF_J21d4yXsw7o", "content": "", "creation_timestamp": "2026-10-06T09:00:04.000000Z"}</description>
      <content:encoded>{"uuid": "5853a57f-4eb9-43db-846a-e1250d32e5e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "seen", "source": "Telegram/O7QylDWIptZONXEuPsqIMfiYsCbRi0BZoyF_J21d4yXsw7o", "content": "", "creation_timestamp": "2026-10-06T09:00:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5853a57f-4eb9-43db-846a-e1250d32e5e4/export</guid>
      <pubDate>Tue, 06 Oct 2026 09:00:04 +0000</pubDate>
    </item>
    <item>
      <title>be5e5bde-4493-4d8f-8243-1de1f80d438f</title>
      <link>https://vulnerability.circl.lu/sighting/be5e5bde-4493-4d8f-8243-1de1f80d438f/export</link>
      <description>{"uuid": "be5e5bde-4493-4d8f-8243-1de1f80d438f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "published-proof-of-concept", "source": "Telegram/7x3P5T--NflQEsWSvG6uL2FcSk64zEA_ybgHP6Fl6W75d5A", "content": "", "creation_timestamp": "2026-10-06T07:00:14.000000Z"}</description>
      <content:encoded>{"uuid": "be5e5bde-4493-4d8f-8243-1de1f80d438f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "published-proof-of-concept", "source": "Telegram/7x3P5T--NflQEsWSvG6uL2FcSk64zEA_ybgHP6Fl6W75d5A", "content": "", "creation_timestamp": "2026-10-06T07:00:14.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/be5e5bde-4493-4d8f-8243-1de1f80d438f/export</guid>
      <pubDate>Tue, 06 Oct 2026 07:00:14 +0000</pubDate>
    </item>
    <item>
      <title>2626e594-0b0b-4813-9120-d585d70d399e</title>
      <link>https://vulnerability.circl.lu/sighting/2626e594-0b0b-4813-9120-d585d70d399e/export</link>
      <description>{"uuid": "2626e594-0b0b-4813-9120-d585d70d399e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "seen", "source": "Telegram/7x3P5T--NflQEsWSvG6uL2FcSk64zEA_ybgHP6Fl6W75d5A", "content": "", "creation_timestamp": "2026-10-06T07:00:14.000000Z"}</description>
      <content:encoded>{"uuid": "2626e594-0b0b-4813-9120-d585d70d399e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105221", "type": "seen", "source": "Telegram/7x3P5T--NflQEsWSvG6uL2FcSk64zEA_ybgHP6Fl6W75d5A", "content": "", "creation_timestamp": "2026-10-06T07:00:14.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2626e594-0b0b-4813-9120-d585d70d399e/export</guid>
      <pubDate>Tue, 06 Oct 2026 07:00:14 +0000</pubDate>
    </item>
    <item>
      <title>8b1c052b-a1ff-4481-901a-195eb0df52ab</title>
      <link>https://vulnerability.circl.lu/sighting/8b1c052b-a1ff-4481-901a-195eb0df52ab/export</link>
      <description>{"uuid": "8b1c052b-a1ff-4481-901a-195eb0df52ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105221", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx3weseoya2m", "content": "CVE-2026-105221: gist RubyGem &amp;lt;6.1.0 has a CRITICAL SSL validation flaw. Attackers can steal GitHub credentials via intercepted API traffic. Upgrade to 6.1.0+ ASAP. https://radar.offseq.com/threat/cve-2026-105221-improper-certificate-validation-in-defunkt-gist-a4b1b7125f9195f8 #OffSeq #CVE2026105...", "creation_timestamp": "2026-10-05T03:00:29.049686Z"}</description>
      <content:encoded>{"uuid": "8b1c052b-a1ff-4481-901a-195eb0df52ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105221", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx3weseoya2m", "content": "CVE-2026-105221: gist RubyGem &amp;lt;6.1.0 has a CRITICAL SSL validation flaw. Attackers can steal GitHub credentials via intercepted API traffic. Upgrade to 6.1.0+ ASAP. https://radar.offseq.com/threat/cve-2026-105221-improper-certificate-validation-in-defunkt-gist-a4b1b7125f9195f8 #OffSeq #CVE2026105...", "creation_timestamp": "2026-10-05T03:00:29.049686Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8b1c052b-a1ff-4481-901a-195eb0df52ab/export</guid>
