<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 12 Jul 2026 16:43:26 +0000</lastBuildDate>
    <item>
      <title>cabd10b9-3841-486b-9793-4ded9223b5b2</title>
      <link>https://vulnerability.circl.lu/sighting/cabd10b9-3841-486b-9793-4ded9223b5b2/export</link>
      <description>{"uuid": "cabd10b9-3841-486b-9793-4ded9223b5b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdh2l4fg72s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3166473E-18C7-424F-9E3D-A07720D8754D", "creation_timestamp": "2026-07-11T00:51:15.218995Z"}</description>
      <content:encoded>{"uuid": "cabd10b9-3841-486b-9793-4ded9223b5b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdh2l4fg72s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3166473E-18C7-424F-9E3D-A07720D8754D", "creation_timestamp": "2026-07-11T00:51:15.218995Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cabd10b9-3841-486b-9793-4ded9223b5b2/export</guid>
      <pubDate>Sat, 11 Jul 2026 00:51:15 +0000</pubDate>
    </item>
    <item>
      <title>9a6e6af6-40e6-4939-a3cc-2c255b74a9eb</title>
      <link>https://vulnerability.circl.lu/sighting/9a6e6af6-40e6-4939-a3cc-2c255b74a9eb/export</link>
      <description>{"uuid": "9a6e6af6-40e6-4939-a3cc-2c255b74a9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqdbjffybf2u", "content": "CVE-2026-54149 - Critical OS Command Injection in MaxKB. Authenticated users can execute arbitrary commands via malicious .tool import and MCP transport. CVSS 8.8. No patch available yet. Mitigate immediately. #CVE #MaxKB #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54149/", "creation_timestamp": "2026-07-10T23:12:10.492434Z"}</description>
      <content:encoded>{"uuid": "9a6e6af6-40e6-4939-a3cc-2c255b74a9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqdbjffybf2u", "content": "CVE-2026-54149 - Critical OS Command Injection in MaxKB. Authenticated users can execute arbitrary commands via malicious .tool import and MCP transport. CVSS 8.8. No patch available yet. Mitigate immediately. #CVE #MaxKB #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54149/", "creation_timestamp": "2026-07-10T23:12:10.492434Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9a6e6af6-40e6-4939-a3cc-2c255b74a9eb/export</guid>
      <pubDate>Fri, 10 Jul 2026 23:12:10 +0000</pubDate>
    </item>
    <item>
      <title>cb356833-a442-4445-ba88-184a23e9e10a</title>
      <link>https://vulnerability.circl.lu/sighting/cb356833-a442-4445-ba88-184a23e9e10a/export</link>
      <description>{"uuid": "cb356833-a442-4445-ba88-184a23e9e10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7nuupzf2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/58B24DF0-4314-4D8C-AFCA-04CA11962397", "creation_timestamp": "2026-07-10T22:38:53.343061Z"}</description>
      <content:encoded>{"uuid": "cb356833-a442-4445-ba88-184a23e9e10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7nuupzf2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/58B24DF0-4314-4D8C-AFCA-04CA11962397", "creation_timestamp": "2026-07-10T22:38:53.343061Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cb356833-a442-4445-ba88-184a23e9e10a/export</guid>
      <pubDate>Fri, 10 Jul 2026 22:38:53 +0000</pubDate>
    </item>
    <item>
      <title>870146e3-0b93-4aa3-8cc6-3cea6af87e14</title>
      <link>https://vulnerability.circl.lu/sighting/870146e3-0b93-4aa3-8cc6-3cea6af87e14/export</link>
      <description>{"uuid": "870146e3-0b93-4aa3-8cc6-3cea6af87e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd64oaost2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/91FF5E02-D4E6-4EBC-9014-0BCA01237FD5", "creation_timestamp": "2026-07-10T22:11:21.992858Z"}</description>
      <content:encoded>{"uuid": "870146e3-0b93-4aa3-8cc6-3cea6af87e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd64oaost2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54149 \u0432 MaxKB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/91FF5E02-D4E6-4EBC-9014-0BCA01237FD5", "creation_timestamp": "2026-07-10T22:11:21.992858Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/870146e3-0b93-4aa3-8cc6-3cea6af87e14/export</guid>
      <pubDate>Fri, 10 Jul 2026 22:11:21 +0000</pubDate>
    </item>
    <item>
      <title>9654592c-0707-4989-9761-40cbdf77f82f</title>
      <link>https://vulnerability.circl.lu/sighting/9654592c-0707-4989-9761-40cbdf77f82f/export</link>
      <description>{"uuid": "9654592c-0707-4989-9761-40cbdf77f82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcmrccqct25", "content": "\ud83d\udfe0 CVE-2026-54149 - High (8.8)\n\nMaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import funct...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54149/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T17:00:47.133240Z"}</description>
      <content:encoded>{"uuid": "9654592c-0707-4989-9761-40cbdf77f82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcmrccqct25", "content": "\ud83d\udfe0 CVE-2026-54149 - High (8.8)\n\nMaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import funct...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54149/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T17:00:47.133240Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9654592c-0707-4989-9761-40cbdf77f82f/export</guid>
      <pubDate>Fri, 10 Jul 2026 17:00:47 +0000</pubDate>
    </item>
    <item>
      <title>1a9858db-da1f-4913-b894-8008dda8ae9c</title>
      <link>https://vulnerability.circl.lu/sighting/1a9858db-da1f-4913-b894-8008dda8ae9c/export</link>
      <description>{"uuid": "1a9858db-da1f-4913-b894-8008dda8ae9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmnbbo2l2x", "content": "CVE-2026-54149 - MaxKB MCP tool import validation bypass allows post-authentication remote code execution\nCVE ID : CVE-2026-54149\n \n Published : July 10, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts,...", "creation_timestamp": "2026-07-10T16:58:31.266145Z"}</description>
      <content:encoded>{"uuid": "1a9858db-da1f-4913-b894-8008dda8ae9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcmnbbo2l2x", "content": "CVE-2026-54149 - MaxKB MCP tool import validation bypass allows post-authentication remote code execution\nCVE ID : CVE-2026-54149\n \n Published : July 10, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts,...", "creation_timestamp": "2026-07-10T16:58:31.266145Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1a9858db-da1f-4913-b894-8008dda8ae9c/export</guid>
      <pubDate>Fri, 10 Jul 2026 16:58:31 +0000</pubDate>
    </item>
  </channel>
</rss>
