<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 05 Aug 2026 21:40:49 +0000</lastBuildDate>
    <item>
      <title>ae3969aa-ecaf-4f1e-833d-b5ea75633669</title>
      <link>https://vulnerability.circl.lu/sighting/ae3969aa-ecaf-4f1e-833d-b5ea75633669/export</link>
      <description>{"uuid": "ae3969aa-ecaf-4f1e-833d-b5ea75633669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14175", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msb4uqjmwb2b", "content": "CVE-2026-14175 - humanist digital human resources\nBilin Software's HUMANIST Digital Human Resources allows attackers to upload any type of file to a web server, which could lead to unauthorized access or system compromise.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T13:34:05.751636Z"}</description>
      <content:encoded>{"uuid": "ae3969aa-ecaf-4f1e-833d-b5ea75633669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14175", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msb4uqjmwb2b", "content": "CVE-2026-14175 - humanist digital human resources\nBilin Software's HUMANIST Digital Human Resources allows attackers to upload any type of file to a web server, which could lead to unauthorized access or system compromise.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T13:34:05.751636Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ae3969aa-ecaf-4f1e-833d-b5ea75633669/export</guid>
      <pubDate>Tue, 04 Aug 2026 13:34:05 +0000</pubDate>
    </item>
    <item>
      <title>c934ef04-af60-4b4f-9612-85c0c0ca7b0f</title>
      <link>https://vulnerability.circl.lu/sighting/c934ef04-af60-4b4f-9612-85c0c0ca7b0f/export</link>
      <description>{"uuid": "c934ef04-af60-4b4f-9612-85c0c0ca7b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14175", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msb2zg4nhi2l", "content": "\ud83d\udd34 CVE-2026-14175 - Critical (9.8)\n\nUnrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics C...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-14175/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T13:00:55.636333Z"}</description>
      <content:encoded>{"uuid": "c934ef04-af60-4b4f-9612-85c0c0ca7b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14175", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msb2zg4nhi2l", "content": "\ud83d\udd34 CVE-2026-14175 - Critical (9.8)\n\nUnrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics C...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-14175/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T13:00:55.636333Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c934ef04-af60-4b4f-9612-85c0c0ca7b0f/export</guid>
      <pubDate>Tue, 04 Aug 2026 13:00:55 +0000</pubDate>
    </item>
    <item>
      <title>dca1a6ce-947d-483b-91fe-a494c1577a5a</title>
      <link>https://vulnerability.circl.lu/sighting/dca1a6ce-947d-483b-91fe-a494c1577a5a/export</link>
      <description>{"uuid": "dca1a6ce-947d-483b-91fe-a494c1577a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14175", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msaxnewmbc2b", "content": "Unrestricted file upload in HUMANIST Digital HR v26.0 (CVE-2026-14175, CRITICAL) allows attackers to upload web shells. Limit exposure, monitor uploads, and check for vendor updates. https://radar.offseq.com/threat/cve-2026-14175-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-bilin-so...", "creation_timestamp": "2026-08-04T12:00:33.350689Z"}</description>
      <content:encoded>{"uuid": "dca1a6ce-947d-483b-91fe-a494c1577a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14175", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msaxnewmbc2b", "content": "Unrestricted file upload in HUMANIST Digital HR v26.0 (CVE-2026-14175, CRITICAL) allows attackers to upload web shells. Limit exposure, monitor uploads, and check for vendor updates. https://radar.offseq.com/threat/cve-2026-14175-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-bilin-so...", "creation_timestamp": "2026-08-04T12:00:33.350689Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dca1a6ce-947d-483b-91fe-a494c1577a5a/export</guid>
      <pubDate>Tue, 04 Aug 2026 12:00:33 +0000</pubDate>
    </item>
    <item>
      <title>0d791cec-d4d9-4215-baae-3d5235b0767b</title>
      <link>https://vulnerability.circl.lu/sighting/0d791cec-d4d9-4215-baae-3d5235b0767b/export</link>
