<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-16T18:06:46.517323+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/86ee45d4-26ff-48fe-a1e9-ca4c2d2a957a/export</id>
    <title>86ee45d4-26ff-48fe-a1e9-ca4c2d2a957a</title>
    <updated>2026-06-16T18:06:46.859921+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "86ee45d4-26ff-48fe-a1e9-ca4c2d2a957a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44494", "type": "published-proof-of-concept", "source": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh", "content": "", "creation_timestamp": "2026-05-29T06:49:56.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/86ee45d4-26ff-48fe-a1e9-ca4c2d2a957a/export"/>
    <published>2026-05-29T06:49:56+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/13be3515-63fc-436b-8191-bf1b01475e2b/export</id>
    <title>13be3515-63fc-436b-8191-bf1b01475e2b</title>
    <updated>2026-06-16T18:06:46.859852+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "13be3515-63fc-436b-8191-bf1b01475e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44494", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3216", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 lib/adapters/http.js \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 axios \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u0442\u0438\u043f\u0430 \u00ab\u0447\u0435\u043b\u043e\u0432\u0435\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435\u00bb (MITM)\n\nBDU:2026-07709\nCVE-2026-44494\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh/#poc", "creation_timestamp": "2026-06-03T14:43:57.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/13be3515-63fc-436b-8191-bf1b01475e2b/export"/>
    <published>2026-06-03T14:43:57+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/214c335c-9e64-4335-87ef-12546aba47cb/export</id>
    <title>214c335c-9e64-4335-87ef-12546aba47cb</title>
    <updated>2026-06-16T18:06:46.859783+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "214c335c-9e64-4335-87ef-12546aba47cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44494", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnzsmhqcpr2y", "content": "\ud83d\udfe0 CVE-2026-44494 - High (8.7)\n\nAxios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44494/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T18:01:07.229438Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/214c335c-9e64-4335-87ef-12546aba47cb/export"/>
    <published>2026-06-11T18:01:07.229438+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/133b370f-ed9b-43a1-916a-77300ccf9c8e/export</id>
    <title>133b370f-ed9b-43a1-916a-77300ccf9c8e</title>
    <updated>2026-06-16T18:06:46.859710+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "133b370f-ed9b-43a1-916a-77300ccf9c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44494", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnzsnagnnc2f", "content": "CVE-2026-44494 - Critical Prototype Pollution in Axios. Escalates to full MITM, intercepting HTTP traffic &amp;amp; credentials. CVSS 8.7. No patch available. Update to 1.16.0+ or mitigate immediately. #CVE #Axios #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-44494/", "creation_timestamp": "2026-06-11T18:01:31.924766Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/133b370f-ed9b-43a1-916a-77300ccf9c8e/export"/>
    <published>2026-06-11T18:01:31.924766+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/09bf8fad-b113-4ff9-bb4e-12d0d243695c/export</id>
    <title>09bf8fad-b113-4ff9-bb4e-12d0d243695c</title>
    <updated>2026-06-16T18:06:46.859611+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "09bf8fad-b113-4ff9-bb4e-12d0d243695c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44494", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mo3oxizevy2k", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-44494 impacts axios in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/554\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-12T12:01:18.149361Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/09bf8fad-b113-4ff9-bb4e-12d0d243695c/export"/>
    <published>2026-06-12T12:01:18.149361+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/87c559c5-2e24-40b7-9777-a49a781834eb/export</id>
    <title>87c559c5-2e24-40b7-9777-a49a781834eb</title>
    <updated>2026-06-16T18:06:46.858092+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "87c559c5-2e24-40b7-9777-a49a781834eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44494", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mo52v7yb642v", "content": "\ud83d\udccc CVE-2026-44494 - Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollutio... https://www.potatohub.blog/cves/CVE-2026-44494", "creation_timestamp": "2026-06-13T01:09:18.852436Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/87c559c5-2e24-40b7-9777-a49a781834eb/export"/>
    <published>2026-06-13T01:09:18.852436+00:00</published>
  </entry>
</feed>
