<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-02T10:10:49.924377+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9b5b4915-02e2-4c58-b410-9d90e7db3a51/export</id>
    <title>9b5b4915-02e2-4c58-b410-9d90e7db3a51</title>
    <updated>2026-10-02T10:10:49.940288+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9b5b4915-02e2-4c58-b410-9d90e7db3a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104480", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwuipokzit27", "content": "\ud83d\udea8 CVE-2026-104480 \u2014 CVSS 9.4 CRITICAL\n\nDiscord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster containe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104480\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T04:07:22.524023Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9b5b4915-02e2-4c58-b410-9d90e7db3a51/export"/>
    <published>2026-10-02T04:07:22.524023+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b7f1a5ed-6e34-44da-9f79-98fde39672a4/export</id>
    <title>b7f1a5ed-6e34-44da-9f79-98fde39672a4</title>
    <updated>2026-10-02T10:10:49.942437+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b7f1a5ed-6e34-44da-9f79-98fde39672a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gq6ibut5ojyka", "content": "CVE-2026-104480 - Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership\nCVE ID : CVE-2026-104480\n \n Published : Oct. 2, 2026, 2:17 a.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : Discord libdave before 1.2.0 did not reject an MLS Welcome ...", "creation_timestamp": "2026-10-02T03:46:55.336155Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b7f1a5ed-6e34-44da-9f79-98fde39672a4/export"/>
    <published>2026-10-02T03:46:55.336155+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9868814c-6b2f-45b1-a6cb-f487b8ba6f46/export</id>
    <title>9868814c-6b2f-45b1-a6cb-f487b8ba6f46</title>
    <updated>2026-10-02T10:10:49.942713+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9868814c-6b2f-45b1-a6cb-f487b8ba6f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104480", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwuexz6rea2f", "content": "Discord libdave (v1.1.0 \u2013 &amp;lt;1.2.0) has a CRITICAL vuln (CVE-2026-104480, CVSS 9.4). Attackers can join encrypted sessions undetected. Check for vendor updates: https://radar.offseq.com/threat/cve-2026-104480-cwe-390-detection-of-error-condition-without-action-in-discord-libdave-b9a84610b93cd7e9 #O...", "creation_timestamp": "2026-10-02T03:00:28.179913Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9868814c-6b2f-45b1-a6cb-f487b8ba6f46/export"/>
    <published>2026-10-02T03:00:28.179913+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f94c6991-d684-4471-bd9c-d7912317d256/export</id>
    <title>f94c6991-d684-4471-bd9c-d7912317d256</title>
    <updated>2026-10-02T10:10:49.942794+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f94c6991-d684-4471-bd9c-d7912317d256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104480", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117369079388271154", "content": "Discord libdave CRITICAL vuln (CVE-2026-104480, CVSS 9.4): Affected versions 1.1.0 \u2013 &amp;lt;1.2.0 let attackers inject unauthorized members into encrypted sessions. Patch status unconfirmed \u2014 check https://radar.offseq.com/threat/cve-2026-104480-cwe-390-detection-of-error-condition-without-action-in-discord-libdave-b9a84610b93cd7e9 #OffSeq #Discord #CVE2026104480 #infosec", "creation_timestamp": "2026-10-02T03:00:25.934739Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f94c6991-d684-4471-bd9c-d7912317d256/export"/>
    <published>2026-10-02T03:00:25.934739+00:00</published>
  </entry>
</feed>
