<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-06T00:34:15.430844+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/909916a5-72ae-471e-8e0b-810a12034649/export</id>
    <title>909916a5-72ae-471e-8e0b-810a12034649</title>
    <updated>2026-07-06T00:34:15.453539+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "909916a5-72ae-471e-8e0b-810a12034649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48928", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5uzimqsj2c", "content": "CVE-2026-48928 - Node.js Hostname Mismatch Trust Policy Bypass\nCVE ID : CVE-2026-48928\n \n Published : June 26, 2026, 1:14 a.m. | 30\u00a0minutes ago\n \n Description : A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups.\n\nThis vul...", "creation_timestamp": "2026-06-26T02:20:01.428321Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/909916a5-72ae-471e-8e0b-810a12034649/export"/>
    <published>2026-06-26T02:20:01.428321+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/706a52a8-0912-428c-99c8-d0716615196a/export</id>
    <title>706a52a8-0912-428c-99c8-d0716615196a</title>
    <updated>2026-07-06T00:34:15.454947+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "706a52a8-0912-428c-99c8-d0716615196a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48928", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20260622", "content": "", "creation_timestamp": "2026-06-21T19:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/706a52a8-0912-428c-99c8-d0716615196a/export"/>
    <published>2026-06-21T19:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3faef733-320e-4f18-8146-40debe417bd4/export</id>
    <title>3faef733-320e-4f18-8146-40debe417bd4</title>
    <updated>2026-07-06T00:34:15.455870+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3faef733-320e-4f18-8146-40debe417bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48928", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c", "content": "\ud83d\udd17 CVE : CVE-2026-21636, CVE-2026-48615, CVE-2026-48617, CVE-2026-48618, CVE-2026-48619, CVE-2026-48928, CVE-2026-48930, CVE-2026-48931, CVE-2026-48933, CVE-2026-48934, CVE-2026-48935, CVE-2026-48936, CVE-2026-48937", "creation_timestamp": "2026-06-19T13:45:17.843123Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3faef733-320e-4f18-8146-40debe417bd4/export"/>
    <published>2026-06-19T13:45:17.843123+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/134ba4ac-1f9e-4f23-8fd0-78e072d97bd9/export</id>
    <title>134ba4ac-1f9e-4f23-8fd0-78e072d97bd9</title>
    <updated>2026-07-06T00:34:15.455973+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "134ba4ac-1f9e-4f23-8fd0-78e072d97bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogzdc4ksd2g", "content": "CVE-2026-48929 - Rocket.Chat Unauthenticated File Deletion\nCVE ID : CVE-2026-48929\n \n Published : June 16, 2026, 11:08 p.m. | 24\u00a0minutes ago\n \n Description : Rocket.Chat in versions &amp;lt;8.5.1, &amp;lt;8.4.4, &amp;lt;8.3.6, &amp;lt;8.2.6, &amp;lt;8.1.6, &amp;lt;8.0.7, &amp;lt;7.13.9, and &amp;lt;7.10.13 i...", "creation_timestamp": "2026-06-17T00:05:51.032363Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/134ba4ac-1f9e-4f23-8fd0-78e072d97bd9/export"/>
    <published>2026-06-17T00:05:51.032363+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/96bf6571-7cb2-4f81-b36a-562ce6f76473/export</id>
    <title>96bf6571-7cb2-4f81-b36a-562ce6f76473</title>
    <updated>2026-07-06T00:34:15.456065+00:00</updated>
    <author>
      <name>Alexandre Dulaunoy</name>
      <uri>https://cvepremium.circl.lu/user/adulau</uri>
    </author>
    <content>{"uuid": "96bf6571-7cb2-4f81-b36a-562ce6f76473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-4892", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bb20f34e-4314-42f2-8e6b-cb2c917339bc", "content": "", "creation_timestamp": "2026-05-13T12:31:36.904766Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/96bf6571-7cb2-4f81-b36a-562ce6f76473/export"/>
    <published>2026-05-13T12:31:36.904766+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/85f7b383-17fc-49cd-88d9-05df795a62af/export</id>
    <title>85f7b383-17fc-49cd-88d9-05df795a62af</title>
    <updated>2026-07-06T00:34:15.456928+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "85f7b383-17fc-49cd-88d9-05df795a62af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4892", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnhrc75nu2q", "content": "\ud83d\udfe0 CVE-2026-4892 - High (8.4)\n\nA heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows loc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4892/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-12T09:24:59.615512Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/85f7b383-17fc-49cd-88d9-05df795a62af/export"/>
    <published>2026-05-12T09:24:59.615512+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/16ae8371-eee8-4d78-899c-1f23b61cf5f4/export</id>
    <title>16ae8371-eee8-4d78-899c-1f23b61cf5f4</title>
    <updated>2026-07-06T00:34:15.457036+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "16ae8371-eee8-4d78-899c-1f23b61cf5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllwxdg4m32k", "content": "CVE-2026-4892 - CVE-2026-4892\nCVE ID : CVE-2026-4892\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privi...", "creation_timestamp": "2026-05-11T18:51:06.402573Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/16ae8371-eee8-4d78-899c-1f23b61cf5f4/export"/>
    <published>2026-05-11T18:51:06.402573+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/73fb42ff-0617-4dc7-9a2b-0f2108c1fc55/export</id>
    <title>73fb42ff-0617-4dc7-9a2b-0f2108c1fc55</title>
    <updated>2026-07-06T00:34:15.457107+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "73fb42ff-0617-4dc7-9a2b-0f2108c1fc55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllwxdg4m32k", "content": "CVE-2026-4892 - CVE-2026-4892\nCVE ID : CVE-2026-4892\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privi...", "creation_timestamp": "2026-05-11T18:51:06.398655Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/73fb42ff-0617-4dc7-9a2b-0f2108c1fc55/export"/>
    <published>2026-05-11T18:51:06.398655+00:00</published>
  </entry>
</feed>
