<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 21 Jun 2026 17:11:52 +0000</lastBuildDate>
    <item>
      <title>189ec6cc-79c2-4978-86f0-7cf787689804</title>
      <link>https://vulnerability.circl.lu/sighting/189ec6cc-79c2-4978-86f0-7cf787689804/export</link>
      <description>{"uuid": "189ec6cc-79c2-4978-86f0-7cf787689804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50108", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmpx4uza2v", "content": "~Cisa~\nMultiple critical flaws in Naxclow IoT Platform allow device takeover, credential harvesting, and communication interception.\n-\nIOCs: CVE-2026-42947, CVE-2026-50108, CVE-2026-28742\n-\n#CVE202642947 #IoT #ThreatIntel", "creation_timestamp": "2026-06-11T16:15:40.987075Z"}</description>
      <content:encoded>{"uuid": "189ec6cc-79c2-4978-86f0-7cf787689804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50108", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmpx4uza2v", "content": "~Cisa~\nMultiple critical flaws in Naxclow IoT Platform allow device takeover, credential harvesting, and communication interception.\n-\nIOCs: CVE-2026-42947, CVE-2026-50108, CVE-2026-28742\n-\n#CVE202642947 #IoT #ThreatIntel", "creation_timestamp": "2026-06-11T16:15:40.987075Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/189ec6cc-79c2-4978-86f0-7cf787689804/export</guid>
      <pubDate>Thu, 11 Jun 2026 16:15:40 +0000</pubDate>
    </item>
    <item>
      <title>b8fda019-133d-4bc5-b529-ed7e06937e88</title>
      <link>https://vulnerability.circl.lu/sighting/b8fda019-133d-4bc5-b529-ed7e06937e88/export</link>
      <description>{"uuid": "b8fda019-133d-4bc5-b529-ed7e06937e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50101", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116741270655954829", "content": "\u26a0\ufe0f CVE-2026-50101 (CRITICAL): Naxclow Smart Doorbell X3 uses static relay credentials, allowing attackers who gain access to maintain persistent control, even after resets. No patch yet. Limit network exposure &amp;amp; monitor advisories. https://radar.offseq.com/threat/cve-2026-50101-cwe-262-not-using-password-aging-in-f27f494a #OffSeq #IoTSecurity #CVE202650101", "creation_timestamp": "2026-06-13T06:00:25.355153Z"}</description>
      <content:encoded>{"uuid": "b8fda019-133d-4bc5-b529-ed7e06937e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50101", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116741270655954829", "content": "\u26a0\ufe0f CVE-2026-50101 (CRITICAL): Naxclow Smart Doorbell X3 uses static relay credentials, allowing attackers who gain access to maintain persistent control, even after resets. No patch yet. Limit network exposure &amp;amp; monitor advisories. https://radar.offseq.com/threat/cve-2026-50101-cwe-262-not-using-password-aging-in-f27f494a #OffSeq #IoTSecurity #CVE202650101", "creation_timestamp": "2026-06-13T06:00:25.355153Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b8fda019-133d-4bc5-b529-ed7e06937e88/export</guid>
      <pubDate>Sat, 13 Jun 2026 06:00:25 +0000</pubDate>
    </item>
    <item>
      <title>916ef19b-f47f-4453-94b5-ce95d87d9dc6</title>
      <link>https://vulnerability.circl.lu/sighting/916ef19b-f47f-4453-94b5-ce95d87d9dc6/export</link>
      <description>{"uuid": "916ef19b-f47f-4453-94b5-ce95d87d9dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50101", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mo5lbnlvfa2z", "content": "Naxclow Smart Doorbell X3 flaw (CRITICAL): Static credentials let attackers keep access after resets. No fix yet \u2014 restrict network exposure &amp;amp; check for vendor updates. https://radar.offseq.com/threat/cve-2026-50101-cwe-262-not-using-password-aging-in-f27f494a #OffSeq #IoTSecurity #CVE202650101", "creation_timestamp": "2026-06-13T06:02:30.394489Z"}</description>
