<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T07:25:40.958357+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/49af792b-5c9e-42ef-ac31-8b55d216224d/export</id>
    <title>49af792b-5c9e-42ef-ac31-8b55d216224d</title>
    <updated>2026-09-14T07:25:40.984959+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "49af792b-5c9e-42ef-ac31-8b55d216224d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11504", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mnu4ekj7r42x", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-11504\n\nA vulnerability was detected in Tenda CX12L 16.03.53.12. The impacted element is the function setSchedWifi of the file /goform/openSchedWifi of the...", "creation_timestamp": "2026-06-09T11:39:39.442175Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/49af792b-5c9e-42ef-ac31-8b55d216224d/export"/>
    <published>2026-06-09T11:39:39.442175+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6200bd85-f168-40d4-981c-6b66012accdc/export</id>
    <title>6200bd85-f168-40d4-981c-6b66012accdc</title>
    <updated>2026-09-14T07:25:40.987461+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6200bd85-f168-40d4-981c-6b66012accdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11507", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrs3vsfty2t", "content": "CVE-2026-11507 - CodeAstro Leave Management System delete_leave_type.php sql injection\nCVE ID : CVE-2026-11507\n \n Published : June 8, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : A vulnerability was found in CodeAstro Leave Management System 1.0. Affected is an unknown f...", "creation_timestamp": "2026-06-08T13:30:32.683084Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6200bd85-f168-40d4-981c-6b66012accdc/export"/>
    <published>2026-06-08T13:30:32.683084+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/88dc0407-b959-4ad4-bbb2-70240605a96d/export</id>
    <title>88dc0407-b959-4ad4-bbb2-70240605a96d</title>
    <updated>2026-09-14T07:25:40.987610+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "88dc0407-b959-4ad4-bbb2-70240605a96d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11509", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrrjy7tdb2v", "content": "CVE-2026-11509 - CodeAstro Leave Management System search_staff_for_updation.php sql injection\nCVE ID : CVE-2026-11509\n \n Published : June 8, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : A vulnerability was identified in CodeAstro Leave Management System 1.0. Affected by...", "creation_timestamp": "2026-06-08T13:20:31.034431Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/88dc0407-b959-4ad4-bbb2-70240605a96d/export"/>
    <published>2026-06-08T13:20:31.034431+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3d4db7a2-206e-4146-b133-98d9846c5a3c/export</id>
    <title>3d4db7a2-206e-4146-b133-98d9846c5a3c</title>
    <updated>2026-09-14T07:25:40.987722+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3d4db7a2-206e-4146-b133-98d9846c5a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrrazq3l623", "content": "CVE-2026-11504 - Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflow\nCVE ID : CVE-2026-11504\n \n Published : June 8, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : A vulnerability was detected in Tenda CX12L 16.03.53.12. The imp...", "creation_timestamp": "2026-06-08T13:15:33.412483Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3d4db7a2-206e-4146-b133-98d9846c5a3c/export"/>
    <published>2026-06-08T13:15:33.412483+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d3821b09-9b49-48de-ba97-273d401ad405/export</id>
    <title>d3821b09-9b49-48de-ba97-273d401ad405</title>
    <updated>2026-09-14T07:25:40.987833+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d3821b09-9b49-48de-ba97-273d401ad405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrqze4cgv2s", "content": "CVE-2026-11508 - CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection\nCVE ID : CVE-2026-11508\n \n Published : June 8, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : A vulnerability was determined in CodeAstro Leave Management System 1.0. Affected by...", "creation_timestamp": "2026-06-08T13:11:13.190354Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d3821b09-9b49-48de-ba97-273d401ad405/export"/>
    <published>2026-06-08T13:11:13.190354+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5604418f-84cf-4826-ad2b-fedca8611fea/export</id>