      <description>{"uuid": "0d791cec-d4d9-4215-baae-3d5235b0767b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14175", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117037126652875871", "content": "CVE-2026-14175 (CRITICAL, CVSS 9.8): HUMANIST Digital HR v26.0 has an unrestricted file upload flaw \u2014 attackers can deploy web shells for full compromise. No patch yet. Restrict uploads, monitor, and apply network controls. https://radar.offseq.com/threat/cve-2026-14175-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-bilin-software-and-caf423644ef42f8e #OffSeq #Vuln #AppSec", "creation_timestamp": "2026-08-04T12:00:28.793626Z"}</description>
      <content:encoded>{"uuid": "0d791cec-d4d9-4215-baae-3d5235b0767b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14175", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117037126652875871", "content": "CVE-2026-14175 (CRITICAL, CVSS 9.8): HUMANIST Digital HR v26.0 has an unrestricted file upload flaw \u2014 attackers can deploy web shells for full compromise. No patch yet. Restrict uploads, monitor, and apply network controls. https://radar.offseq.com/threat/cve-2026-14175-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-bilin-software-and-caf423644ef42f8e #OffSeq #Vuln #AppSec", "creation_timestamp": "2026-08-04T12:00:28.793626Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0d791cec-d4d9-4215-baae-3d5235b0767b/export</guid>
      <pubDate>Tue, 04 Aug 2026 12:00:28 +0000</pubDate>
    </item>
    <item>
      <title>11a79cd3-d395-4456-ae8e-3a98bb72de32</title>
      <link>https://vulnerability.circl.lu/sighting/11a79cd3-d395-4456-ae8e-3a98bb72de32/export</link>
      <description>{"uuid": "11a79cd3-d395-4456-ae8e-3a98bb72de32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14175", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msaw6ovmnq2g", "content": "HUMANIST Digital Human Resources\u3067\u3001\u5371\u967a\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306e\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306fWeb\u30b7\u30a7\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u53ef\u80fd\u3002\nCVE-2026-14175 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-04T11:34:23.825593Z"}</description>
      <content:encoded>{"uuid": "11a79cd3-d395-4456-ae8e-3a98bb72de32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14175", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msaw6ovmnq2g", "content": "HUMANIST Digital Human Resources\u3067\u3001\u5371\u967a\u306a\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306e\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306fWeb\u30b7\u30a7\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u53ef\u80fd\u3002\nCVE-2026-14175 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-04T11:34:23.825593Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/11a79cd3-d395-4456-ae8e-3a98bb72de32/export</guid>
      <pubDate>Tue, 04 Aug 2026 11:34:23 +0000</pubDate>
    </item>
    <item>
      <title>1a444559-5f8d-458e-b3dc-d57138eda78d</title>
      <link>https://vulnerability.circl.lu/sighting/1a444559-5f8d-458e-b3dc-d57138eda78d/export</link>
      <description>{"uuid": "1a444559-5f8d-458e-b3dc-d57138eda78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14175", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hwcppjvzoiqpe", "content": "CVE-2026-14175 - Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources\nCVE ID : CVE-2026-14175\n \n Published : Aug. 4, 2026, 8:23 a.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : Unrestricted upload of file with dangerous type vulnerability in Bilin Softwa...", "creation_timestamp": "2026-08-04T10:18:24.593557Z"}</description>
      <content:encoded>{"uuid": "1a444559-5f8d-458e-b3dc-d57138eda78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14175", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hwcppjvzoiqpe", "content": "CVE-2026-14175 - Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources\nCVE ID : CVE-2026-14175\n \n Published : Aug. 4, 2026, 8:23 a.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : Unrestricted upload of file with dangerous type vulnerability in Bilin Softwa...", "creation_timestamp": "2026-08-04T10:18:24.593557Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1a444559-5f8d-458e-b3dc-d57138eda78d/export</guid>
      <pubDate>Tue, 04 Aug 2026 10:18:24 +0000</pubDate>
    </item>
  </channel>
</rss>
