<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 13:34:36 +0000</lastBuildDate>
    <item>
      <title>35fb2d23-5c4e-418d-9457-ccb753addd83</title>
      <link>https://vulnerability.circl.lu/sighting/35fb2d23-5c4e-418d-9457-ccb753addd83/export</link>
      <description>{"uuid": "35fb2d23-5c4e-418d-9457-ccb753addd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwbgiztmbx2u", "content": "\ud83d\udea8 CVE-2026-19072 \u2014 CVSS 9.9 CRITICAL\n\nVelociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifac...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19072\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T14:07:16.971885Z"}</description>
      <content:encoded>{"uuid": "35fb2d23-5c4e-418d-9457-ccb753addd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwbgiztmbx2u", "content": "\ud83d\udea8 CVE-2026-19072 \u2014 CVSS 9.9 CRITICAL\n\nVelociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifac...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19072\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T14:07:16.971885Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/35fb2d23-5c4e-418d-9457-ccb753addd83/export</guid>
      <pubDate>Thu, 24 Sep 2026 14:07:16 +0000</pubDate>
    </item>
    <item>
      <title>73f0192b-ce44-4057-b1cc-32c0d361b71c</title>
      <link>https://vulnerability.circl.lu/sighting/73f0192b-ce44-4057-b1cc-32c0d361b71c/export</link>
      <description>{"uuid": "73f0192b-ce44-4057-b1cc-32c0d361b71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbeyf3spn25", "content": "CVE-2026-19072 - velociraptor\nIn Velociraptor, a user with the investigator role can change an internal setting that lets them run any query on the server, bypassing normal permission checks. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#velociraptor #rapid7 #CVE #infosec", "creation_timestamp": "2026-09-24T13:40:04.690518Z"}</description>
      <content:encoded>{"uuid": "73f0192b-ce44-4057-b1cc-32c0d361b71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbeyf3spn25", "content": "CVE-2026-19072 - velociraptor\nIn Velociraptor, a user with the investigator role can change an internal setting that lets them run any query on the server, bypassing normal permission checks. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#velociraptor #rapid7 #CVE #infosec", "creation_timestamp": "2026-09-24T13:40:04.690518Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/73f0192b-ce44-4057-b1cc-32c0d361b71c/export</guid>
      <pubDate>Thu, 24 Sep 2026 13:40:04 +0000</pubDate>
    </item>
    <item>
      <title>b6cdf379-0360-40d8-baf7-36ebbae7e098</title>
      <link>https://vulnerability.circl.lu/sighting/b6cdf379-0360-40d8-baf7-36ebbae7e098/export</link>
      <description>{"uuid": "b6cdf379-0360-40d8-baf7-36ebbae7e098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbep2jegn2k", "content": "\ud83d\udd34 CVE-2026-19072 - Critical (9.9)\n\nVelociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19072/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T13:34:52.910693Z"}</description>
      <content:encoded>{"uuid": "b6cdf379-0360-40d8-baf7-36ebbae7e098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19072", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbep2jegn2k", "content": "\ud83d\udd34 CVE-2026-19072 - Critical (9.9)\n\nVelociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19072/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T13:34:52.910693Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b6cdf379-0360-40d8-baf7-36ebbae7e098/export</guid>
      <pubDate>Thu, 24 Sep 2026 13:34:52 +0000</pubDate>
    </item>
    <item>
      <title>1b6b07b0-57f9-4587-af83-35133c9dd37c</title>
      <link>https://vulnerability.circl.lu/sighting/1b6b07b0-57f9-4587-af83-35133c9dd37c/export</link>
      <description>{"uuid": "1b6b07b0-57f9-4587-af83-35133c9dd37c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19072", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwbeh73ktv2b", "content": "CRITICAL: Rapid7 Velociraptor &amp;lt;0.77.2 has a privilege escalation flaw (CVE-2026-19072, CVSS 9.9). 'Investigator' users can gain admin by injecting VQL. Upgrade to 0.77.2+ ASAP. https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velocira...", "creation_timestamp": "2026-09-24T13:30:28.660662Z"}</description>
      <content:encoded>{"uuid": "1b6b07b0-57f9-4587-af83-35133c9dd37c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19072", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwbeh73ktv2b", "content": "CRITICAL: Rapid7 Velociraptor &amp;lt;0.77.2 has a privilege escalation flaw (CVE-2026-19072, CVSS 9.9). 'Investigator' users can gain admin by injecting VQL. Upgrade to 0.77.2+ ASAP. https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velocira...", "creation_timestamp": "2026-09-24T13:30:28.660662Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1b6b07b0-57f9-4587-af83-35133c9dd37c/export</guid>
      <pubDate>Thu, 24 Sep 2026 13:30:28 +0000</pubDate>
    </item>
    <item>
      <title>ff887304-78b0-413d-b932-09aceae9270b</title>
      <link>https://vulnerability.circl.lu/sighting/ff887304-78b0-413d-b932-09aceae9270b/export</link>
      <description>{"uuid": "ff887304-78b0-413d-b932-09aceae9270b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19072", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117326258214428675", "content": "CVE-2026-19072 (CRITICAL, CVSS 9.9) impacts Rapid7 Velociraptor &amp;lt;0.77.2. 'Investigator' role can escalate to admin by injecting arbitrary VQL via API. Patch by upgrading to 0.77.2+. Details: https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velociraptor-1faa73dd4a3adad9 #OffSeq #Velociraptor #CVE #Infosec", "creation_timestamp": "2026-09-24T13:30:26.543361Z"}</description>
      <content:encoded>{"uuid": "ff887304-78b0-413d-b932-09aceae9270b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19072", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117326258214428675", "content": "CVE-2026-19072 (CRITICAL, CVSS 9.9) impacts Rapid7 Velociraptor &amp;lt;0.77.2. 'Investigator' role can escalate to admin by injecting arbitrary VQL via API. Patch by upgrading to 0.77.2+. Details: https://radar.offseq.com/threat/cve-2026-19072-cwe-1269-product-released-in-non-release-configuration-in-rapid7-velociraptor-1faa73dd4a3adad9 #OffSeq #Velociraptor #CVE #Infosec", "creation_timestamp": "2026-09-24T13:30:26.543361Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ff887304-78b0-413d-b932-09aceae9270b/export</guid>
      <pubDate>Thu, 24 Sep 2026 13:30:26 +0000</pubDate>
    </item>
  </channel>
</rss>
