<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-21T01:38:13.008453+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d4519138-e1cf-498c-9cba-36aef3b7dc4e/export</id>
    <title>d4519138-e1cf-498c-9cba-36aef3b7dc4e</title>
    <updated>2026-07-21T01:38:13.033474+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d4519138-e1cf-498c-9cba-36aef3b7dc4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41729", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88512", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41729\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a daehyuh\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-12 15:42:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41729 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:50.439392Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d4519138-e1cf-498c-9cba-36aef3b7dc4e/export"/>
    <published>2026-07-13T00:00:50.439392+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/65ed3ca7-297d-439f-8e38-332b471ed6c7/export</id>
    <title>65ed3ca7-297d-439f-8e38-332b471ed6c7</title>
    <updated>2026-07-21T01:38:13.035480+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "65ed3ca7-297d-439f-8e38-332b471ed6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41729", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88512", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41729\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a daehyuh\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-12 15:42:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41729 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T07:00:05.161327Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/65ed3ca7-297d-439f-8e38-332b471ed6c7/export"/>
    <published>2026-07-12T07:00:05.161327+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/65a29adb-8d18-474c-9b01-25275762ddad/export</id>
    <title>65a29adb-8d18-474c-9b01-25275762ddad</title>
    <updated>2026-07-21T01:38:13.035629+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "65a29adb-8d18-474c-9b01-25275762ddad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41724", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpu5crzwvk2l", "content": "\u300cVCF Operations\u300d\u306b\u8907\u6570\u306eXSS\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\nBroadcom\u306f\u3001\u300cVMware Cloud Foundation Operations\uff08VCF Operations\uff09\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e746\u67088\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n...\n\n\u300cCVE-2026-41722\u300d\u300cCVE-2026-41723\u300d\u300cCVE-2026-41724\u300d\u306e\u3044\u305a\u308c\u3082\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u306e\u8106\u5f31\u6027\u3068\u3057\u3066\u304a\u308a\u3001\u975e\u516c\u958b\u306e\u3082\u3068\u5916\u90e8\u304b\u3089\u5831\u544a\u3092\u53d7\u3051\u305f\u3068\u3044\u3046\u3002", "creation_timestamp": "2026-07-04T22:46:56.495116Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/65a29adb-8d18-474c-9b01-25275762ddad/export"/>
    <published>2026-07-04T22:46:56.495116+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/20a7125b-b2f5-4db9-8027-2901e4387026/export</id>
    <title>20a7125b-b2f5-4db9-8027-2901e4387026</title>
    <updated>2026-07-21T01:38:13.035741+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "20a7125b-b2f5-4db9-8027-2901e4387026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41723", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpu5crzwvk2l", "content": "\u300cVCF Operations\u300d\u306b\u8907\u6570\u306eXSS\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\nBroadcom\u306f\u3001\u300cVMware Cloud Foundation Operations\uff08VCF Operations\uff09\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e746\u67088\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n...\n\n\u300cCVE-2026-41722\u300d\u300cCVE-2026-41723\u300d\u300cCVE-2026-41724\u300d\u306e\u3044\u305a\u308c\u3082\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u306e\u8106\u5f31\u6027\u3068\u3057\u3066\u304a\u308a\u3001\u975e\u516c\u958b\u306e\u3082\u3068\u5916\u90e8\u304b\u3089\u5831\u544a\u3092\u53d7\u3051\u305f\u3068\u3044\u3046\u3002", "creation_timestamp": "2026-07-04T22:46:56.453093Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/20a7125b-b2f5-4db9-8027-2901e4387026/export"/>
    <published>2026-07-04T22:46:56.453093+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/06eee28e-08bd-4b24-bd0b-ebbf0a8af54c/export</id>
    <title>06eee28e-08bd-4b24-bd0b-ebbf0a8af54c</title>
