<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 24 Jun 2026 07:14:39 +0000</lastBuildDate>
    <item>
      <title>765230b2-fbf7-4de9-ab51-cbc96d1e660e</title>
      <link>https://vulnerability.circl.lu/sighting/765230b2-fbf7-4de9-ab51-cbc96d1e660e/export</link>
      <description>{"uuid": "765230b2-fbf7-4de9-ab51-cbc96d1e660e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4649", "type": "seen", "source": "https://www.knime.com/security/advisories#CVE-2026-4649", "content": "", "creation_timestamp": "2026-03-25T03:00:10.000000Z"}</description>
      <content:encoded>{"uuid": "765230b2-fbf7-4de9-ab51-cbc96d1e660e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4649", "type": "seen", "source": "https://www.knime.com/security/advisories#CVE-2026-4649", "content": "", "creation_timestamp": "2026-03-25T03:00:10.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/765230b2-fbf7-4de9-ab51-cbc96d1e660e/export</guid>
      <pubDate>Wed, 25 Mar 2026 03:00:10 +0000</pubDate>
    </item>
    <item>
      <title>977f6d2e-d016-4a46-9eb5-1bf5b9f96bb9</title>
      <link>https://vulnerability.circl.lu/sighting/977f6d2e-d016-4a46-9eb5-1bf5b9f96bb9/export</link>
      <description>{"uuid": "977f6d2e-d016-4a46-9eb5-1bf5b9f96bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46496", "type": "published-proof-of-concept", "source": "https://github.com/haxtheweb/issues/security/advisories/GHSA-2m6p-hm3w-6jm3", "content": "", "creation_timestamp": "2026-05-12T20:26:02.000000Z"}</description>
      <content:encoded>{"uuid": "977f6d2e-d016-4a46-9eb5-1bf5b9f96bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46496", "type": "published-proof-of-concept", "source": "https://github.com/haxtheweb/issues/security/advisories/GHSA-2m6p-hm3w-6jm3", "content": "", "creation_timestamp": "2026-05-12T20:26:02.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/977f6d2e-d016-4a46-9eb5-1bf5b9f96bb9/export</guid>
      <pubDate>Tue, 12 May 2026 20:26:02 +0000</pubDate>
    </item>
    <item>
      <title>eaea02f8-11c8-4abc-8ffa-03d052e5b587</title>
      <link>https://vulnerability.circl.lu/sighting/eaea02f8-11c8-4abc-8ffa-03d052e5b587/export</link>
      <description>{"uuid": "eaea02f8-11c8-4abc-8ffa-03d052e5b587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46492", "type": "published-proof-of-concept", "source": "https://github.com/commenthol/md-fileserver/security/advisories/GHSA-32q2-hhr5-6qvv", "content": "", "creation_timestamp": "2026-05-14T19:57:57.000000Z"}</description>
      <content:encoded>{"uuid": "eaea02f8-11c8-4abc-8ffa-03d052e5b587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46492", "type": "published-proof-of-concept", "source": "https://github.com/commenthol/md-fileserver/security/advisories/GHSA-32q2-hhr5-6qvv", "content": "", "creation_timestamp": "2026-05-14T19:57:57.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eaea02f8-11c8-4abc-8ffa-03d052e5b587/export</guid>
      <pubDate>Thu, 14 May 2026 19:57:57 +0000</pubDate>
    </item>
    <item>
      <title>dd393c09-b27a-4947-b5b7-70bf42cea5a4</title>
      <link>https://vulnerability.circl.lu/sighting/dd393c09-b27a-4947-b5b7-70bf42cea5a4/export</link>
      <description>{"uuid": "dd393c09-b27a-4947-b5b7-70bf42cea5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46490", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-34r5-q4jw-r36m", "content": "", "creation_timestamp": "2026-05-21T17:14:07.000000Z"}</description>
      <content:encoded>{"uuid": "dd393c09-b27a-4947-b5b7-70bf42cea5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46490", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-34r5-q4jw-r36m", "content": "", "creation_timestamp": "2026-05-21T17:14:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dd393c09-b27a-4947-b5b7-70bf42cea5a4/export</guid>
      <pubDate>Thu, 21 May 2026 17:14:07 +0000</pubDate>