      <pubDate>Mon, 05 Oct 2026 03:00:29 +0000</pubDate>
    </item>
    <item>
      <title>5888586a-0daa-4ef0-82dc-07f8ef98792f</title>
      <link>https://vulnerability.circl.lu/sighting/5888586a-0daa-4ef0-82dc-07f8ef98792f/export</link>
      <description>{"uuid": "5888586a-0daa-4ef0-82dc-07f8ef98792f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105221", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386066373169204", "content": "CRITICAL: gist RubyGem versions 4.0.0 \u2013 &amp;lt;6.1.0 vulnerable to improper cert validation (CVE-2026-105221). SSL verification is disabled, exposing GitHub creds to on-path attackers. Patch to 6.1.0+ now! https://radar.offseq.com/threat/cve-2026-105221-improper-certificate-validation-in-defunkt-gist-a4b1b7125f9195f8 #OffSeq #CVE2026105221 #RubyGems #infosec", "creation_timestamp": "2026-10-05T03:00:26.403560Z"}</description>
      <content:encoded>{"uuid": "5888586a-0daa-4ef0-82dc-07f8ef98792f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105221", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117386066373169204", "content": "CRITICAL: gist RubyGem versions 4.0.0 \u2013 &amp;lt;6.1.0 vulnerable to improper cert validation (CVE-2026-105221). SSL verification is disabled, exposing GitHub creds to on-path attackers. Patch to 6.1.0+ now! https://radar.offseq.com/threat/cve-2026-105221-improper-certificate-validation-in-defunkt-gist-a4b1b7125f9195f8 #OffSeq #CVE2026105221 #RubyGems #infosec", "creation_timestamp": "2026-10-05T03:00:26.403560Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5888586a-0daa-4ef0-82dc-07f8ef98792f/export</guid>
      <pubDate>Mon, 05 Oct 2026 03:00:26 +0000</pubDate>
    </item>
    <item>
      <title>65f1a0b2-6174-4789-9c4b-26c2eba2cff8</title>
      <link>https://vulnerability.circl.lu/sighting/65f1a0b2-6174-4789-9c4b-26c2eba2cff8/export</link>
      <description>{"uuid": "65f1a0b2-6174-4789-9c4b-26c2eba2cff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105223", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tfm7su62l", "content": "\ud83d\udea8 CVE-2026-105223 \u2014 CVSS 9.1 CRITICAL\n\nmaclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105223\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:13.754098Z"}</description>
      <content:encoded>{"uuid": "65f1a0b2-6174-4789-9c4b-26c2eba2cff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105223", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tfm7su62l", "content": "\ud83d\udea8 CVE-2026-105223 \u2014 CVSS 9.1 CRITICAL\n\nmaclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105223\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:13.754098Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/65f1a0b2-6174-4789-9c4b-26c2eba2cff8/export</guid>
      <pubDate>Mon, 05 Oct 2026 02:07:13 +0000</pubDate>
    </item>
    <item>
      <title>09632ca1-3f28-4c97-9a0e-6afd769fd128</title>
      <link>https://vulnerability.circl.lu/sighting/09632ca1-3f28-4c97-9a0e-6afd769fd128/export</link>
      <description>{"uuid": "09632ca1-3f28-4c97-9a0e-6afd769fd128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105223", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx3rdsgai32w", "content": "maclof kubernetes-client v0.17.0 \u2013 0.31.x hit by CRITICAL vuln: TLS cert checks bypassed, enabling API server impersonation &amp;amp; token theft. Avoid affected versions or enforce proper certs until patch lands. https://radar.offseq.com/threat/cve-2026-105223-improper-certificate-validation-in-maclof-k...", "creation_timestamp": "2026-10-05T01:30:26.596652Z"}</description>
