<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 16 Sep 2026 05:39:33 +0000</lastBuildDate>
    <item>
      <title>6066d0d4-9e80-4cad-983f-7a1cc9e0877a</title>
      <link>https://vulnerability.circl.lu/sighting/6066d0d4-9e80-4cad-983f-7a1cc9e0877a/export</link>
      <description>{"uuid": "6066d0d4-9e80-4cad-983f-7a1cc9e0877a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muzyduyq562m", "content": "CVE-2026-52770 - YesWiki &amp;lt;4.6.6 has unauthenticated SQL injection in Bazar APIs (CVSS 7.5). Attackers can extract database data via boolean queries. No patch available. If you run YesWiki, restrict API access or isolate immediately. Details: https://www.valtersit.com/cve/CVE-2026", "creation_timestamp": "2026-09-08T21:40:03.421527Z"}</description>
      <content:encoded>{"uuid": "6066d0d4-9e80-4cad-983f-7a1cc9e0877a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muzyduyq562m", "content": "CVE-2026-52770 - YesWiki &amp;lt;4.6.6 has unauthenticated SQL injection in Bazar APIs (CVSS 7.5). Attackers can extract database data via boolean queries. No patch available. If you run YesWiki, restrict API access or isolate immediately. Details: https://www.valtersit.com/cve/CVE-2026", "creation_timestamp": "2026-09-08T21:40:03.421527Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6066d0d4-9e80-4cad-983f-7a1cc9e0877a/export</guid>
      <pubDate>Tue, 08 Sep 2026 21:40:03 +0000</pubDate>
    </item>
    <item>
      <title>c5d9b9b1-608b-45a3-939e-aa93510a3f95</title>
      <link>https://vulnerability.circl.lu/sighting/c5d9b9b1-608b-45a3-939e-aa93510a3f95/export</link>
      <description>{"uuid": "c5d9b9b1-608b-45a3-939e-aa93510a3f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117237586426718586", "content": "CVE-2026-52770 - YesWiki &amp;lt;4.6.6 has unauthenticated SQL injection in Bazar APIs (CVSS 7.5). Attackers can extract database data via boolean queries. No patch available. If you run YesWiki, restrict API access or isolate immediately. Details: https://www.valtersit.com/cve/CVE-2026", "creation_timestamp": "2026-09-08T21:40:02.405927Z"}</description>
      <content:encoded>{"uuid": "c5d9b9b1-608b-45a3-939e-aa93510a3f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117237586426718586", "content": "CVE-2026-52770 - YesWiki &amp;lt;4.6.6 has unauthenticated SQL injection in Bazar APIs (CVSS 7.5). Attackers can extract database data via boolean queries. No patch available. If you run YesWiki, restrict API access or isolate immediately. Details: https://www.valtersit.com/cve/CVE-2026", "creation_timestamp": "2026-09-08T21:40:02.405927Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c5d9b9b1-608b-45a3-939e-aa93510a3f95/export</guid>
      <pubDate>Tue, 08 Sep 2026 21:40:02 +0000</pubDate>
    </item>
    <item>
      <title>e375725d-b064-4411-82df-41ab315f2aa8</title>
      <link>https://vulnerability.circl.lu/sighting/e375725d-b064-4411-82df-41ab315f2aa8/export</link>
      <description>{"uuid": "e375725d-b064-4411-82df-41ab315f2aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqskrwigk22", "content": "\ud83d\udfe0 CVE-2026-52770 - High (7.5)\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki\u2019s public Bazar entry-l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52770/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T06:02:34.654748Z"}</description>
      <content:encoded>{"uuid": "e375725d-b064-4411-82df-41ab315f2aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqskrwigk22", "content": "\ud83d\udfe0 CVE-2026-52770 - High (7.5)\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki\u2019s public Bazar entry-l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52770/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T06:02:34.654748Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e375725d-b064-4411-82df-41ab315f2aa8/export</guid>
      <pubDate>Sat, 05 Sep 2026 06:02:34 +0000</pubDate>
    </item>
    <item>
      <title>787b258c-df1d-43fa-8fbd-48e52f200260</title>
      <link>https://vulnerability.circl.lu/sighting/787b258c-df1d-43fa-8fbd-48e52f200260/export</link>
      <description>{"uuid": "787b258c-df1d-43fa-8fbd-48e52f200260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52770", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-qg78-vmvc-fhjw", "content": "", "creation_timestamp": "2026-07-09T22:35:19.161321Z"}</description>
      <content:encoded>{"uuid": "787b258c-df1d-43fa-8fbd-48e52f200260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52770", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-qg78-vmvc-fhjw", "content": "", "creation_timestamp": "2026-07-09T22:35:19.161321Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/787b258c-df1d-43fa-8fbd-48e52f200260/export</guid>
      <pubDate>Thu, 09 Jul 2026 22:35:19 +0000</pubDate>
    </item>
  </channel>
</rss>