      <content:encoded>{"uuid": "916ef19b-f47f-4453-94b5-ce95d87d9dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50101", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mo5lbnlvfa2z", "content": "Naxclow Smart Doorbell X3 flaw (CRITICAL): Static credentials let attackers keep access after resets. No fix yet \u2014 restrict network exposure &amp;amp; check for vendor updates. https://radar.offseq.com/threat/cve-2026-50101-cwe-262-not-using-password-aging-in-f27f494a #OffSeq #IoTSecurity #CVE202650101", "creation_timestamp": "2026-06-13T06:02:30.394489Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/916ef19b-f47f-4453-94b5-ce95d87d9dc6/export</guid>
      <pubDate>Sat, 13 Jun 2026 06:02:30 +0000</pubDate>
    </item>
    <item>
      <title>e4cdc893-e7f0-4d02-8eab-3d4c69c36824</title>
      <link>https://vulnerability.circl.lu/sighting/e4cdc893-e7f0-4d02-8eab-3d4c69c36824/export</link>
      <description>{"uuid": "e4cdc893-e7f0-4d02-8eab-3d4c69c36824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50101", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo64276og62n", "content": "\ud83d\udfe0 CVE-2026-50101 - High (8.1)\n\nNaxclow devices use a server-side, per-device relay credential that never rotates and is re-issue...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-50101/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T11:00:31.027479Z"}</description>
      <content:encoded>{"uuid": "e4cdc893-e7f0-4d02-8eab-3d4c69c36824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50101", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo64276og62n", "content": "\ud83d\udfe0 CVE-2026-50101 - High (8.1)\n\nNaxclow devices use a server-side, per-device relay credential that never rotates and is re-issue...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-50101/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T11:00:31.027479Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e4cdc893-e7f0-4d02-8eab-3d4c69c36824/export</guid>
      <pubDate>Sat, 13 Jun 2026 11:00:31 +0000</pubDate>
    </item>
    <item>
      <title>b0aff6f6-d0d1-498d-b19a-734855719bbf</title>
      <link>https://vulnerability.circl.lu/sighting/b0aff6f6-d0d1-498d-b19a-734855719bbf/export</link>
      <description>{"uuid": "b0aff6f6-d0d1-498d-b19a-734855719bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50108", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo642gf7ej2u", "content": "\ud83d\udfe0 CVE-2026-50108 - High (7.5)\n\nThe Naxclow platform API that returns device relay registration details exposes a persistent cred...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-50108/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T11:00:37.880942Z"}</description>
      <content:encoded>{"uuid": "b0aff6f6-d0d1-498d-b19a-734855719bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50108", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo642gf7ej2u", "content": "\ud83d\udfe0 CVE-2026-50108 - High (7.5)\n\nThe Naxclow platform API that returns device relay registration details exposes a persistent cred...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-50108/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T11:00:37.880942Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b0aff6f6-d0d1-498d-b19a-734855719bbf/export</guid>
      <pubDate>Sat, 13 Jun 2026 11:00:37 +0000</pubDate>
    </item>
    <item>
      <title>19ef7cbf-25dc-4217-b7a7-9c60ab88ea28</title>
      <link>https://vulnerability.circl.lu/sighting/19ef7cbf-25dc-4217-b7a7-9c60ab88ea28/export</link>
      <description>{"uuid": "19ef7cbf-25dc-4217-b7a7-9c60ab88ea28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50100", "type": "seen", "source": "https://jvn.jp/en/jp/JVN55319858", "content": "", "creation_timestamp": "2026-06-14T22:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "19ef7cbf-25dc-4217-b7a7-9c60ab88ea28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50100", "type": "seen", "source": "https://jvn.jp/en/jp/JVN55319858", "content": "", "creation_timestamp": "2026-06-14T22:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/19ef7cbf-25dc-4217-b7a7-9c60ab88ea28/export</guid>
      <pubDate>Sun, 14 Jun 2026 22:00:00 +0000</pubDate>
    </item>
    <item>
      <title>c22d8142-2372-4000-a988-99eaa459c5e5</title>
      <link>https://vulnerability.circl.lu/sighting/c22d8142-2372-4000-a988-99eaa459c5e5/export</link>