    <title>5604418f-84cf-4826-ad2b-fedca8611fea</title>
    <updated>2026-09-14T07:25:40.987944+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5604418f-84cf-4826-ad2b-fedca8611fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11506", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrqmnycdg2s", "content": "CVE-2026-11506 - CodeAstro Leave Management System search_staff_for_deletion.php sql injection\nCVE ID : CVE-2026-11506\n \n Published : June 8, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : A vulnerability has been found in CodeAstro Leave Management System 1.0. This impact...", "creation_timestamp": "2026-06-08T13:04:08.085819Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5604418f-84cf-4826-ad2b-fedca8611fea/export"/>
    <published>2026-06-08T13:04:08.085819+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/767f3030-37c1-4eb5-8761-9dbaab77825f/export</id>
    <title>767f3030-37c1-4eb5-8761-9dbaab77825f</title>
    <updated>2026-09-14T07:25:40.988049+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "767f3030-37c1-4eb5-8761-9dbaab77825f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11505", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrqhbsvgd2o", "content": "CVE-2026-11505 - GL.iNet XE3000 glnassys hard-coded key\nCVE ID : CVE-2026-11505\n \n Published : June 8, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This affects an un...", "creation_timestamp": "2026-06-08T13:01:06.960026Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/767f3030-37c1-4eb5-8761-9dbaab77825f/export"/>
    <published>2026-06-08T13:01:06.960026+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e3b3b6dd-ec72-4606-8d08-360554d0580d/export</id>
    <title>e3b3b6dd-ec72-4606-8d08-360554d0580d</title>
    <updated>2026-09-14T07:25:40.988151+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e3b3b6dd-ec72-4606-8d08-360554d0580d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11503", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrl4sj3pj24", "content": "CVE-2026-11503 - Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow\nCVE ID : CVE-2026-11503\n \n Published : June 8, 2026, 10:16 a.m. | 58\u00a0minutes ago\n \n Description : A security vulnerability has been detected in Tenda...", "creation_timestamp": "2026-06-08T11:25:46.656167Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e3b3b6dd-ec72-4606-8d08-360554d0580d/export"/>
    <published>2026-06-08T11:25:46.656167+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6ebcd715-30eb-4c60-b733-c4f50c142f84/export</id>
    <title>6ebcd715-30eb-4c60-b733-c4f50c142f84</title>
    <updated>2026-09-14T07:25:40.988251+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6ebcd715-30eb-4c60-b733-c4f50c142f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11503", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116714021744747488", "content": "\u26a0\ufe0f CVE-2026-11503: High-severity stack-based buffer overflow in Tenda CX12L (16.03.53.12). Remote code execution possible; no official patch yet. Limit remote access &amp;amp; monitor for updates. https://radar.offseq.com/threat/cve-2026-11503-stack-based-buffer-overflow-in-tend-0a40e529 #OffSeq #CVE202611503 #RouterSecurity #Vuln", "creation_timestamp": "2026-06-08T10:30:51.445620Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6ebcd715-30eb-4c60-b733-c4f50c142f84/export"/>
    <published>2026-06-08T10:30:51.445620+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3e4c022d-2142-47a8-bf4b-af8f96d48de3/export</id>
    <title>3e4c022d-2142-47a8-bf4b-af8f96d48de3</title>
    <updated>2026-09-14T07:25:40.988353+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3e4c022d-2142-47a8-bf4b-af8f96d48de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11503", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnri2bwqn322", "content": "Tenda CX12L routers hit by HIGH-severity buffer overflow (CVSS 8.7). Remote code execution possible \u2014 no patch yet. Restrict remote access &amp;amp; watch for vendor updates. https://radar.offseq.com/threat/cve-2026-11503-stack-based-buffer-overflow-in-tend-0a40e529 #OffSeq #Vulnerability #RouterSecurity", "creation_timestamp": "2026-06-08T10:30:41.029432Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3e4c022d-2142-47a8-bf4b-af8f96d48de3/export"/>
    <published>2026-06-08T10:30:41.029432+00:00</published>
  </entry>
</feed>
