<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-10T08:10:49.459759+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8f47fd08-42d8-4425-bacd-f024771c2d06/export</id>
    <title>8f47fd08-42d8-4425-bacd-f024771c2d06</title>
    <updated>2026-10-10T08:10:49.484796+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8f47fd08-42d8-4425-bacd-f024771c2d06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105278", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi62xfesn2l", "content": "CVE-2026-105278\nThe publicly available Docker container for openPDC contains a built\u2011in administrator username and password that are never required to be changed. Anyone who can reach the management interface over the network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-09T23:50:04.633705Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8f47fd08-42d8-4425-bacd-f024771c2d06/export"/>
    <published>2026-10-09T23:50:04.633705+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f81bccf2-f286-4491-8215-5be0f8a608a2/export</id>
    <title>f81bccf2-f286-4491-8215-5be0f8a608a2</title>
    <updated>2026-10-10T08:10:49.486864+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f81bccf2-f286-4491-8215-5be0f8a608a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105278", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxheaxfsae2z", "content": "\ud83d\udea8 CVE-2026-105278 \u2014 CVSS 9.3 CRITICAL\n\nThe published Docker image for openPDC includes a fixed administrative credential with no forced change on ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105278\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T16:08:08.570016Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f81bccf2-f286-4491-8215-5be0f8a608a2/export"/>
    <published>2026-10-09T16:08:08.570016+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bfb4b4ba-12f0-4671-b5ec-a6a726142eb9/export</id>
    <title>bfb4b4ba-12f0-4671-b5ec-a6a726142eb9</title>
    <updated>2026-10-10T08:10:49.487061+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bfb4b4ba-12f0-4671-b5ec-a6a726142eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105278", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxfb4uhsx52e", "content": "~Cisa~\nopenPDC/openHistorian flaws enable unauthenticated RCE and data exposure; update versions.\n-\nIOCs: CVE-2026-100730, CVE-2026-105278, CVE-2026-104629\n-\n#CVE-2026-100730 #ICS #ThreatIntel", "creation_timestamp": "2026-10-08T20:06:50.752613Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bfb4b4ba-12f0-4671-b5ec-a6a726142eb9/export"/>
    <published>2026-10-08T20:06:50.752613+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc84c53f-943f-40c5-b189-5cf5c95bcf8a/export</id>
    <title>dc84c53f-943f-40c5-b189-5cf5c95bcf8a</title>
    <updated>2026-10-10T08:10:49.487212+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc84c53f-943f-40c5-b189-5cf5c95bcf8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105275", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxfayy46fy2o", "content": "~Cisa~\nCISA reports four flaws in Netco Design versions before 2.1.7 enabling file attacks, XSS, DoS, and possible code execution; update.\n-\nIOCs: CVE-2026-101024, CVE-2026-105275, CVE-2026-105269\n-\n#CVE #ICS #ThreatIntel", "creation_timestamp": "2026-10-08T20:04:41.058192Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc84c53f-943f-40c5-b189-5cf5c95bcf8a/export"/>
    <published>2026-10-08T20:04:41.058192+00:00</published>
  </entry>
</feed>
