<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-13T18:43:09.096211+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/04f2c610-c84c-481f-b299-2a515980d318/export</id>
    <title>04f2c610-c84c-481f-b299-2a515980d318</title>
    <updated>2026-09-13T18:43:09.124690+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "04f2c610-c84c-481f-b299-2a515980d318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muoj3uaetz22", "content": "\ud83d\udea8 CVE-2026-62928 \u2014 CVSS 9.3 CRITICAL\n\nXING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62928\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T08:07:49.352799Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/04f2c610-c84c-481f-b299-2a515980d318/export"/>
    <published>2026-09-04T08:07:49.352799+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/02cc9ea9-e396-4709-9c41-9f34b31fc7fe/export</id>
    <title>02cc9ea9-e396-4709-9c41-9f34b31fc7fe</title>
    <updated>2026-09-13T18:43:09.128228+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "02cc9ea9-e396-4709-9c41-9f34b31fc7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muoipb4jyl2v", "content": "\ud83d\udd34 CVE-2026-62928 - Critical (9.8)\n\nXING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62928/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T08:00:47.475260Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/02cc9ea9-e396-4709-9c41-9f34b31fc7fe/export"/>
    <published>2026-09-04T08:00:47.475260+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/39af9e2c-ab52-4459-9d84-f50f031e7e57/export</id>
    <title>39af9e2c-ab52-4459-9d84-f50f031e7e57</title>
    <updated>2026-09-13T18:43:09.128376+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "39af9e2c-ab52-4459-9d84-f50f031e7e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muohk7syvb2m", "content": "CVE-2026-62928 - xing cptrans-me-x\nThe XING CPTrans-ME-X component can be tricked into executing operating system commands without requiring any login. This means an attacker could potentially take control of the server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xing #CVE #infosec", "creation_timestamp": "2026-09-04T07:40:04.216597Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/39af9e2c-ab52-4459-9d84-f50f031e7e57/export"/>
    <published>2026-09-04T07:40:04.216597+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f2960dd3-f7cd-4833-9b83-19d4543d2f18/export</id>
    <title>f2960dd3-f7cd-4833-9b83-19d4543d2f18</title>
    <updated>2026-09-13T18:43:09.128488+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "f2960dd3-f7cd-4833-9b83-19d4543d2f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://jvn.jp/en/jp/JVN32505330", "content": "", "creation_timestamp": "2026-09-04T04:46:23.613426Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f2960dd3-f7cd-4833-9b83-19d4543d2f18/export"/>
    <published>2026-09-04T04:46:23.613426+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/12a21bb6-4108-4281-8028-f85324984264/export</id>
    <title>12a21bb6-4108-4281-8028-f85324984264</title>
    <updated>2026-09-13T18:43:09.129565+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "12a21bb6-4108-4281-8028-f85324984264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62927", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msg2mofdzy2f", "content": "\ud83d\udccc CVE-2026-62927 - In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authori... https://www.cyberhub.blog/cves/CVE-2026-62927", "creation_timestamp": "2026-08-06T12:37:06.843685Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/12a21bb6-4108-4281-8028-f85324984264/export"/>
    <published>2026-08-06T12:37:06.843685+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/193ddb19-25ff-4ce7-b7c2-187d9cbb1f4a/export</id>
    <title>193ddb19-25ff-4ce7-b7c2-187d9cbb1f4a</title>
    <updated>2026-09-13T18:43:09.129699+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "193ddb19-25ff-4ce7-b7c2-187d9cbb1f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62927", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cbcmrvdiup5yg", "content": "CVE-2026-62927 - Eclipse Milo Authorization Bypass via Batch Processing\nCVE ID : CVE-2026-62927\n \n Published : Aug. 4, 2026, 1:18 p.m. | 27\u00a0minutes ago\n \n Description : In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to addres...", "creation_timestamp": "2026-08-04T13:54:28.283774Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/193ddb19-25ff-4ce7-b7c2-187d9cbb1f4a/export"/>
    <published>2026-08-04T13:54:28.283774+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2ea4489f-1edf-4b56-8dbf-53b4a8633ba9/export</id>
    <title>2ea4489f-1edf-4b56-8dbf-53b4a8633ba9</title>
    <updated>2026-09-13T18:43:09.129802+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2ea4489f-1edf-4b56-8dbf-53b4a8633ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6292", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mp3rr2wdgt2l", "content": "CVE-2026-6292 mp-customize-login-page (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-25T06:16:17.751262Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2ea4489f-1edf-4b56-8dbf-53b4a8633ba9/export"/>
    <published>2026-06-25T06:16:17.751262+00:00</published>
  </entry>
</feed>
