<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 11 Oct 2026 23:16:07 +0000</lastBuildDate>
    <item>
      <title>a59d0fa8-fcbf-4b30-b011-876a9ac3ade2</title>
      <link>https://vulnerability.circl.lu/sighting/a59d0fa8-fcbf-4b30-b011-876a9ac3ade2/export</link>
      <description>{"uuid": "a59d0fa8-fcbf-4b30-b011-876a9ac3ade2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdelyoqqy2w", "content": "Progress DataDirect\u306eGenAI\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u60aa\u610f\u3042\u308bOpenAPI\u30d5\u30a1\u30a4\u30eb\u3067OS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u6050\u308c\n\nProgress Software\u306f\u3001\u540c\u793e\u306e\u300cDataDirect Autonomous REST Connector\uff08ARC\uff09AI Model Generator\u300d\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306e\u30a2\u30fc\u30ea\u30fc\u30a2\u30af\u30bb\u30b9\u7248\u306b\u3001\u6df1\u523b\u306a\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-91140\uff09\u304c\u5b58\u5728\u3059\u308b\u3068\u516c\u8868\u3057\u307e\u3057\u305f\u3002 \u7d30\u5de5\u3057\u305fOpenA", "creation_timestamp": "2026-10-08T02:03:40.496263Z"}</description>
      <content:encoded>{"uuid": "a59d0fa8-fcbf-4b30-b011-876a9ac3ade2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdelyoqqy2w", "content": "Progress DataDirect\u306eGenAI\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u60aa\u610f\u3042\u308bOpenAPI\u30d5\u30a1\u30a4\u30eb\u3067OS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u6050\u308c\n\nProgress Software\u306f\u3001\u540c\u793e\u306e\u300cDataDirect Autonomous REST Connector\uff08ARC\uff09AI Model Generator\u300d\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306e\u30a2\u30fc\u30ea\u30fc\u30a2\u30af\u30bb\u30b9\u7248\u306b\u3001\u6df1\u523b\u306a\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-91140\uff09\u304c\u5b58\u5728\u3059\u308b\u3068\u516c\u8868\u3057\u307e\u3057\u305f\u3002 \u7d30\u5de5\u3057\u305fOpenA", "creation_timestamp": "2026-10-08T02:03:40.496263Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a59d0fa8-fcbf-4b30-b011-876a9ac3ade2/export</guid>
      <pubDate>Thu, 08 Oct 2026 02:03:40 +0000</pubDate>
    </item>
    <item>
      <title>57e91388-6c06-4141-9ad6-6595528a17a0</title>
      <link>https://vulnerability.circl.lu/sighting/57e91388-6c06-4141-9ad6-6595528a17a0/export</link>
      <description>{"uuid": "57e91388-6c06-4141-9ad6-6595528a17a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxbs5wwe5f2p", "content": "Kritieke kwetsbaarheid ontdekt in DataDirect Autonomous REST Connector AI Model \n\nEen ernstige kwetsbaarheid, bekend als CVE-2026-91140, is aangetroffen in agents van DataDirect Autonomous REST Connector AI Model Generator. Deze kwetsbaarheid maakt onbevoegde uitvoering van willekeurige best...", "creation_timestamp": "2026-10-07T11:01:01.575752Z"}</description>
      <content:encoded>{"uuid": "57e91388-6c06-4141-9ad6-6595528a17a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxbs5wwe5f2p", "content": "Kritieke kwetsbaarheid ontdekt in DataDirect Autonomous REST Connector AI Model \n\nEen ernstige kwetsbaarheid, bekend als CVE-2026-91140, is aangetroffen in agents van DataDirect Autonomous REST Connector AI Model Generator. Deze kwetsbaarheid maakt onbevoegde uitvoering van willekeurige best...", "creation_timestamp": "2026-10-07T11:01:01.575752Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/57e91388-6c06-4141-9ad6-6595528a17a0/export</guid>
      <pubDate>Wed, 07 Oct 2026 11:01:01 +0000</pubDate>
    </item>
    <item>
      <title>522d7c6e-6c7c-4966-9e99-e98332169833</title>
      <link>https://vulnerability.circl.lu/sighting/522d7c6e-6c7c-4966-9e99-e98332169833/export</link>
      <description>{"uuid": "522d7c6e-6c7c-4966-9e99-e98332169833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbi2hupts2n", "content": "CVE-2026-91140 - autonomous rest connector genai agents\nThe Autonomous REST Connector GenAI Agents version 2.0 can be tricked by a specially crafted API description file to run any command on the developer\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#progress #CVE #infosec", "creation_timestamp": "2026-10-07T08:00:07.313357Z"}</description>
