<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 11 Aug 2026 07:43:42 +0000</lastBuildDate>
    <item>
      <title>526edb73-65b7-4918-9b65-6e6b05a5a3a4</title>
      <link>https://vulnerability.circl.lu/sighting/526edb73-65b7-4918-9b65-6e6b05a5a3a4/export</link>
      <description>{"uuid": "526edb73-65b7-4918-9b65-6e6b05a5a3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63732", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdwwpvlti2c", "content": "\ud83d\udd34 CVE-2026-63732 - Critical (9.9)\n\n9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default passwor...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63732/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T23:00:37.952148Z"}</description>
      <content:encoded>{"uuid": "526edb73-65b7-4918-9b65-6e6b05a5a3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63732", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdwwpvlti2c", "content": "\ud83d\udd34 CVE-2026-63732 - Critical (9.9)\n\n9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default passwor...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63732/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T23:00:37.952148Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/526edb73-65b7-4918-9b65-6e6b05a5a3a4/export</guid>
      <pubDate>Thu, 23 Jul 2026 23:00:37 +0000</pubDate>
    </item>
    <item>
      <title>160efd03-c7e4-49f7-86fc-22e85a767dd1</title>
      <link>https://vulnerability.circl.lu/sighting/160efd03-c7e4-49f7-86fc-22e85a767dd1/export</link>
      <description>{"uuid": "160efd03-c7e4-49f7-86fc-22e85a767dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63732", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdurt2jik2k", "content": "CVE-2026-63732 - 9router\nThe 9router software has a default password that can be used by attackers to access the system. This allows them to run malicious code on the host operating system. Update to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#9router #decolua #CVE #infosec", "creation_timestamp": "2026-07-23T22:22:06.103191Z"}</description>
      <content:encoded>{"uuid": "160efd03-c7e4-49f7-86fc-22e85a767dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63732", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdurt2jik2k", "content": "CVE-2026-63732 - 9router\nThe 9router software has a default password that can be used by attackers to access the system. This allows them to run malicious code on the host operating system. Update to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#9router #decolua #CVE #infosec", "creation_timestamp": "2026-07-23T22:22:06.103191Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/160efd03-c7e4-49f7-86fc-22e85a767dd1/export</guid>
      <pubDate>Thu, 23 Jul 2026 22:22:06 +0000</pubDate>
    </item>
    <item>
      <title>e7730340-f1f2-44f7-8a33-024bd19c43de</title>
      <link>https://vulnerability.circl.lu/sighting/e7730340-f1f2-44f7-8a33-024bd19c43de/export</link>
      <description>{"uuid": "e7730340-f1f2-44f7-8a33-024bd19c43de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63739", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrcgomyp6o2s", "content": "\ud83d\udccc CVE-2026-63739 - SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OW... https://www.cyberhub.blog/cves/CVE-2026-63739", "creation_timestamp": "2026-07-23T08:37:06.715154Z"}</description>
      <content:encoded>{"uuid": "e7730340-f1f2-44f7-8a33-024bd19c43de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63739", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrcgomyp6o2s", "content": "\ud83d\udccc CVE-2026-63739 - SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OW... https://www.cyberhub.blog/cves/CVE-2026-63739", "creation_timestamp": "2026-07-23T08:37:06.715154Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e7730340-f1f2-44f7-8a33-024bd19c43de/export</guid>
      <pubDate>Thu, 23 Jul 2026 08:37:06 +0000</pubDate>
    </item>
    <item>
      <title>44aba214-6864-48b8-aee5-629d2c1e8bb8</title>
      <link>https://vulnerability.circl.lu/sighting/44aba214-6864-48b8-aee5-629d2c1e8bb8/export</link>
      <description>{"uuid": "44aba214-6864-48b8-aee5-629d2c1e8bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63735", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrceyz5wch2s", "content": "\ud83d\udccc CVE-2026-63735 - SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticated users to invoke endpoints i... https://www.cyberhub.blog/cves/CVE-2026-63735", "creation_timestamp": "2026-07-23T08:07:08.245498Z"}</description>
      <content:encoded>{"uuid": "44aba214-6864-48b8-aee5-629d2c1e8bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63735", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrceyz5wch2s", "content": "\ud83d\udccc CVE-2026-63735 - SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticated users to invoke endpoints i... https://www.cyberhub.blog/cves/CVE-2026-63735", "creation_timestamp": "2026-07-23T08:07:08.245498Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/44aba214-6864-48b8-aee5-629d2c1e8bb8/export</guid>
      <pubDate>Thu, 23 Jul 2026 08:07:08 +0000</pubDate>
    </item>
    <item>
      <title>55ef4062-9578-496b-80ab-580e41f6890c</title>
      <link>https://vulnerability.circl.lu/sighting/55ef4062-9578-496b-80ab-580e41f6890c/export</link>
      <description>{"uuid": "55ef4062-9578-496b-80ab-580e41f6890c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116956203969941945", "content": "CVE-2026-63731 - SSRF in HyperDX before 2.31.0. Authenticated users can probe internal services and access cloud metadata. CVSS 7.7. No patch available yet. Monitor for updates and restrict network access. #CVE #infosec #HyperDX\nhttps://www.valtersit.com/cve/CVE-2026-63731/", "creation_timestamp": "2026-07-21T05:00:47.698803Z"}</description>
