<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-06T10:30:27.099258+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4511d84f-accc-4750-a1f2-e9dfa1b38342/export</id>
    <title>4511d84f-accc-4750-a1f2-e9dfa1b38342</title>
    <updated>2026-08-06T10:30:27.123697+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4511d84f-accc-4750-a1f2-e9dfa1b38342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14540", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mryoodbpnu2r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 39 interactions\nCVE-2026-63077: 35 interactions\nCVE-2026-16232: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-14540: 3 interactions\nCVE-2026-16232: 3 interactions\nCVE-2026-51371: 3 interactions\n", "creation_timestamp": "2026-08-01T04:58:43.107017Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4511d84f-accc-4750-a1f2-e9dfa1b38342/export"/>
    <published>2026-08-01T04:58:43.107017+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bda4ede8-36d5-4050-9e32-6a805e64c367/export</id>
    <title>bda4ede8-36d5-4050-9e32-6a805e64c367</title>
    <updated>2026-08-06T10:30:27.126661+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bda4ede8-36d5-4050-9e32-6a805e64c367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14541", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwygrbhhl2y", "content": "CVE-2026-14541\nA security issue in Google MCP Toolbox allows unauthorized access to protected tools and data backends using valid Google OAuth tokens. This happens when the toolbox is set up to use Google OAuth without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:48:04.657135Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bda4ede8-36d5-4050-9e32-6a805e64c367/export"/>
    <published>2026-07-31T12:48:04.657135+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ef03e747-ce08-435c-8bff-ec55207e2da6/export</id>
    <title>ef03e747-ce08-435c-8bff-ec55207e2da6</title>
    <updated>2026-08-06T10:30:27.126979+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ef03e747-ce08-435c-8bff-ec55207e2da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14540", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwygq2jw724", "content": "CVE-2026-14540\nA security issue exists in older versions of Google MCP Toolbox, which can be exploited by an attacker to make unauthorized requests to internal or external sites. This could potentially allow an attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:48:03.338082Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ef03e747-ce08-435c-8bff-ec55207e2da6/export"/>
    <published>2026-07-31T12:48:03.338082+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1883f44b-3be6-4833-ba32-81a82adc2ff0/export</id>
    <title>1883f44b-3be6-4833-ba32-81a82adc2ff0</title>
    <updated>2026-08-06T10:30:27.127087+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1883f44b-3be6-4833-ba32-81a82adc2ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jjkywoers73sy", "content": "CVE-2026-14541 - Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider\nCVE ID : CVE-2026-14541\n \n Published : July 31, 2026, 3:16 a.m. | 29\u00a0minutes ago\n \n Description : An authentication bypass and audience confusion vulnerability exists in the Google OAut...", "creation_timestamp": "2026-07-31T04:00:16.854626Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1883f44b-3be6-4833-ba32-81a82adc2ff0/export"/>
    <published>2026-07-31T04:00:16.854626+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/78ac5b85-40a4-401b-ac55-5ad9fb9df225/export</id>
    <title>78ac5b85-40a4-401b-ac55-5ad9fb9df225</title>
    <updated>2026-08-06T10:30:27.127148+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "78ac5b85-40a4-401b-ac55-5ad9fb9df225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14540", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eimuhra2zjnpt", "content": "CVE-2026-14540 - Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox\nCVE ID : CVE-2026-14540\n \n Published : July 31, 2026, 2:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP...", "creation_timestamp": "2026-07-31T03:54:17.489460Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/78ac5b85-40a4-401b-ac55-5ad9fb9df225/export"/>
    <published>2026-07-31T03:54:17.489460+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2de5edd7-5c6d-46da-a514-17fb263c9a28/export</id>
    <title>2de5edd7-5c6d-46da-a514-17fb263c9a28</title>
    <updated>2026-08-06T10:30:27.127210+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2de5edd7-5c6d-46da-a514-17fb263c9a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14545", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrpltsrhpu22", "content": "CVE-2026-14545 - truebooker\nThe TrueBooker WordPress plugin is vulnerable to a password reset attack. An attacker can gain control of any account, including administrator accounts, by exploiting this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#truebooker #unknown #CVE #infosec", "creation_timestamp": "2026-07-28T14:14:05.364514Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2de5edd7-5c6d-46da-a514-17fb263c9a28/export"/>
    <published>2026-07-28T14:14:05.364514+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/54308190-feb2-451b-b6ad-e4494ea15c5f/export</id>
    <title>54308190-feb2-451b-b6ad-e4494ea15c5f</title>
    <updated>2026-08-06T10:30:27.127271+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "54308190-feb2-451b-b6ad-e4494ea15c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14545", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mroxdaviyq2q", "content": "CVE-2026-14545 - TrueBooker Appointment Booking\nCVE ID : CVE-2026-14545\n \n Published : July 28, 2026, 6 a.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : The TrueBooker WordPress plugin before 1.2.4 does not validate account ownership when resetting a user's password through one ...", "creation_timestamp": "2026-07-28T08:06:55.011147Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/54308190-feb2-451b-b6ad-e4494ea15c5f/export"/>
    <published>2026-07-28T08:06:55.011147+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d254e560-d015-4f1d-934e-75ebde84b633/export</id>
    <title>d254e560-d015-4f1d-934e-75ebde84b633</title>
    <updated>2026-08-06T10:30:27.127334+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d254e560-d015-4f1d-934e-75ebde84b633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14544", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mq7xf2wjc42f", "content": "HP's Linux Imaging and Printing software flaw (CVE-2026-14544) enables remote code execution, posing significant risks to Linux systems. #HP #Linux #HPLIP thedailytechfeed.com/critical-vul...", "creation_timestamp": "2026-07-09T15:32:49.171871Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d254e560-d015-4f1d-934e-75ebde84b633/export"/>
    <published>2026-07-09T15:32:49.171871+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f463da09-038c-4d44-bcf3-e10434988e27/export</id>
    <title>f463da09-038c-4d44-bcf3-e10434988e27</title>
    <updated>2026-08-06T10:30:27.127393+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f463da09-038c-4d44-bcf3-e10434988e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14544", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mq7igokgro27", "content": "Critical Linux Printing Flaw CVE-2026-14544 Exposes HP Systems to Remote Code Execution Risks +\u00a0Video\n\nIntroduction: A Hidden Danger Inside Everyday Printing Infrastructure Printing systems are often considered low-risk components in enterprise environments, but modern attackers increasingly target\u2026", "creation_timestamp": "2026-07-09T11:05:16.535713Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f463da09-038c-4d44-bcf3-e10434988e27/export"/>
    <published>2026-07-09T11:05:16.535713+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ccc5dc3f-c7eb-470e-acde-a3cda13fc2be/export</id>
    <title>ccc5dc3f-c7eb-470e-acde-a3cda13fc2be</title>
    <updated>2026-08-06T10:30:27.127454+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ccc5dc3f-c7eb-470e-acde-a3cda13fc2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14544", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq6xqjf7pd2r", "content": "A critical HPLIP vulnerability, CVE-2026-14544 (CVSS 9.8), lets a remote attacker gain arbitrary code execution via crafted print data. Patch now.\n\n#HPLIP #LinuxSecurity #RCE #CVE #hpcups #CyberSecurity #Vulnerability #InfoSec", "creation_timestamp": "2026-07-09T06:06:33.157266Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ccc5dc3f-c7eb-470e-acde-a3cda13fc2be/export"/>
    <published>2026-07-09T06:06:33.157266+00:00</published>
  </entry>
</feed>
