<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-29T15:21:52.120814+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/55990e4e-e36b-437e-90f7-cea443829ac6/export</id>
    <title>55990e4e-e36b-437e-90f7-cea443829ac6</title>
    <updated>2026-09-29T15:21:52.138409+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "55990e4e-e36b-437e-90f7-cea443829ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6922", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117352212744797040", "content": "CVE-2026-6922: WP Table Builder plugin, incorrect authorization up to 2.2.1. Auth attackers can trash or restore tables they shouldn't. CVSS 7.1. No patch yet. Disable the plugin until fixed.https://www.valtersit.com/cve/CVE-2026-6922/#WordPress #infosec #CVE", "creation_timestamp": "2026-09-29T03:31:01.160318Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/55990e4e-e36b-437e-90f7-cea443829ac6/export"/>
    <published>2026-09-29T03:31:01.160318+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8c1f05ae-7921-4c84-b597-0dbeb9669c20/export</id>
    <title>8c1f05ae-7921-4c84-b597-0dbeb9669c20</title>
    <updated>2026-09-29T15:21:52.139737+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8c1f05ae-7921-4c84-b597-0dbeb9669c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6922", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwmvbbovhd27", "content": "CVE-2026-6922: WP Table Builder plugin, incorrect authorization up to 2.2.1. Auth attackers can trash or restore tables they shouldn't. CVSS 7.1. No patch yet. Disable the plugin until fixed.\nhttps://www.valtersit.com/cve/CVE-2026-6922/\n#WordPress #infosec #CVE", "creation_timestamp": "2026-09-29T03:30:40.054485Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8c1f05ae-7921-4c84-b597-0dbeb9669c20/export"/>
    <published>2026-09-29T03:30:40.054485+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b63b9637-12e4-432f-9990-c39fb1c30000/export</id>
    <title>b63b9637-12e4-432f-9990-c39fb1c30000</title>
    <updated>2026-09-29T15:21:52.139842+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b63b9637-12e4-432f-9990-c39fb1c30000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69227", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwmpamksk62u", "content": "Esri patched three Portal for ArcGIS vulnerabilities, including CVE-2026-69227. Apply Security Update 4 to secure your enterprise GIS environment today.\n\n#ArcGIS #Esri #CVE202669227 #CVE202669226 #Cybersecurity #Vulnerability", "creation_timestamp": "2026-09-29T01:42:56.074815Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b63b9637-12e4-432f-9990-c39fb1c30000/export"/>
    <published>2026-09-29T01:42:56.074815+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2063c157-2e77-42eb-b54a-4c51b38e830e/export</id>
    <title>2063c157-2e77-42eb-b54a-4c51b38e830e</title>
    <updated>2026-09-29T15:21:52.139925+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "2063c157-2e77-42eb-b54a-4c51b38e830e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-69222", "type": "published-proof-of-concept", "source": "https://github.com/harttle/liquidjs/security/advisories/GHSA-4r6h-5v86-94p3", "content": "", "creation_timestamp": "2026-09-08T20:35:20.061779Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2063c157-2e77-42eb-b54a-4c51b38e830e/export"/>
    <published>2026-09-08T20:35:20.061779+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fce0a6e8-e06b-4c0c-8b42-84ec7c3be902/export</id>
    <title>fce0a6e8-e06b-4c0c-8b42-84ec7c3be902</title>
    <updated>2026-09-29T15:21:52.140869+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "fce0a6e8-e06b-4c0c-8b42-84ec7c3be902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-69223", "type": "seen", "source": "https://jvn.jp/en/jp/JVN06609828", "content": "", "creation_timestamp": "2026-08-18T04:50:09.928353Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fce0a6e8-e06b-4c0c-8b42-84ec7c3be902/export"/>
    <published>2026-08-18T04:50:09.928353+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8d1f04e1-520b-4981-a639-e23aaebaed59/export</id>
    <title>8d1f04e1-520b-4981-a639-e23aaebaed59</title>
    <updated>2026-09-29T15:21:52.140951+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8d1f04e1-520b-4981-a639-e23aaebaed59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69223", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvwq5x3bl2u", "content": "CVE-2026-69223 - apache allura\nApache Allura's webhooks are not secure, which means attackers can trick the system into making unauthorized requests. This could lead to sensitive data being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apacheallura #apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-12T20:10:04.592449Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8d1f04e1-520b-4981-a639-e23aaebaed59/export"/>
    <published>2026-08-12T20:10:04.592449+00:00</published>
  </entry>
</feed>