    </item>
    <item>
      <title>b65b177c-30b6-4b63-acb2-b68b38c192d0</title>
      <link>https://vulnerability.circl.lu/sighting/b65b177c-30b6-4b63-acb2-b68b38c192d0/export</link>
      <description>{"uuid": "b65b177c-30b6-4b63-acb2-b68b38c192d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46493", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkzt7c2xd2p", "content": "\ud83d\udfe0 CVE-2026-46493 - High (7.5)\n\nHAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46493/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T21:00:13.717030Z"}</description>
      <content:encoded>{"uuid": "b65b177c-30b6-4b63-acb2-b68b38c192d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46493", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkzt7c2xd2p", "content": "\ud83d\udfe0 CVE-2026-46493 - High (7.5)\n\nHAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46493/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T21:00:13.717030Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b65b177c-30b6-4b63-acb2-b68b38c192d0/export</guid>
      <pubDate>Fri, 05 Jun 2026 21:00:13 +0000</pubDate>
    </item>
    <item>
      <title>303b6993-97e4-40f0-9235-504ad55653b3</title>
      <link>https://vulnerability.circl.lu/sighting/303b6993-97e4-40f0-9235-504ad55653b3/export</link>
      <description>{"uuid": "303b6993-97e4-40f0-9235-504ad55653b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnl2g2g62w2d", "content": "CVE-2026-46493 - haxtheweb/haxcms-php uses insecure method for generating salt\nCVE ID : CVE-2026-46493\n \n Published : June 5, 2026, 8:17 p.m. | 15\u00a0minutes ago\n \n Description : HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `un...", "creation_timestamp": "2026-06-05T21:10:52.862456Z"}</description>
      <content:encoded>{"uuid": "303b6993-97e4-40f0-9235-504ad55653b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnl2g2g62w2d", "content": "CVE-2026-46493 - haxtheweb/haxcms-php uses insecure method for generating salt\nCVE ID : CVE-2026-46493\n \n Published : June 5, 2026, 8:17 p.m. | 15\u00a0minutes ago\n \n Description : HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `un...", "creation_timestamp": "2026-06-05T21:10:52.862456Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/303b6993-97e4-40f0-9235-504ad55653b3/export</guid>
      <pubDate>Fri, 05 Jun 2026 21:10:52 +0000</pubDate>
    </item>
    <item>
      <title>1b944ac9-4e76-4289-9616-3336cc4438d2</title>
      <link>https://vulnerability.circl.lu/sighting/1b944ac9-4e76-4289-9616-3336cc4438d2/export</link>
      <description>{"uuid": "1b944ac9-4e76-4289-9616-3336cc4438d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46492", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnuowoqpot2g", "content": "CVE-2026-46492 - md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed)\nCVE ID : CVE-2026-46492\n \n Published : June 9, 2026, 4:09 p.m. | 27\u00a0minutes ago\n \n Description : md-fileserver allows for local viewing of markdown files in a browser. Prior to versio...", "creation_timestamp": "2026-06-09T17:11:57.073078Z"}</description>
      <content:encoded>{"uuid": "1b944ac9-4e76-4289-9616-3336cc4438d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46492", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnuowoqpot2g", "content": "CVE-2026-46492 - md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed)\nCVE ID : CVE-2026-46492\n \n Published : June 9, 2026, 4:09 p.m. | 27\u00a0minutes ago\n \n Description : md-fileserver allows for local viewing of markdown files in a browser. Prior to versio...", "creation_timestamp": "2026-06-09T17:11:57.073078Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1b944ac9-4e76-4289-9616-3336cc4438d2/export</guid>
      <pubDate>Tue, 09 Jun 2026 17:11:57 +0000</pubDate>
    </item>
    <item>
