<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-22T19:08:13.418622+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1eceb83f-980c-459a-986b-14e9f38490fe/export</id>
    <title>1eceb83f-980c-459a-986b-14e9f38490fe</title>
    <updated>2026-07-22T19:08:13.440314+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1eceb83f-980c-459a-986b-14e9f38490fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116952218421513913", "content": "CVE-2026-16242 - Critical authentication bypass in Konnectivity proxy-server. CVSS 9.4. Unpatched. Attackers can intercept control-plane traffic. Isolate affected systems immediately. #CVE #Konnectivity #infosec\nhttps://www.valtersit.com/cve/CVE-2026-16242/", "creation_timestamp": "2026-07-20T12:07:12.341862Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1eceb83f-980c-459a-986b-14e9f38490fe/export"/>
    <published>2026-07-20T12:07:12.341862+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e472a5ff-cee1-42b1-940e-843125cc9e06/export</id>
    <title>e472a5ff-cee1-42b1-940e-843125cc9e06</title>
    <updated>2026-07-22T19:08:13.443967+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e472a5ff-cee1-42b1-940e-843125cc9e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr3azjkgm62u", "content": "CVE-2026-16242 - Critical authentication bypass in Konnectivity proxy-server. CVSS 9.4. Unpatched. Attackers can intercept control-plane traffic. Isolate affected systems immediately. #CVE #Konnectivity #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-16242/", "creation_timestamp": "2026-07-20T12:07:11.329387Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e472a5ff-cee1-42b1-940e-843125cc9e06/export"/>
    <published>2026-07-20T12:07:11.329387+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6eaa5acf-feea-4879-9c6c-a556189fdc81/export</id>
    <title>6eaa5acf-feea-4879-9c6c-a556189fdc81</title>
    <updated>2026-07-22T19:08:13.444113+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6eaa5acf-feea-4879-9c6c-a556189fdc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16242", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr33mmn4ec2r", "content": "Red Hat Logging Subsystem for OpenShift hit by CRITICAL CVE-2026-16242 (CVSS 9.4): missing agent auth exposes control-plane traffic. Restrict endpoint access &amp;amp; stay updated via https://radar.offseq.com/threat/cve-2026-16242-missing-authentication-for-critical-function-in-red-hat-logging-subsystem...", "creation_timestamp": "2026-07-20T10:30:30.001432Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6eaa5acf-feea-4879-9c6c-a556189fdc81/export"/>
    <published>2026-07-20T10:30:30.001432+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/de66b480-79b9-4899-a005-e68001ae8c9f/export</id>
    <title>de66b480-79b9-4899-a005-e68001ae8c9f</title>
    <updated>2026-07-22T19:08:13.444237+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "de66b480-79b9-4899-a005-e68001ae8c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16242", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116951838064648106", "content": "CVE-2026-16242 (CRITICAL, CVSS 9.4) affects Red Hat Logging Subsystem for OpenShift: missing agent auth in Konnectivity proxy-server lets remote attackers intercept/control plane traffic. Restrict endpoint access &amp;amp; check https://radar.offseq.com/threat/cve-2026-16242-missing-authentication-for-critical-function-in-red-hat-logging-subsystem-for-red-hat-e02d26f300d35775 #OffSeq #RedHat #CVE202626242", "creation_timestamp": "2026-07-20T10:30:28.212708Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/de66b480-79b9-4899-a005-e68001ae8c9f/export"/>
    <published>2026-07-20T10:30:28.212708+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1a53020d-3ea0-4fb0-bb8b-2c44f94ddbbb/export</id>
    <title>1a53020d-3ea0-4fb0-bb8b-2c44f94ddbbb</title>
    <updated>2026-07-22T19:08:13.444346+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1a53020d-3ea0-4fb0-bb8b-2c44f94ddbbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr2xyhv5pa22", "content": "CVE-2026-16242 - Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates\nCVE ID : CVE-2026-16242\n \n Published : July 20, 2026, 8:16 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A flaw was found in the Konnectivity proxy-server co...", "creation_timestamp": "2026-07-20T09:25:32.836426Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1a53020d-3ea0-4fb0-bb8b-2c44f94ddbbb/export"/>
    <published>2026-07-20T09:25:32.836426+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c292f7af-38ba-4351-ab4f-a033fc773188/export</id>
    <title>c292f7af-38ba-4351-ab4f-a033fc773188</title>
    <updated>2026-07-22T19:08:13.444451+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c292f7af-38ba-4351-ab4f-a033fc773188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mr2ux2hzsc2u", "content": "OpenShift hosted control planes: a missing certificate check (CVE-2026-16242, CVSS 9.4) lets a remote attacker read traffic between the control plane and its nodes.\n\nNo fix shipped yet. Restrict the endpoint and watch for unknown agents.", "creation_timestamp": "2026-07-20T08:31:04.114583Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c292f7af-38ba-4351-ab4f-a033fc773188/export"/>
    <published>2026-07-20T08:31:04.114583+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fa65d870-e580-4f83-a9a9-a52c35786789/export</id>
    <title>fa65d870-e580-4f83-a9a9-a52c35786789</title>
    <updated>2026-07-22T19:08:13.444558+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fa65d870-e580-4f83-a9a9-a52c35786789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr2ugysfwu2e", "content": "CVE-2026-16242 - red hat openshift container platform 4\nThe Konnectivity proxy-server in Hypershift does not verify the identity of agents connecting to it. This means an attacker who can reach the proxy could connect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-07-20T08:22:04.730761Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fa65d870-e580-4f83-a9a9-a52c35786789/export"/>
    <published>2026-07-20T08:22:04.730761+00:00</published>
  </entry>
</feed>
