<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-13T22:27:03.019628+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6e556dbd-5b25-4c5a-9ca5-7d8ed61bec22/export</id>
    <title>6e556dbd-5b25-4c5a-9ca5-7d8ed61bec22</title>
    <updated>2026-09-13T22:27:03.044781+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6e556dbd-5b25-4c5a-9ca5-7d8ed61bec22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28698", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mre2c2oeuo2w", "content": "\ud83d\udfe0 CVE-2026-28698 - High (8.6)\n\nPronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-28698/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T00:00:39.627023Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6e556dbd-5b25-4c5a-9ca5-7d8ed61bec22/export"/>
    <published>2026-07-24T00:00:39.627023+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3da17560-01b7-4b7c-98b6-b81e9fea3dbc/export</id>
    <title>3da17560-01b7-4b7c-98b6-b81e9fea3dbc</title>
    <updated>2026-09-13T22:27:03.047308+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3da17560-01b7-4b7c-98b6-b81e9fea3dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28698", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdxzjcpbs2j", "content": "CVE-2026-28698\nPronetiqs IntraVUE versions 3.2.1a14 and earlier allow unauthorized access to system files and data. This could lead to sensitive information being exposed, potentially compromising system security and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-23T23:20:05.012704Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3da17560-01b7-4b7c-98b6-b81e9fea3dbc/export"/>
    <published>2026-07-23T23:20:05.012704+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc92a656-31c0-49ea-a0fe-c820a0e6fb8e/export</id>
    <title>dc92a656-31c0-49ea-a0fe-c820a0e6fb8e</title>
    <updated>2026-09-13T22:27:03.047443+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc92a656-31c0-49ea-a0fe-c820a0e6fb8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88282", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a gitea-CVE-2026-28699\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Alardiians\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-11 02:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLab + writeup for CVE-2026-28699: Gitea OAuth2 scope enforcement bypass via HTTP Basic auth\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:49.720465Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc92a656-31c0-49ea-a0fe-c820a0e6fb8e/export"/>
    <published>2026-07-13T00:00:49.720465+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b75b760a-441b-4e3b-9457-011918a878e6/export</id>
    <title>b75b760a-441b-4e3b-9457-011918a878e6</title>
    <updated>2026-09-13T22:27:03.047562+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b75b760a-441b-4e3b-9457-011918a878e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88282", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a gitea-CVE-2026-28699\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Alardiians\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-11 02:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLab + writeup for CVE-2026-28699: Gitea OAuth2 scope enforcement bypass via HTTP Basic auth\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T07:00:04.447540Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b75b760a-441b-4e3b-9457-011918a878e6/export"/>
    <published>2026-07-12T07:00:04.447540+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0e0f3412-4d3c-4465-a097-1689f916301c/export</id>
    <title>0e0f3412-4d3c-4465-a097-1689f916301c</title>
    <updated>2026-09-13T22:27:03.047664+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0e0f3412-4d3c-4465-a097-1689f916301c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpxqhwrilo2t", "content": "CVE-2026-28699 - High severity supply chain attack in Gitea. OAuth2 scope bypass via HTTP Basic auth. CVSS 8.1. Unpatched. Update immediately if using affected versions. #CVE #Gitea #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-28699/", "creation_timestamp": "2026-07-06T09:07:50.372255Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0e0f3412-4d3c-4465-a097-1689f916301c/export"/>
    <published>2026-07-06T09:07:50.372255+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c346f218-d495-49ac-b8f2-f4668d29bbfb/export</id>
    <title>c346f218-d495-49ac-b8f2-f4668d29bbfb</title>
    <updated>2026-09-13T22:27:03.047764+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c346f218-d495-49ac-b8f2-f4668d29bbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw5rqbag62f", "content": "\ud83d\udfe0 CVE-2026-28699 - High (8.1)\n\nGitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-28699/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-05T18:00:39.018489Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c346f218-d495-49ac-b8f2-f4668d29bbfb/export"/>
    <published>2026-07-05T18:00:39.018489+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6fc887fd-097d-43d1-ba89-586237e128a8/export</id>
    <title>6fc887fd-097d-43d1-ba89-586237e128a8</title>
    <updated>2026-09-13T22:27:03.047864+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6fc887fd-097d-43d1-ba89-586237e128a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "Telegram/bfOUhtYO5_knJKoj_if_OKxt7hZq78r0zHfwCUUuIAza2Gk", "content": "", "creation_timestamp": "2026-06-11T11:00:12.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6fc887fd-097d-43d1-ba89-586237e128a8/export"/>
    <published>2026-06-11T11:00:12+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8fc7bf35-378e-47f1-ae2c-eb3b5475d46a/export</id>
    <title>8fc7bf35-378e-47f1-ae2c-eb3b5475d46a</title>
    <updated>2026-09-13T22:27:03.047958+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8fc7bf35-378e-47f1-ae2c-eb3b5475d46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "Telegram/X3d0ov_B01fXeFh1HIc4iOWU-yKPAhiRlXClKZPas190B7A", "content": "", "creation_timestamp": "2026-06-11T09:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8fc7bf35-378e-47f1-ae2c-eb3b5475d46a/export"/>
    <published>2026-06-11T09:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/96876bea-b826-47e6-862d-4769e0bb9ddf/export</id>
    <title>96876bea-b826-47e6-862d-4769e0bb9ddf</title>
    <updated>2026-09-13T22:27:03.048048+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "96876bea-b826-47e6-862d-4769e0bb9ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-28699", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-9r5x-wg6m-x2rc", "content": "", "creation_timestamp": "2026-06-05T22:22:25.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/96876bea-b826-47e6-862d-4769e0bb9ddf/export"/>
    <published>2026-06-05T22:22:25+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cce10402-f217-4124-a3ae-11a936a2d659/export</id>
    <title>cce10402-f217-4124-a3ae-11a936a2d659</title>
    <updated>2026-09-13T22:27:03.049848+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cce10402-f217-4124-a3ae-11a936a2d659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28692", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:34.339259Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cce10402-f217-4124-a3ae-11a936a2d659/export"/>
    <published>2026-03-30T07:02:34.339259+00:00</published>
  </entry>
</feed>