      <content:encoded>{"uuid": "09632ca1-3f28-4c97-9a0e-6afd769fd128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105223", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx3rdsgai32w", "content": "maclof kubernetes-client v0.17.0 \u2013 0.31.x hit by CRITICAL vuln: TLS cert checks bypassed, enabling API server impersonation &amp;amp; token theft. Avoid affected versions or enforce proper certs until patch lands. https://radar.offseq.com/threat/cve-2026-105223-improper-certificate-validation-in-maclof-k...", "creation_timestamp": "2026-10-05T01:30:26.596652Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/09632ca1-3f28-4c97-9a0e-6afd769fd128/export</guid>
      <pubDate>Mon, 05 Oct 2026 01:30:26 +0000</pubDate>
    </item>
    <item>
      <title>3df78593-280e-4957-8f66-e38c8ed9e3e6</title>
      <link>https://vulnerability.circl.lu/sighting/3df78593-280e-4957-8f66-e38c8ed9e3e6/export</link>
      <description>{"uuid": "3df78593-280e-4957-8f66-e38c8ed9e3e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105223", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117385712345555544", "content": "CVE-2026-105223 (CRITICAL, CVSS 9.1): maclof kubernetes-client v0.17.0 \u2013 0.31.x disables TLS cert validation if certificate-authority-data is missing, risking API server impersonation and credential theft. Check configs &amp;amp; vendor advisories. https://radar.offseq.com/threat/cve-2026-105223-improper-certificate-validation-in-maclof-kubernetes-client-8fb4f3aba9271610 #OffSeq #kubernetes #security", "creation_timestamp": "2026-10-05T01:30:24.357081Z"}</description>
      <content:encoded>{"uuid": "3df78593-280e-4957-8f66-e38c8ed9e3e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105223", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117385712345555544", "content": "CVE-2026-105223 (CRITICAL, CVSS 9.1): maclof kubernetes-client v0.17.0 \u2013 0.31.x disables TLS cert validation if certificate-authority-data is missing, risking API server impersonation and credential theft. Check configs &amp;amp; vendor advisories. https://radar.offseq.com/threat/cve-2026-105223-improper-certificate-validation-in-maclof-kubernetes-client-8fb4f3aba9271610 #OffSeq #kubernetes #security", "creation_timestamp": "2026-10-05T01:30:24.357081Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3df78593-280e-4957-8f66-e38c8ed9e3e6/export</guid>
      <pubDate>Mon, 05 Oct 2026 01:30:24 +0000</pubDate>
    </item>
    <item>
      <title>aef1311b-cf10-4139-8926-3f2c173118a3</title>
      <link>https://vulnerability.circl.lu/sighting/aef1311b-cf10-4139-8926-3f2c173118a3/export</link>
      <description>{"uuid": "aef1311b-cf10-4139-8926-3f2c173118a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105222", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3mpc33tz2z", "content": "\ud83d\udea8 CVE-2026-105222 \u2014 CVSS 9.1 CRITICAL\n\nThe alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by defaul...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105222\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T00:07:22.574023Z"}</description>
      <content:encoded>{"uuid": "aef1311b-cf10-4139-8926-3f2c173118a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105222", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3mpc33tz2z", "content": "\ud83d\udea8 CVE-2026-105222 \u2014 CVSS 9.1 CRITICAL\n\nThe alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by defaul...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105222\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T00:07:22.574023Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aef1311b-cf10-4139-8926-3f2c173118a3/export</guid>
      <pubDate>Mon, 05 Oct 2026 00:07:22 +0000</pubDate>
    </item>
  </channel>
</rss>
