<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-04T05:08:14.652639+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/400b317e-03d0-42f7-84dd-ee9d8c952878/export</id>
    <title>400b317e-03d0-42f7-84dd-ee9d8c952878</title>
    <updated>2026-10-04T05:08:14.671386+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "400b317e-03d0-42f7-84dd-ee9d8c952878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78210", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwssoo373n2y", "content": "High-severity vuln (CVSS 7.1) in Octopus Deploy Octopus Server lets scoped users run scripts w/o proper auth. Review permissions &amp;amp; monitor for patches. Affects versions 2019.5.9+ to &amp;lt;2026.3.13951. https://radar.offseq.com/threat/cve-2026-78210-cwe-863-incorrect-authorization-in-octopus-deploy-oct...", "creation_timestamp": "2026-10-01T12:00:27.553540Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/400b317e-03d0-42f7-84dd-ee9d8c952878/export"/>
    <published>2026-10-01T12:00:27.553540+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f6fa406a-ba7d-4603-9290-ac4a95966b5e/export</id>
    <title>f6fa406a-ba7d-4603-9290-ac4a95966b5e</title>
    <updated>2026-10-04T05:08:14.672497+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f6fa406a-ba7d-4603-9290-ac4a95966b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78210", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117365540398021924", "content": "CVE-2026-78210: HIGH severity in Octopus Server (CVSS 7.1) lets users with scoped permissions execute unauthorized scripts in certain environments. Patch status unknown \u2014 minimize permissions and monitor for updates. https://radar.offseq.com/threat/cve-2026-78210-cwe-863-incorrect-authorization-in-octopus-deploy-octopus-server-50d97dfe20efe99c #OffSeq #OctopusDeploy #Vuln #CVE202678210", "creation_timestamp": "2026-10-01T12:00:24.894924Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f6fa406a-ba7d-4603-9290-ac4a95966b5e/export"/>
    <published>2026-10-01T12:00:24.894924+00:00</published>
  </entry>
</feed>
