<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-08T03:51:58.747467+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cbea1954-d6ba-44dc-b56e-ca3807dbb062/export</id>
    <title>cbea1954-d6ba-44dc-b56e-ca3807dbb062</title>
    <updated>2026-10-08T03:51:58.776397+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cbea1954-d6ba-44dc-b56e-ca3807dbb062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94490", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwrzje24lp27", "content": "CVE-2026-94490: OS command injection in OctoPrint 1.0.0 Command API allows remote attackers to run commands. CVSS 4.7. Exploit is public and vendor has not responded. No patch available. Restrict API access now. https://www.valtersit.com/cve/CVE-2026-94490/ #CVE #infosec #OctoPrint", "creation_timestamp": "2026-10-01T04:30:04.626097Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cbea1954-d6ba-44dc-b56e-ca3807dbb062/export"/>
    <published>2026-10-01T04:30:04.626097+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aee471e1-21fb-467f-a062-0a05364d6208/export</id>
    <title>aee471e1-21fb-467f-a062-0a05364d6208</title>
    <updated>2026-10-08T03:51:58.779292+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aee471e1-21fb-467f-a062-0a05364d6208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94490", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117363690863548085", "content": "CVE-2026-94490: OS command injection in OctoPrint 1.0.0 Command API allows remote attackers to run commands. CVSS 4.7. Exploit is public and vendor has not responded. No patch available. Restrict API access now. https://www.valtersit.com/cve/CVE-2026-94490/ #CVE #infosec #OctoPrint", "creation_timestamp": "2026-10-01T04:10:03.429745Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aee471e1-21fb-467f-a062-0a05364d6208/export"/>
    <published>2026-10-01T04:10:03.429745+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/735b2508-b91c-43a0-bbc5-fbc1c4a40fec/export</id>
    <title>735b2508-b91c-43a0-bbc5-fbc1c4a40fec</title>
    <updated>2026-10-08T03:51:58.779540+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "735b2508-b91c-43a0-bbc5-fbc1c4a40fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cr4cyxhkroenk", "content": "CVE-2026-94490 - OctoPrint Command API system.py executeSystemCommand os command injection\nCVE ID : CVE-2026-94490\n \n Published : Sept. 22, 2026, 12:16 a.m. | 25\u00a0minutes ago\n \n Description : A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the ...", "creation_timestamp": "2026-09-22T01:32:44.583909Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/735b2508-b91c-43a0-bbc5-fbc1c4a40fec/export"/>
    <published>2026-09-22T01:32:44.583909+00:00</published>
  </entry>
</feed>
