<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-05T14:21:23.948084+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f3d5fd77-eaaf-4896-8c2d-084fd293e212/export</id>
    <title>f3d5fd77-eaaf-4896-8c2d-084fd293e212</title>
    <updated>2026-10-05T14:21:23.977106+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f3d5fd77-eaaf-4896-8c2d-084fd293e212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104445", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mx2tysrxis2r", "content": "YesWiki 4.6.7 fixes an auth bypass that let unauthenticated attackers forge federated identities via ActivityPub. Two flaws patched; update if you're running a public instance. #infosec https://0daynews.com/articles/2026-10-04-yeswiki-cve-2026-104445-104446-auth-bypass-smtp-relay/", "creation_timestamp": "2026-10-04T16:45:19.105693Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f3d5fd77-eaaf-4896-8c2d-084fd293e212/export"/>
    <published>2026-10-04T16:45:19.105693+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/766d4fd1-c4a1-4b8d-a32d-aad1fa2bc5c8/export</id>
    <title>766d4fd1-c4a1-4b8d-a32d-aad1fa2bc5c8</title>
    <updated>2026-10-05T14:21:23.980509+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "766d4fd1-c4a1-4b8d-a32d-aad1fa2bc5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104445", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwvrper3cd2y", "content": "\ud83d\udfe0 CVE-2026-104445 - High (8.2)\n\nYesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox tha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-104445/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-02T16:20:56.576239Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/766d4fd1-c4a1-4b8d-a32d-aad1fa2bc5c8/export"/>
    <published>2026-10-02T16:20:56.576239+00:00</published>
  </entry>
</feed>
