<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 01 Oct 2026 21:51:09 +0000</lastBuildDate>
    <item>
      <title>54e73b92-eb87-4a8c-a41d-53548d2227c0</title>
      <link>https://vulnerability.circl.lu/sighting/54e73b92-eb87-4a8c-a41d-53548d2227c0/export</link>
      <description>{"uuid": "54e73b92-eb87-4a8c-a41d-53548d2227c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwt5brd6xq2m", "content": "CVE-2026-96760 - authlib\nThe Authlib software (versions up to 1.7.2) may treat data as securely signed even when no signature is present. This lets an attacker create fake authentication tokens that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#authlib #UbuntuPro2204LTS #CVE #infosec", "creation_timestamp": "2026-10-01T15:10:05.525780Z"}</description>
      <content:encoded>{"uuid": "54e73b92-eb87-4a8c-a41d-53548d2227c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwt5brd6xq2m", "content": "CVE-2026-96760 - authlib\nThe Authlib software (versions up to 1.7.2) may treat data as securely signed even when no signature is present. This lets an attacker create fake authentication tokens that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#authlib #UbuntuPro2204LTS #CVE #infosec", "creation_timestamp": "2026-10-01T15:10:05.525780Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/54e73b92-eb87-4a8c-a41d-53548d2227c0/export</guid>
      <pubDate>Thu, 01 Oct 2026 15:10:05 +0000</pubDate>
    </item>
    <item>
      <title>016fca5e-0aa6-4aa9-819e-62c55cdfe9b1</title>
      <link>https://vulnerability.circl.lu/sighting/016fca5e-0aa6-4aa9-819e-62c55cdfe9b1/export</link>
      <description>{"uuid": "016fca5e-0aa6-4aa9-819e-62c55cdfe9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mwnkqbqft224", "content": "\u3010\u4fee\u6b63\u7248\u306a\u3057\u3011Authlib \u306b\u7f72\u540d\u691c\u8a3c\u306e\u56de\u907f\uff08CVE-2026-96760\uff09\u3002signatures \u304c\u7a7a\u914d\u5217\u306eJWS\u3092\u300c\u691c\u8a3c\u6e08\u307f\u300d\u3068\u3057\u3066\u8fd4\u3057\u307e\u3059\u3002\u9375\u3082\u7f72\u540d\u3082\u8981\u308a\u307e\u305b\u3093\u3002\n\nCVE\u306f\u300c1.7.2\u4ee5\u4e0b\u300d\u3068\u3057\u3066\u3044\u307e\u3059\u304c\u3001jws.py \u306f v1.7.2\u30fbv1.8.0\u30fbmaster \u3067\u540c\u4e00\u30d5\u30a1\u30a4\u30eb\u3067\u3057\u305f\u3002\u5bfe\u8c61\u306fJWS\u306eJSON\u5f62\u5f0f\u3092\u53d7\u3051\u53d6\u308b\u7d4c\u8def\u3060\u3051\u3067\u3001jwt.decode() \u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\nforsmile.jp/articles/aut...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-09-29T09:54:54.138876Z"}</description>
      <content:encoded>{"uuid": "016fca5e-0aa6-4aa9-819e-62c55cdfe9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mwnkqbqft224", "content": "\u3010\u4fee\u6b63\u7248\u306a\u3057\u3011Authlib \u306b\u7f72\u540d\u691c\u8a3c\u306e\u56de\u907f\uff08CVE-2026-96760\uff09\u3002signatures \u304c\u7a7a\u914d\u5217\u306eJWS\u3092\u300c\u691c\u8a3c\u6e08\u307f\u300d\u3068\u3057\u3066\u8fd4\u3057\u307e\u3059\u3002\u9375\u3082\u7f72\u540d\u3082\u8981\u308a\u307e\u305b\u3093\u3002\n\nCVE\u306f\u300c1.7.2\u4ee5\u4e0b\u300d\u3068\u3057\u3066\u3044\u307e\u3059\u304c\u3001jws.py \u306f v1.7.2\u30fbv1.8.0\u30fbmaster \u3067\u540c\u4e00\u30d5\u30a1\u30a4\u30eb\u3067\u3057\u305f\u3002\u5bfe\u8c61\u306fJWS\u306eJSON\u5f62\u5f0f\u3092\u53d7\u3051\u53d6\u308b\u7d4c\u8def\u3060\u3051\u3067\u3001jwt.decode() \u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\nforsmile.jp/articles/aut...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-09-29T09:54:54.138876Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/016fca5e-0aa6-4aa9-819e-62c55cdfe9b1/export</guid>
      <pubDate>Tue, 29 Sep 2026 09:54:54 +0000</pubDate>
    </item>
    <item>
      <title>1b26a9cb-efdf-426f-ae2f-e4d15f2104a2</title>
      <link>https://vulnerability.circl.lu/sighting/1b26a9cb-efdf-426f-ae2f-e4d15f2104a2/export</link>
      <description>{"uuid": "1b26a9cb-efdf-426f-ae2f-e4d15f2104a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwmq7gsbjq2c", "content": "An Authlib signature bypass vulnerability (CVE-2026-96760, CVE-2026-28802, CVE-2026-27962) lets attackers forge JWS payloads. Update libraries now.\n\n#Authlib #CVE202696760 #Cybersecurity #JWS #Vulnerability", "creation_timestamp": "2026-09-29T02:00:09.937178Z"}</description>
      <content:encoded>{"uuid": "1b26a9cb-efdf-426f-ae2f-e4d15f2104a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96760", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwmq7gsbjq2c", "content": "An Authlib signature bypass vulnerability (CVE-2026-96760, CVE-2026-28802, CVE-2026-27962) lets attackers forge JWS payloads. Update libraries now.\n\n#Authlib #CVE202696760 #Cybersecurity #JWS #Vulnerability", "creation_timestamp": "2026-09-29T02:00:09.937178Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1b26a9cb-efdf-426f-ae2f-e4d15f2104a2/export</guid>
      <pubDate>Tue, 29 Sep 2026 02:00:09 +0000</pubDate>
    </item>
  </channel>
</rss>
