<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-14T08:48:09.484347+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ed65c35e-a5c5-44ce-aefc-533cf81c1f35/export</id>
    <title>ed65c35e-a5c5-44ce-aefc-533cf81c1f35</title>
    <updated>2026-08-14T08:48:09.509036+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ed65c35e-a5c5-44ce-aefc-533cf81c1f35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70398", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msual6bwgm2h", "content": "\ud83d\udd34 CVE-2026-70398 - Critical (9.6)\n\nA flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-70398/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T04:00:55.493681Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ed65c35e-a5c5-44ce-aefc-533cf81c1f35/export"/>
    <published>2026-08-12T04:00:55.493681+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9317971-48a9-4734-b120-f793ae970e69/export</id>
    <title>d9317971-48a9-4734-b120-f793ae970e69</title>
    <updated>2026-08-14T08:48:09.512657+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9317971-48a9-4734-b120-f793ae970e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70398", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msu56zlp6l25", "content": "CVE-2026-70398 (CRITICAL, CVSS 9.6) in Red Hat Advanced Cluster Management for Kubernetes 2 lets authenticated tenants redirect sensitive tokens. Restrict privileges &amp;amp; monitor GitOpsCluster controller while awaiting a fix. https://radar.offseq.com/threat/cve-2026-70398-unintended-proxy-or-interme...", "creation_timestamp": "2026-08-12T03:00:26.583721Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9317971-48a9-4734-b120-f793ae970e69/export"/>
    <published>2026-08-12T03:00:26.583721+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/64cb8264-0c56-47b8-a225-fa34249a68dc/export</id>
    <title>64cb8264-0c56-47b8-a225-fa34249a68dc</title>
    <updated>2026-08-14T08:48:09.512811+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "64cb8264-0c56-47b8-a225-fa34249a68dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70398", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117080301494306509", "content": "CRITICAL CVE-2026-70398 in Red Hat Advanced Cluster Management for Kubernetes 2: Authenticated tenants can redirect bearer tokens via GitOpsCluster controller. No official fix. Restrict privileges &amp;amp; monitor activity. https://radar.offseq.com/threat/cve-2026-70398-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-red-hat-advanced-cluster-3d1f26674efa89dc #OffSeq #Kubernetes #RedHat #CVE202670398", "creation_timestamp": "2026-08-12T03:00:24.643336Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/64cb8264-0c56-47b8-a225-fa34249a68dc/export"/>
    <published>2026-08-12T03:00:24.643336+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/712219e8-9731-4a59-879e-58f64afd2237/export</id>
    <title>712219e8-9731-4a59-879e-58f64afd2237</title>
    <updated>2026-08-14T08:48:09.512928+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "712219e8-9731-4a59-879e-58f64afd2237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msu3iq2wjt2d", "content": "CVE-2026-70398\nAn authenticated user with access to Red Hat Advanced Cluster Management's multicloud-integrations can redirect sensitive tokens to their own control, potentially exposing critical information and bypassing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-12T02:30:04.277074Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/712219e8-9731-4a59-879e-58f64afd2237/export"/>
    <published>2026-08-12T02:30:04.277074+00:00</published>
  </entry>
</feed>
