<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-01T08:36:46.788957+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/72265828-512d-4efd-badb-00a86457746e/export</id>
    <title>72265828-512d-4efd-badb-00a86457746e</title>
    <updated>2026-10-01T08:36:46.821151+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "72265828-512d-4efd-badb-00a86457746e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12342", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwoiengi6g2x", "content": "SailPoint IdentityIQ \u2014 CVE-2026-12342, CVSS 9.6 unauth RCE. All versions affected. Patch is available; apply it. #infosec https://0daynews.com/articles/2026-09-29-sailpoint-identityiq-cve-2026-12342-unauth-rce/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-3899", "creation_timestamp": "2026-09-29T18:45:14.448364Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/72265828-512d-4efd-badb-00a86457746e/export"/>
    <published>2026-09-29T18:45:14.448364+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c9800f0a-f746-4f88-bd01-2657415ac034/export</id>
    <title>c9800f0a-f746-4f88-bd01-2657415ac034</title>
    <updated>2026-10-01T08:36:46.824098+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c9800f0a-f746-4f88-bd01-2657415ac034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12342", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117350180819068866", "content": "You had one job.\nhttps://www.sailpoint.com/security-advisories/sailpoint-identityiq-improper-form-validation-vulnerability-cve-2026-12342\nsev:CRIT 9.6 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\n\nThis vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.", "creation_timestamp": "2026-09-28T18:54:17.506948Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c9800f0a-f746-4f88-bd01-2657415ac034/export"/>
    <published>2026-09-28T18:54:17.506948+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e4bf6371-fe95-4e3c-8d93-11029fdef1ea/export</id>
    <title>e4bf6371-fe95-4e3c-8d93-11029fdef1ea</title>
    <updated>2026-10-01T08:36:46.824436+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e4bf6371-fe95-4e3c-8d93-11029fdef1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12342", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwlvu7eyou2r", "content": "\ud83d\udea8 CVE-2026-12342 \u2014 CVSS 9.6 CRITICAL\n\nThis vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12342\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T18:08:35.185044Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e4bf6371-fe95-4e3c-8d93-11029fdef1ea/export"/>
    <published>2026-09-28T18:08:35.185044+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5971787c-2c36-4cf4-9f0f-87c3887691ab/export</id>
    <title>5971787c-2c36-4cf4-9f0f-87c3887691ab</title>
    <updated>2026-10-01T08:36:46.824567+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5971787c-2c36-4cf4-9f0f-87c3887691ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hst56to3r2q4o", "content": "CVE-2026-12342 - SailPoint IdentityIQ Improper Form Validation Vulnerability\nCVE ID : CVE-2026-12342\n \n Published : Sept. 28, 2026, 4:17 p.m. | 15\u00a0minutes ago\n \n Description : This vulnerability\nimpacts all versions of IdentityIQ and allows an unauthenticated user remote\ncode ...", "creation_timestamp": "2026-09-28T16:52:32.265649Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5971787c-2c36-4cf4-9f0f-87c3887691ab/export"/>
    <published>2026-09-28T16:52:32.265649+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/006743fc-aa2b-4d97-9fa3-bceabe15d3e8/export</id>
    <title>006743fc-aa2b-4d97-9fa3-bceabe15d3e8</title>
    <updated>2026-10-01T08:36:46.824686+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "006743fc-aa2b-4d97-9fa3-bceabe15d3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12342", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwlqvwvcbn2k", "content": "CVE-2026-12342 - identityiq\nAll versions of SailPoint IdentityIQ can be fooled into executing code because it does not properly verify data sent to its web interface. This means someone could control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#identityiq #sailpoint #CVE #infosec", "creation_timestamp": "2026-09-28T16:40:05.098157Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/006743fc-aa2b-4d97-9fa3-bceabe15d3e8/export"/>
    <published>2026-09-28T16:40:05.098157+00:00</published>
  </entry>
</feed>
