<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-14T00:31:47.833911+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b8a71168-a9e1-4c0e-822b-3cf436aa24fa/export</id>
    <title>b8a71168-a9e1-4c0e-822b-3cf436aa24fa</title>
    <updated>2026-08-14T00:31:47.860931+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b8a71168-a9e1-4c0e-822b-3cf436aa24fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23745", "type": "published-proof-of-concept", "source": "Telegram/37jGJH4V9qeoXMXqLcec6UXy6cYwVYUSBz89mMQgj4JChjs", "content": "", "creation_timestamp": "2026-08-13T00:00:45.594484Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b8a71168-a9e1-4c0e-822b-3cf436aa24fa/export"/>
    <published>2026-08-13T00:00:45.594484+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/980be057-cfeb-47a2-8495-787d26efb3e1/export</id>
    <title>980be057-cfeb-47a2-8495-787d26efb3e1</title>
    <updated>2026-08-14T00:31:47.864072+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "980be057-cfeb-47a2-8495-787d26efb3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23744", "type": "published-proof-of-concept", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "content": "", "creation_timestamp": "2026-08-13T00:00:11.665693Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/980be057-cfeb-47a2-8495-787d26efb3e1/export"/>
    <published>2026-08-13T00:00:11.665693+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/791aace6-5614-4060-8f52-8b1b11fec84e/export</id>
    <title>791aace6-5614-4060-8f52-8b1b11fec84e</title>
    <updated>2026-08-14T00:31:47.864229+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "791aace6-5614-4060-8f52-8b1b11fec84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23744", "type": "seen", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "content": "", "creation_timestamp": "2026-08-12T08:00:05.493206Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/791aace6-5614-4060-8f52-8b1b11fec84e/export"/>
    <published>2026-08-12T08:00:05.493206+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b42a3e9b-7778-4cb4-8b87-c1b2a040a400/export</id>
    <title>b42a3e9b-7778-4cb4-8b87-c1b2a040a400</title>
    <updated>2026-08-14T00:31:47.864337+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b42a3e9b-7778-4cb4-8b87-c1b2a040a400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23745", "type": "published-proof-of-concept", "source": "Telegram/37jGJH4V9qeoXMXqLcec6UXy6cYwVYUSBz89mMQgj4JChjs", "content": "", "creation_timestamp": "2026-08-12T08:00:05.082958Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b42a3e9b-7778-4cb4-8b87-c1b2a040a400/export"/>
    <published>2026-08-12T08:00:05.082958+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/75a8e97f-0f18-4bf4-8d47-4479468def95/export</id>
    <title>75a8e97f-0f18-4bf4-8d47-4479468def95</title>
    <updated>2026-08-14T00:31:47.864459+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "75a8e97f-0f18-4bf4-8d47-4479468def95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23744", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97511", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-23744-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Mluex0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 01:52:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector \u22641.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload to execute arbitrary commands, granting a reverse shell with PTY.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T00:00:08.847962Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/75a8e97f-0f18-4bf4-8d47-4479468def95/export"/>
    <published>2026-08-12T00:00:08.847962+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b2874b45-71d2-41a6-b0cf-4c82b6ac0647/export</id>
    <title>b2874b45-71d2-41a6-b0cf-4c82b6ac0647</title>
    <updated>2026-08-14T00:31:47.864566+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b2874b45-71d2-41a6-b0cf-4c82b6ac0647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23744", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97511", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-23744-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Mluex0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 01:52:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector \u22641.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload to execute arbitrary commands, granting a reverse shell with PTY.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T03:00:02.758990Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b2874b45-71d2-41a6-b0cf-4c82b6ac0647/export"/>
    <published>2026-08-11T03:00:02.758990+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b23663e0-6794-4863-86ff-ed9a6d72aaad/export</id>
    <title>b23663e0-6794-4863-86ff-ed9a6d72aaad</title>
    <updated>2026-08-14T00:31:47.864665+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b23663e0-6794-4863-86ff-ed9a6d72aaad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23744", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97407", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-23744-MCPJam-Inspector-Unauthenticated-RCE-Proof-of-Concept\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a amao26\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 09:07:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector \u22641.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload to execute arbitrary commands, granting a reverse shell with PTY.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T00:00:08.325383Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b23663e0-6794-4863-86ff-ed9a6d72aaad/export"/>
    <published>2026-08-11T00:00:08.325383+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fcf0e1a4-c4b6-4621-a065-a21d05301e16/export</id>
    <title>fcf0e1a4-c4b6-4621-a065-a21d05301e16</title>
    <updated>2026-08-14T00:31:47.864763+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fcf0e1a4-c4b6-4621-a065-a21d05301e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23744", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97410", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-23744-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a amao26\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 09:53:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-23744 is an unauthenticated command injection in MCPJam Inspector \u22641.4.2 via /api/mcp/connect. This POC exploits it by sending a crafted JSON payload to execute arbitrary commands, granting a reverse shell with PTY.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T00:00:08.235675Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fcf0e1a4-c4b6-4621-a065-a21d05301e16/export"/>
    <published>2026-08-11T00:00:08.235675+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4ec2483a-3261-4fa6-b348-5072cc73d8f6/export</id>
    <title>4ec2483a-3261-4fa6-b348-5072cc73d8f6</title>
    <updated>2026-08-14T00:31:47.864858+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4ec2483a-3261-4fa6-b348-5072cc73d8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23744", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97457", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-23744-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sonnelon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 15:57:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T00:00:07.579087Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4ec2483a-3261-4fa6-b348-5072cc73d8f6/export"/>
    <published>2026-08-11T00:00:07.579087+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1a3ca15d-7da6-4fab-bd11-56a6eea99792/export</id>
    <title>1a3ca15d-7da6-4fab-bd11-56a6eea99792</title>
    <updated>2026-08-14T00:31:47.864955+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1a3ca15d-7da6-4fab-bd11-56a6eea99792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23744", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97457", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-23744-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sonnelon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 15:57:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-10T17:00:05.122903Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1a3ca15d-7da6-4fab-bd11-56a6eea99792/export"/>
    <published>2026-08-10T17:00:05.122903+00:00</published>
  </entry>
</feed>
