<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 05 Aug 2026 10:38:45 +0000</lastBuildDate>
    <item>
      <title>9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9</title>
      <link>https://vulnerability.circl.lu/sighting/9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9/export</link>
      <description>{"uuid": "9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d6lw44fkpwikn", "content": "CVE-2026-18685 - GL.iNet GL-MT3000 modem.so glc set_upgrade command injection\nCVE ID : CVE-2026-18685\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the ...", "creation_timestamp": "2026-08-04T01:55:20.759165Z"}</description>
      <content:encoded>{"uuid": "9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d6lw44fkpwikn", "content": "CVE-2026-18685 - GL.iNet GL-MT3000 modem.so glc set_upgrade command injection\nCVE ID : CVE-2026-18685\n \n Published : Aug. 4, 2026, 12:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the ...", "creation_timestamp": "2026-08-04T01:55:20.759165Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9b7b7bbc-9c84-44d7-a8b1-dfcef21101c9/export</guid>
      <pubDate>Tue, 04 Aug 2026 01:55:20 +0000</pubDate>
    </item>
    <item>
      <title>bcc30692-a3eb-4e03-a514-c51959175014</title>
      <link>https://vulnerability.circl.lu/sighting/bcc30692-a3eb-4e03-a514-c51959175014/export</link>
      <description>{"uuid": "bcc30692-a3eb-4e03-a514-c51959175014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18685", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7pg6a5dr2g", "content": "GL.iNet GL-MT3000 (v4.4.0 \u2013 4.4.5) hit by CRITICAL command injection (CVE-2026-18685). Remote code execution possible \u2014 no patch yet. Restrict access &amp;amp; monitor devices. https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #IoTSecurity #Vuln...", "creation_timestamp": "2026-08-04T00:00:39.884919Z"}</description>
      <content:encoded>{"uuid": "bcc30692-a3eb-4e03-a514-c51959175014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18685", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms7pg6a5dr2g", "content": "GL.iNet GL-MT3000 (v4.4.0 \u2013 4.4.5) hit by CRITICAL command injection (CVE-2026-18685). Remote code execution possible \u2014 no patch yet. Restrict access &amp;amp; monitor devices. https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #IoTSecurity #Vuln...", "creation_timestamp": "2026-08-04T00:00:39.884919Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bcc30692-a3eb-4e03-a514-c51959175014/export</guid>
      <pubDate>Tue, 04 Aug 2026 00:00:39 +0000</pubDate>
    </item>
    <item>
      <title>7a72757c-a25d-4a39-9d4b-4d509546fef1</title>
      <link>https://vulnerability.circl.lu/sighting/7a72757c-a25d-4a39-9d4b-4d509546fef1/export</link>
      <description>{"uuid": "7a72757c-a25d-4a39-9d4b-4d509546fef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18685", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117034296046822265", "content": "CVE-2026-18685: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated RCE possible. No patch yet \u2014 restrict access &amp;amp; monitor for abuse. Details: https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #vuln #IoT #infosec", "creation_timestamp": "2026-08-04T00:00:37.565864Z"}</description>
      <content:encoded>{"uuid": "7a72757c-a25d-4a39-9d4b-4d509546fef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18685", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117034296046822265", "content": "CVE-2026-18685: CRITICAL command injection in GL.iNet GL-MT3000 (4.4.0 \u2013 4.4.5). Remote, unauthenticated RCE possible. No patch yet \u2014 restrict access &amp;amp; monitor for abuse. Details: https://radar.offseq.com/threat/cve-2026-18685-command-injection-in-glinet-gl-mt3000-32060ee21fb81c76 #OffSeq #vuln #IoT #infosec", "creation_timestamp": "2026-08-04T00:00:37.565864Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7a72757c-a25d-4a39-9d4b-4d509546fef1/export</guid>
      <pubDate>Tue, 04 Aug 2026 00:00:37 +0000</pubDate>
    </item>
    <item>
      <title>cee15acd-45a2-4f52-b333-864843c8abb1</title>
      <link>https://vulnerability.circl.lu/sighting/cee15acd-45a2-4f52-b333-864843c8abb1/export</link>
      <description>{"uuid": "cee15acd-45a2-4f52-b333-864843c8abb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18685", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7p5zk45z2f", "content": "CVE-2026-18685 - gl-mt3000\nThe GL.iNet GL-MT3000 modem has a vulnerability that allows attackers to execute unauthorized commands when upgrading the modem's software. This can be done remotely, which means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#glmt3000 #glinet #CVE #infosec", "creation_timestamp": "2026-08-03T23:56:05.271621Z"}</description>
      <content:encoded>{"uuid": "cee15acd-45a2-4f52-b333-864843c8abb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18685", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7p5zk45z2f", "content": "CVE-2026-18685 - gl-mt3000\nThe GL.iNet GL-MT3000 modem has a vulnerability that allows attackers to execute unauthorized commands when upgrading the modem's software. This can be done remotely, which means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#glmt3000 #glinet #CVE #infosec", "creation_timestamp": "2026-08-03T23:56:05.271621Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cee15acd-45a2-4f52-b333-864843c8abb1/export</guid>
      <pubDate>Mon, 03 Aug 2026 23:56:05 +0000</pubDate>
    </item>
  </channel>
</rss>