      <description>{"uuid": "c22d8142-2372-4000-a988-99eaa459c5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3modbbbc5qg2e", "content": "CVE-2026-50100 - Ricoh/Konica Minolta Printer Drivers Privilege Escalation\nCVE ID : CVE-2026-50100\n \n Published : June 15, 2026, 10:16 a.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain...", "creation_timestamp": "2026-06-15T12:17:14.112313Z"}</description>
      <content:encoded>{"uuid": "c22d8142-2372-4000-a988-99eaa459c5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3modbbbc5qg2e", "content": "CVE-2026-50100 - Ricoh/Konica Minolta Printer Drivers Privilege Escalation\nCVE ID : CVE-2026-50100\n \n Published : June 15, 2026, 10:16 a.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain...", "creation_timestamp": "2026-06-15T12:17:14.112313Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c22d8142-2372-4000-a988-99eaa459c5e5/export</guid>
      <pubDate>Mon, 15 Jun 2026 12:17:14 +0000</pubDate>
    </item>
    <item>
      <title>d3536a7d-d654-48c3-a270-d730e9c54067</title>
      <link>https://vulnerability.circl.lu/sighting/d3536a7d-d654-48c3-a270-d730e9c54067/export</link>
      <description>{"uuid": "d3536a7d-d654-48c3-a270-d730e9c54067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50100", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moe36qdnwn22", "content": "\ud83d\udfe0 CVE-2026-50100 - High (7.8)\n\nMultiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-50100/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T20:01:07.234577Z"}</description>
      <content:encoded>{"uuid": "d3536a7d-d654-48c3-a270-d730e9c54067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50100", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moe36qdnwn22", "content": "\ud83d\udfe0 CVE-2026-50100 - High (7.8)\n\nMultiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-50100/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T20:01:07.234577Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d3536a7d-d654-48c3-a270-d730e9c54067/export</guid>
      <pubDate>Mon, 15 Jun 2026 20:01:07 +0000</pubDate>
    </item>
    <item>
      <title>aae0d748-49da-487e-b574-ce22e1edbeec</title>
      <link>https://vulnerability.circl.lu/sighting/aae0d748-49da-487e-b574-ce22e1edbeec/export</link>
      <description>{"uuid": "aae0d748-49da-487e-b574-ce22e1edbeec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50107", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1929", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "aae0d748-49da-487e-b574-ce22e1edbeec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50107", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1929", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aae0d748-49da-487e-b574-ce22e1edbeec/export</guid>
      <pubDate>Wed, 17 Jun 2026 21:00:00 +0000</pubDate>
    </item>
    <item>
      <title>2f081682-18fc-4a76-99ec-05ee5ea70a9a</title>
      <link>https://vulnerability.circl.lu/sighting/2f081682-18fc-4a76-99ec-05ee5ea70a9a/export</link>
      <description>{"uuid": "2f081682-18fc-4a76-99ec-05ee5ea70a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50107", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojiaq6ohz27", "content": "CVE-2026-50107 - NGINX Gateway Fabric vulnerability\nCVE ID : CVE-2026-50107\n \n Published : June 17, 2026, 8:04 p.m. | 1\u00a0hour, 37\u00a0minutes ago\n \n Description : When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerabili...", "creation_timestamp": "2026-06-17T23:38:11.240918Z"}</description>
      <content:encoded>{"uuid": "2f081682-18fc-4a76-99ec-05ee5ea70a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50107", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojiaq6ohz27", "content": "CVE-2026-50107 - NGINX Gateway Fabric vulnerability\nCVE ID : CVE-2026-50107\n \n Published : June 17, 2026, 8:04 p.m. | 1\u00a0hour, 37\u00a0minutes ago\n \n Description : When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerabili...", "creation_timestamp": "2026-06-17T23:38:11.240918Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2f081682-18fc-4a76-99ec-05ee5ea70a9a/export</guid>
      <pubDate>Wed, 17 Jun 2026 23:38:11 +0000</pubDate>
    </item>
  </channel>
</rss>
