<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 23 Jul 2026 20:38:03 +0000</lastBuildDate>
    <item>
      <title>c591c950-33f8-43c2-a453-54a1b6d155c0</title>
      <link>https://vulnerability.circl.lu/sighting/c591c950-33f8-43c2-a453-54a1b6d155c0/export</link>
      <description>{"uuid": "c591c950-33f8-43c2-a453-54a1b6d155c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrcvdrnuhp2w", "content": "CVE-2026-14890 is an unpatched SGLang vulnerability enabling unauthenticated remote code execution through pickle deserialization. Restrict access now.\n\n#SGLang #CVE202614890 #RCE #Pickle #AI #LLM #CERTCC #Vulnerability", "creation_timestamp": "2026-07-23T12:59:29.065229Z"}</description>
      <content:encoded>{"uuid": "c591c950-33f8-43c2-a453-54a1b6d155c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrcvdrnuhp2w", "content": "CVE-2026-14890 is an unpatched SGLang vulnerability enabling unauthenticated remote code execution through pickle deserialization. Restrict access now.\n\n#SGLang #CVE202614890 #RCE #Pickle #AI #LLM #CERTCC #Vulnerability", "creation_timestamp": "2026-07-23T12:59:29.065229Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c591c950-33f8-43c2-a453-54a1b6d155c0/export</guid>
      <pubDate>Thu, 23 Jul 2026 12:59:29 +0000</pubDate>
    </item>
    <item>
      <title>977d2857-b283-4a32-bb03-ff1215cbd4a4</title>
      <link>https://vulnerability.circl.lu/sighting/977d2857-b283-4a32-bb03-ff1215cbd4a4/export</link>
      <description>{"uuid": "977d2857-b283-4a32-bb03-ff1215cbd4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrvrtd76h2w", "content": "CVE-2026-14890 - sglang\nSGLang's backup feature can be exploited by a malicious actor to run unauthorized code on the system if it's enabled and accessible from the internet. This could lead to unauthorized access or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sglang #CVE #infosec", "creation_timestamp": "2026-07-16T18:52:04.319798Z"}</description>
      <content:encoded>{"uuid": "977d2857-b283-4a32-bb03-ff1215cbd4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrvrtd76h2w", "content": "CVE-2026-14890 - sglang\nSGLang's backup feature can be exploited by a malicious actor to run unauthorized code on the system if it's enabled and accessible from the internet. This could lead to unauthorized access or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sglang #CVE #infosec", "creation_timestamp": "2026-07-16T18:52:04.319798Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/977d2857-b283-4a32-bb03-ff1215cbd4a4/export</guid>
      <pubDate>Thu, 16 Jul 2026 18:52:04 +0000</pubDate>
    </item>
    <item>
      <title>18203dfd-6f50-4953-a27b-163e6ddafc8c</title>
      <link>https://vulnerability.circl.lu/sighting/18203dfd-6f50-4953-a27b-163e6ddafc8c/export</link>
      <description>{"uuid": "18203dfd-6f50-4953-a27b-163e6ddafc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrlcw3ngt2i", "content": "CVE-2026-14890 - CVE-2026-14890\nCVE ID : CVE-2026-14890\n \n Published : July 16, 2026, 2:43 p.m. | 51\u00a0minutes ago\n \n Description : SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authenticat...", "creation_timestamp": "2026-07-16T15:44:46.422208Z"}</description>
      <content:encoded>{"uuid": "18203dfd-6f50-4953-a27b-163e6ddafc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrlcw3ngt2i", "content": "CVE-2026-14890 - CVE-2026-14890\nCVE ID : CVE-2026-14890\n \n Published : July 16, 2026, 2:43 p.m. | 51\u00a0minutes ago\n \n Description : SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authenticat...", "creation_timestamp": "2026-07-16T15:44:46.422208Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/18203dfd-6f50-4953-a27b-163e6ddafc8c/export</guid>
      <pubDate>Thu, 16 Jul 2026 15:44:46 +0000</pubDate>
    </item>
  </channel>
</rss>
