<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 08:02:44 +0000</lastBuildDate>
    <item>
      <title>f66d22e3-f5fd-46bc-bb17-b1e6ef2cfafd</title>
      <link>https://vulnerability.circl.lu/sighting/f66d22e3-f5fd-46bc-bb17-b1e6ef2cfafd/export</link>
      <description>{"uuid": "f66d22e3-f5fd-46bc-bb17-b1e6ef2cfafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvfpazr4xc2l", "content": "Adobe\u306f\u3001ColdFusion\u304a\u3088\u3073Campaign Classic\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\n\u512a\u5148\u5ea61\u306b\u6307\u5b9a\u3055\u308c\u305fColdFusion\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u300115\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u304c\u4fee\u6b63\u3055\u308c\u3066\u304a\u308a\u3001\u305d\u306e\u3046\u30613\u4ef6\u306f\u91cd\u5927\u306a\u6b20\u9665\u3068\u3057\u3066\u30d5\u30e9\u30b0\u4ed8\u3051\u3055\u308c\u3066\u304a\u308a\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u653b\u6483\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u3053\u308c\u3089\u306b\u306f\u3001CVE-2026-48362\uff08CVSS\u30b9\u30b3\u30a210/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001CVE-2026-48273\uff08CVSS\u30b9\u30b3\u30a29.9/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308beval\u30a4\u30f3\u30b8\u30a7\u30af...", "creation_timestamp": "2026-09-13T13:29:33.558546Z"}</description>
      <content:encoded>{"uuid": "f66d22e3-f5fd-46bc-bb17-b1e6ef2cfafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvfpazr4xc2l", "content": "Adobe\u306f\u3001ColdFusion\u304a\u3088\u3073Campaign Classic\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\n\u512a\u5148\u5ea61\u306b\u6307\u5b9a\u3055\u308c\u305fColdFusion\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u300115\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u304c\u4fee\u6b63\u3055\u308c\u3066\u304a\u308a\u3001\u305d\u306e\u3046\u30613\u4ef6\u306f\u91cd\u5927\u306a\u6b20\u9665\u3068\u3057\u3066\u30d5\u30e9\u30b0\u4ed8\u3051\u3055\u308c\u3066\u304a\u308a\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u653b\u6483\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u3053\u308c\u3089\u306b\u306f\u3001CVE-2026-48362\uff08CVSS\u30b9\u30b3\u30a210/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001CVE-2026-48273\uff08CVSS\u30b9\u30b3\u30a29.9/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308beval\u30a4\u30f3\u30b8\u30a7\u30af...", "creation_timestamp": "2026-09-13T13:29:33.558546Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f66d22e3-f5fd-46bc-bb17-b1e6ef2cfafd/export</guid>
      <pubDate>Sun, 13 Sep 2026 13:29:33 +0000</pubDate>
    </item>
    <item>
      <title>67eed910-581b-44a5-83d2-9f5bc08d5440</title>
      <link>https://vulnerability.circl.lu/sighting/67eed910-581b-44a5-83d2-9f5bc08d5440/export</link>
      <description>{"uuid": "67eed910-581b-44a5-83d2-9f5bc08d5440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3hturgru2t", "content": "CVE-2026-48273 - coldfusion 2025\nColdFusion may allow a low\u2011privilege attacker to make the server execute any commands they choose, without needing a victim to click anything. This could give the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-09-09T11:50:04.342481Z"}</description>
      <content:encoded>{"uuid": "67eed910-581b-44a5-83d2-9f5bc08d5440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3hturgru2t", "content": "CVE-2026-48273 - coldfusion 2025\nColdFusion may allow a low\u2011privilege attacker to make the server execute any commands they choose, without needing a victim to click anything. This could give the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-09-09T11:50:04.342481Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/67eed910-581b-44a5-83d2-9f5bc08d5440/export</guid>
      <pubDate>Wed, 09 Sep 2026 11:50:04 +0000</pubDate>
    </item>
    <item>
      <title>83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d</title>
      <link>https://vulnerability.circl.lu/sighting/83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d/export</link>
      <description>{"uuid": "83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv223t264x2j", "content": "\ud83d\udea8 CVE-2026-48273 \u2014 CVSS 9.9 CRITICAL\n\nColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Inj...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48273\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:18.819080Z"}</description>
      <content:encoded>{"uuid": "83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv223t264x2j", "content": "\ud83d\udea8 CVE-2026-48273 \u2014 CVSS 9.9 CRITICAL\n\nColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Inj...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48273\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:18.819080Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d/export</guid>
      <pubDate>Tue, 08 Sep 2026 22:11:18 +0000</pubDate>
    </item>
    <item>
      <title>a78beb4c-ff52-4702-a9cf-8914971e0d96</title>
      <link>https://vulnerability.circl.lu/sighting/a78beb4c-ff52-4702-a9cf-8914971e0d96/export</link>
      <description>{"uuid": "a78beb4c-ff52-4702-a9cf-8914971e0d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.414544Z"}</description>
      <content:encoded>{"uuid": "a78beb4c-ff52-4702-a9cf-8914971e0d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.414544Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a78beb4c-ff52-4702-a9cf-8914971e0d96/export</guid>
      <pubDate>Sun, 30 Aug 2026 00:00:38 +0000</pubDate>
    </item>
    <item>
      <title>167f8a2e-f756-4298-a737-c745a0a1ec48</title>
      <link>https://vulnerability.circl.lu/sighting/167f8a2e-f756-4298-a737-c745a0a1ec48/export</link>
      <description>{"uuid": "167f8a2e-f756-4298-a737-c745a0a1ec48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.656226Z"}</description>
      <content:encoded>{"uuid": "167f8a2e-f756-4298-a737-c745a0a1ec48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.656226Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/167f8a2e-f756-4298-a737-c745a0a1ec48/export</guid>
      <pubDate>Sat, 29 Aug 2026 20:00:05 +0000</pubDate>
    </item>
  </channel>
</rss>