      <content:encoded>{"uuid": "55ef4062-9578-496b-80ab-580e41f6890c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116956203969941945", "content": "CVE-2026-63731 - SSRF in HyperDX before 2.31.0. Authenticated users can probe internal services and access cloud metadata. CVSS 7.7. No patch available yet. Monitor for updates and restrict network access. #CVE #infosec #HyperDX\nhttps://www.valtersit.com/cve/CVE-2026-63731/", "creation_timestamp": "2026-07-21T05:00:47.698803Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/55ef4062-9578-496b-80ab-580e41f6890c/export</guid>
      <pubDate>Tue, 21 Jul 2026 05:00:47 +0000</pubDate>
    </item>
    <item>
      <title>cfefc08d-f587-42f3-931b-5adce63df6e9</title>
      <link>https://vulnerability.circl.lu/sighting/cfefc08d-f587-42f3-931b-5adce63df6e9/export</link>
      <description>{"uuid": "cfefc08d-f587-42f3-931b-5adce63df6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr4znx6h572j", "content": "CVE-2026-63731 - SSRF in HyperDX before 2.31.0. Authenticated users can probe internal services and access cloud metadata. CVSS 7.7. No patch available yet. Monitor for updates and restrict network access. #CVE #infosec #HyperDX\n\nhttps://www.valtersit.com/cve/CVE-2026-63731/", "creation_timestamp": "2026-07-21T05:00:46.389162Z"}</description>
      <content:encoded>{"uuid": "cfefc08d-f587-42f3-931b-5adce63df6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr4znx6h572j", "content": "CVE-2026-63731 - SSRF in HyperDX before 2.31.0. Authenticated users can probe internal services and access cloud metadata. CVSS 7.7. No patch available yet. Monitor for updates and restrict network access. #CVE #infosec #HyperDX\n\nhttps://www.valtersit.com/cve/CVE-2026-63731/", "creation_timestamp": "2026-07-21T05:00:46.389162Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cfefc08d-f587-42f3-931b-5adce63df6e9/export</guid>
      <pubDate>Tue, 21 Jul 2026 05:00:46 +0000</pubDate>
    </item>
    <item>
      <title>bc3900ee-b54a-4edd-a917-41c92e523d29</title>
      <link>https://vulnerability.circl.lu/sighting/bc3900ee-b54a-4edd-a917-41c92e523d29/export</link>
      <description>{"uuid": "bc3900ee-b54a-4edd-a917-41c92e523d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43iedw2s23", "content": "\ud83d\udfe0 CVE-2026-63731 - High (7.7)\n\nHyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authentica...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63731/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T20:00:46.645672Z"}</description>
      <content:encoded>{"uuid": "bc3900ee-b54a-4edd-a917-41c92e523d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43iedw2s23", "content": "\ud83d\udfe0 CVE-2026-63731 - High (7.7)\n\nHyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authentica...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63731/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T20:00:46.645672Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bc3900ee-b54a-4edd-a917-41c92e523d29/export</guid>
      <pubDate>Mon, 20 Jul 2026 20:00:46 +0000</pubDate>
    </item>
    <item>
      <title>a133e9a0-d074-4bb0-a4c4-1a18febc6564</title>
      <link>https://vulnerability.circl.lu/sighting/a133e9a0-d074-4bb0-a4c4-1a18febc6564/export</link>
      <description>{"uuid": "a133e9a0-d074-4bb0-a4c4-1a18febc6564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3fpfnebr2e", "content": "CVE-2026-63739 - SurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZER\nCVE ID : CVE-2026-63739\n \n Published : July 20, 2026, 12:19 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER...", "creation_timestamp": "2026-07-20T13:31:00.238504Z"}</description>
      <content:encoded>{"uuid": "a133e9a0-d074-4bb0-a4c4-1a18febc6564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3fpfnebr2e", "content": "CVE-2026-63739 - SurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZER\nCVE ID : CVE-2026-63739\n \n Published : July 20, 2026, 12:19 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER...", "creation_timestamp": "2026-07-20T13:31:00.238504Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a133e9a0-d074-4bb0-a4c4-1a18febc6564/export</guid>
      <pubDate>Mon, 20 Jul 2026 13:31:00 +0000</pubDate>
    </item>
    <item>
      <title>83333e83-1987-454d-9140-f879796d24ac</title>
      <link>https://vulnerability.circl.lu/sighting/83333e83-1987-454d-9140-f879796d24ac/export</link>
      <description>{"uuid": "83333e83-1987-454d-9140-f879796d24ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63735", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3ffzotfz2x", "content": "CVE-2026-63735 - SurrealDB before 3.2.0 Authentication Bypass via Custom API\nCVE ID : CVE-2026-63735\n \n Published : July 20, 2026, 12:19 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API ro...", "creation_timestamp": "2026-07-20T13:25:46.054533Z"}</description>
      <content:encoded>{"uuid": "83333e83-1987-454d-9140-f879796d24ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63735", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3ffzotfz2x", "content": "CVE-2026-63735 - SurrealDB before 3.2.0 Authentication Bypass via Custom API\nCVE ID : CVE-2026-63735\n \n Published : July 20, 2026, 12:19 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API ro...", "creation_timestamp": "2026-07-20T13:25:46.054533Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/83333e83-1987-454d-9140-f879796d24ac/export</guid>
      <pubDate>Mon, 20 Jul 2026 13:25:46 +0000</pubDate>
    </item>
  </channel>
</rss>