    <updated>2026-07-21T01:38:13.035847+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "06eee28e-08bd-4b24-bd0b-ebbf0a8af54c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41722", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpu5crzwvk2l", "content": "\u300cVCF Operations\u300d\u306b\u8907\u6570\u306eXSS\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\nBroadcom\u306f\u3001\u300cVMware Cloud Foundation Operations\uff08VCF Operations\uff09\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e746\u67088\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n...\n\n\u300cCVE-2026-41722\u300d\u300cCVE-2026-41723\u300d\u300cCVE-2026-41724\u300d\u306e\u3044\u305a\u308c\u3082\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u306e\u8106\u5f31\u6027\u3068\u3057\u3066\u304a\u308a\u3001\u975e\u516c\u958b\u306e\u3082\u3068\u5916\u90e8\u304b\u3089\u5831\u544a\u3092\u53d7\u3051\u305f\u3068\u3044\u3046\u3002", "creation_timestamp": "2026-07-04T22:46:56.410641Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/06eee28e-08bd-4b24-bd0b-ebbf0a8af54c/export"/>
    <published>2026-07-04T22:46:56.410641+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0f8caeba-0b6a-4993-b06a-420105a903d9/export</id>
    <title>0f8caeba-0b6a-4993-b06a-420105a903d9</title>
    <updated>2026-07-21T01:38:13.035955+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0f8caeba-0b6a-4993-b06a-420105a903d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41723", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mog4vle5n326", "content": "\ud83d\udccc CVE-2026-41723 - VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies,... https://www.cyberhub.blog/cves/CVE-2026-41723", "creation_timestamp": "2026-06-16T15:37:06.772519Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0f8caeba-0b6a-4993-b06a-420105a903d9/export"/>
    <published>2026-06-16T15:37:06.772519+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5801ff06-c5f9-4493-b350-a420591db85e/export</id>
    <title>5801ff06-c5f9-4493-b350-a420591db85e</title>
    <updated>2026-07-21T01:38:13.036059+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5801ff06-c5f9-4493-b350-a420591db85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41722", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mog37yjeht2x", "content": "\ud83d\udccc CVE-2026-41722 - VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies,... https://www.cyberhub.blog/cves/CVE-2026-41722", "creation_timestamp": "2026-06-16T15:07:08.225374Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5801ff06-c5f9-4493-b350-a420591db85e/export"/>
    <published>2026-06-16T15:07:08.225374+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a4957ade-5558-4abb-a0ea-4edba3327e3b/export</id>
    <title>a4957ade-5558-4abb-a0ea-4edba3327e3b</title>
    <updated>2026-07-21T01:38:13.036164+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a4957ade-5558-4abb-a0ea-4edba3327e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41724", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moedvotcki2z", "content": "\ud83d\udccc CVE-2026-41724 - VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies,... https://www.cyberhub.blog/cves/CVE-2026-41724", "creation_timestamp": "2026-06-15T22:37:07.131847Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a4957ade-5558-4abb-a0ea-4edba3327e3b/export"/>
    <published>2026-06-15T22:37:07.131847+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ab28de2b-35f4-4ee3-a583-c27d86e7b788/export</id>
    <title>ab28de2b-35f4-4ee3-a583-c27d86e7b788</title>
    <updated>2026-07-21T01:38:13.036264+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ab28de2b-35f4-4ee3-a583-c27d86e7b788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41728", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnwojru2dg2j", "content": "CVE-2026-41728 - Supply Chain Attack in Spring Data REST. JSON Patch bypass allows unauthorized write access. CVSS 7.5. Unpatched\u2014update to fixed versions immediately. #CVE #Spring #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-41728/", "creation_timestamp": "2026-06-10T12:10:01.948185Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ab28de2b-35f4-4ee3-a583-c27d86e7b788/export"/>
    <published>2026-06-10T12:10:01.948185+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a61a7f30-5ecb-400f-8949-f02ecefb6d45/export</id>
    <title>a61a7f30-5ecb-400f-8949-f02ecefb6d45</title>
    <updated>2026-07-21T01:38:13.036370+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a61a7f30-5ecb-400f-8949-f02ecefb6d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41729", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvpubu7ne24", "content": "\ud83d\udfe0 CVE-2026-41729 - High (8.1)\n\nSpring Data REST is vulnerable to SpEL expression injection through map-typed properties when pro...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41729/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T03:01:09.663661Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a61a7f30-5ecb-400f-8949-f02ecefb6d45/export"/>
    <published>2026-06-10T03:01:09.663661+00:00</published>
  </entry>
</feed>