      <content:encoded>{"uuid": "522d7c6e-6c7c-4966-9e99-e98332169833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbi2hupts2n", "content": "CVE-2026-91140 - autonomous rest connector genai agents\nThe Autonomous REST Connector GenAI Agents version 2.0 can be tricked by a specially crafted API description file to run any command on the developer\u2019s\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#progress #CVE #infosec", "creation_timestamp": "2026-10-07T08:00:07.313357Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/522d7c6e-6c7c-4966-9e99-e98332169833/export</guid>
      <pubDate>Wed, 07 Oct 2026 08:00:07 +0000</pubDate>
    </item>
    <item>
      <title>cd9e8b4e-5153-467e-802e-5d5bed28205d</title>
      <link>https://vulnerability.circl.lu/sighting/cd9e8b4e-5153-467e-802e-5d5bed28205d/export</link>
      <description>{"uuid": "cd9e8b4e-5153-467e-802e-5d5bed28205d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx7sstcncb2z", "content": "\ud83d\udea8 CVE-2026-91140 \u2014 CVSS 9.6 CRITICAL\n\nAn OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress So...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-91140\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T16:07:22.668674Z"}</description>
      <content:encoded>{"uuid": "cd9e8b4e-5153-467e-802e-5d5bed28205d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx7sstcncb2z", "content": "\ud83d\udea8 CVE-2026-91140 \u2014 CVSS 9.6 CRITICAL\n\nAn OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress So...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-91140\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T16:07:22.668674Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cd9e8b4e-5153-467e-802e-5d5bed28205d/export</guid>
      <pubDate>Tue, 06 Oct 2026 16:07:22 +0000</pubDate>
    </item>
    <item>
      <title>c62e0c40-25fc-4ce1-9560-102ce26ac724</title>
      <link>https://vulnerability.circl.lu/sighting/c62e0c40-25fc-4ce1-9560-102ce26ac724/export</link>
      <description>{"uuid": "c62e0c40-25fc-4ce1-9560-102ce26ac724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx7mg2r35q2t", "content": "Progress DataDirect vulnerability CVE-2026-91140 enables command injection via crafted OpenAPI files in AI agents. Pull version 2.1 now.\n\n#Progress #DataDirect #CVE202691140 #CommandInjection #AIAgents #OpenAPI #DevSecOps #Vulnerability", "creation_timestamp": "2026-10-06T14:12:51.920363Z"}</description>
      <content:encoded>{"uuid": "c62e0c40-25fc-4ce1-9560-102ce26ac724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx7mg2r35q2t", "content": "Progress DataDirect vulnerability CVE-2026-91140 enables command injection via crafted OpenAPI files in AI agents. Pull version 2.1 now.\n\n#Progress #DataDirect #CVE202691140 #CommandInjection #AIAgents #OpenAPI #DevSecOps #Vulnerability", "creation_timestamp": "2026-10-06T14:12:51.920363Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c62e0c40-25fc-4ce1-9560-102ce26ac724/export</guid>
      <pubDate>Tue, 06 Oct 2026 14:12:51 +0000</pubDate>
    </item>
    <item>
      <title>575a87d1-9caa-4643-8246-205f0cc6a5a6</title>
      <link>https://vulnerability.circl.lu/sighting/575a87d1-9caa-4643-8246-205f0cc6a5a6/export</link>
      <description>{"uuid": "575a87d1-9caa-4643-8246-205f0cc6a5a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-1005", "content": "", "creation_timestamp": "2026-10-06T12:42:39.000000Z"}</description>
      <content:encoded>{"uuid": "575a87d1-9caa-4643-8246-205f0cc6a5a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-91140", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-1005", "content": "", "creation_timestamp": "2026-10-06T12:42:39.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/575a87d1-9caa-4643-8246-205f0cc6a5a6/export</guid>
      <pubDate>Tue, 06 Oct 2026 12:42:39 +0000</pubDate>
    </item>
  </channel>
</rss>