      <title>6ab0dbff-156f-41b7-994b-fd7e3f6b1713</title>
      <link>https://vulnerability.circl.lu/sighting/6ab0dbff-156f-41b7-994b-fd7e3f6b1713/export</link>
      <description>{"uuid": "6ab0dbff-156f-41b7-994b-fd7e3f6b1713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvihvh6372u", "content": "CVE-2026-46491 - SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion\nCVE ID : CVE-2026-46491\n \n Published : June 10, 2026, 12:16 a.m. | 20\u00a0minutes ago\n \n Description : SimpleSAMLphp-casserver is ...", "creation_timestamp": "2026-06-10T00:48:56.271496Z"}</description>
      <content:encoded>{"uuid": "6ab0dbff-156f-41b7-994b-fd7e3f6b1713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvihvh6372u", "content": "CVE-2026-46491 - SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion\nCVE ID : CVE-2026-46491\n \n Published : June 10, 2026, 12:16 a.m. | 20\u00a0minutes ago\n \n Description : SimpleSAMLphp-casserver is ...", "creation_timestamp": "2026-06-10T00:48:56.271496Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6ab0dbff-156f-41b7-994b-fd7e3f6b1713/export</guid>
      <pubDate>Wed, 10 Jun 2026 00:48:56 +0000</pubDate>
    </item>
    <item>
      <title>ad7a8010-be0e-4205-933d-1c43b624a626</title>
      <link>https://vulnerability.circl.lu/sighting/ad7a8010-be0e-4205-933d-1c43b624a626/export</link>
      <description>{"uuid": "ad7a8010-be0e-4205-933d-1c43b624a626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46491", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvj6kzs4z2r", "content": "\ud83d\udfe0 CVE-2026-46491 - High (8.6)\n\nSimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46491/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T01:01:39.389713Z"}</description>
      <content:encoded>{"uuid": "ad7a8010-be0e-4205-933d-1c43b624a626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46491", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvj6kzs4z2r", "content": "\ud83d\udfe0 CVE-2026-46491 - High (8.6)\n\nSimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46491/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T01:01:39.389713Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ad7a8010-be0e-4205-933d-1c43b624a626/export</guid>
      <pubDate>Wed, 10 Jun 2026 01:01:39 +0000</pubDate>
    </item>
    <item>
      <title>74acffe2-63ba-4249-a5fd-91e0166883ab</title>
      <link>https://vulnerability.circl.lu/sighting/74acffe2-63ba-4249-a5fd-91e0166883ab/export</link>
      <description>{"uuid": "74acffe2-63ba-4249-a5fd-91e0166883ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46490", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mofr6ky2jf22", "content": "\ud83d\udea8 Luka w samlify (CVE-2026-46490): Eskalacja uprawnie\u0144 w systemach SSO Node.js\n\nWykryto luk\u0119 w popularnej bibliotece `samlify` do obs\u0142ugi SAML. Umo\u017cliwia ona eskalacj\u0119 uprawnie\u0144 przez wstrzykni\u0119cie\n\nhttps://cyberowi.pl/luka-w-samlify-cve-2026-46490-eskalacja-uprawnien-w/\n\n#cyberbezpieczenstwo", "creation_timestamp": "2026-06-16T12:08:10.001083Z"}</description>
      <content:encoded>{"uuid": "74acffe2-63ba-4249-a5fd-91e0166883ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46490", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mofr6ky2jf22", "content": "\ud83d\udea8 Luka w samlify (CVE-2026-46490): Eskalacja uprawnie\u0144 w systemach SSO Node.js\n\nWykryto luk\u0119 w popularnej bibliotece `samlify` do obs\u0142ugi SAML. Umo\u017cliwia ona eskalacj\u0119 uprawnie\u0144 przez wstrzykni\u0119cie\n\nhttps://cyberowi.pl/luka-w-samlify-cve-2026-46490-eskalacja-uprawnien-w/\n\n#cyberbezpieczenstwo", "creation_timestamp": "2026-06-16T12:08:10.001083Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/74acffe2-63ba-4249-a5fd-91e0166883ab/export</guid>
      <pubDate>Tue, 16 Jun 2026 12:08:10 +0000</pubDate>
    </item>
  </channel>
</rss>
