<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-01T11:34:14.494525+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3f2274e1-0075-488b-8317-95c74cf4becb/export</id>
    <title>3f2274e1-0075-488b-8317-95c74cf4becb</title>
    <updated>2026-10-01T11:34:14.528372+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3f2274e1-0075-488b-8317-95c74cf4becb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3muomfwb6ip2l", "content": "\ud83d\udccc CVE-2026-81704 - openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched... https://www.potatohub.blog/cves/CVE-2026-81704", "creation_timestamp": "2026-09-04T09:07:08.718769Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3f2274e1-0075-488b-8317-95c74cf4becb/export"/>
    <published>2026-09-04T09:07:08.718769+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3c3994ad-8cd0-4779-9b6b-6b1f2794b0cf/export</id>
    <title>3c3994ad-8cd0-4779-9b6b-6b1f2794b0cf</title>
    <updated>2026-10-01T11:34:14.531432+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3c3994ad-8cd0-4779-9b6b-6b1f2794b0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muomfv225223", "content": "\ud83d\udccc CVE-2026-81704 - openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched... https://www.cyberhub.blog/cves/CVE-2026-81704", "creation_timestamp": "2026-09-04T09:07:08.132665Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3c3994ad-8cd0-4779-9b6b-6b1f2794b0cf/export"/>
    <published>2026-09-04T09:07:08.132665+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bbe2a753-5813-4617-86a6-9cbc3a1a1e1d/export</id>
    <title>bbe2a753-5813-4617-86a6-9cbc3a1a1e1d</title>
    <updated>2026-10-01T11:34:14.531540+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bbe2a753-5813-4617-86a6-9cbc3a1a1e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81702", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3munyc54rji2l", "content": "\ud83d\udccc CVE-2026-81702 - openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute... https://www.cyberhub.blog/cves/CVE-2026-81702", "creation_timestamp": "2026-09-04T03:07:07.645196Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bbe2a753-5813-4617-86a6-9cbc3a1a1e1d/export"/>
    <published>2026-09-04T03:07:07.645196+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e7d9ae6b-acca-4892-b71b-095630a17cf3/export</id>
    <title>e7d9ae6b-acca-4892-b71b-095630a17cf3</title>
    <updated>2026-10-01T11:34:14.531618+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e7d9ae6b-acca-4892-b71b-095630a17cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81703", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujotdozev2l", "content": "\ud83d\udccc CVE-2026-81703 - openssl_encrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft f... https://www.cyberhub.blog/cves/CVE-2026-81703", "creation_timestamp": "2026-09-02T10:07:07.379041Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e7d9ae6b-acca-4892-b71b-095630a17cf3/export"/>
    <published>2026-09-02T10:07:07.379041+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e4543f1b-314d-4020-8542-c724ac56cc70/export</id>
    <title>e4543f1b-314d-4020-8542-c724ac56cc70</title>
    <updated>2026-10-01T11:34:14.531703+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e4543f1b-314d-4020-8542-c724ac56cc70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81705", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujn5ovuzb2f", "content": "\ud83d\udccc CVE-2026-81705 - openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellin... https://www.cyberhub.blog/cves/CVE-2026-81705", "creation_timestamp": "2026-09-02T09:37:07.676832Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e4543f1b-314d-4020-8542-c724ac56cc70/export"/>
    <published>2026-09-02T09:37:07.676832+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bce44651-ca38-4719-be8c-a83f7ab44250/export</id>
    <title>bce44651-ca38-4719-be8c-a83f7ab44250</title>
    <updated>2026-10-01T11:34:14.531771+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bce44651-ca38-4719-be8c-a83f7ab44250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81701", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujbg6cpvp2x", "content": "\ud83d\udccc CVE-2026-81701 - openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories... https://www.cyberhub.blog/cves/CVE-2026-81701", "creation_timestamp": "2026-09-02T06:07:07.410527Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bce44651-ca38-4719-be8c-a83f7ab44250/export"/>
    <published>2026-09-02T06:07:07.410527+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e6280a60-7f18-4d5e-afe5-ef81d6f15aaa/export</id>
    <title>e6280a60-7f18-4d5e-afe5-ef81d6f15aaa</title>
    <updated>2026-10-01T11:34:14.531842+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e6280a60-7f18-4d5e-afe5-ef81d6f15aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81700", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj7qjzqbm23", "content": "\ud83d\udccc CVE-2026-81700 - openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired ke... https://www.cyberhub.blog/cves/CVE-2026-81700", "creation_timestamp": "2026-09-02T05:37:08.320181Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e6280a60-7f18-4d5e-afe5-ef81d6f15aaa/export"/>
    <published>2026-09-02T05:37:08.320181+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b5c59a48-021e-4de7-99c1-93965b53dbcf/export</id>
    <title>b5c59a48-021e-4de7-99c1-93965b53dbcf</title>
    <updated>2026-10-01T11:34:14.531910+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b5c59a48-021e-4de7-99c1-93965b53dbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81706", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj4famslz2f", "content": "\ud83d\udccc CVE-2026-81706 - openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create ... https://www.cyberhub.blog/cves/CVE-2026-81706", "creation_timestamp": "2026-09-02T04:37:07.712835Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b5c59a48-021e-4de7-99c1-93965b53dbcf/export"/>
    <published>2026-09-02T04:37:07.712835+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aab005fe-0d55-4c09-b70f-5eb7ed60c9f8/export</id>
    <title>aab005fe-0d55-4c09-b70f-5eb7ed60c9f8</title>
    <updated>2026-10-01T11:34:14.531977+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aab005fe-0d55-4c09-b70f-5eb7ed60c9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81705", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mugxfesjqz2s", "content": "HIGH severity CVE just published in OpenSSL:\n\nCVE-2026-81705. openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81705", "creation_timestamp": "2026-09-01T08:02:23.735149Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aab005fe-0d55-4c09-b70f-5eb7ed60c9f8/export"/>
    <published>2026-09-01T08:02:23.735149+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4/export</id>
    <title>f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4</title>
    <updated>2026-10-01T11:34:14.532043+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mugk4ncenb2s", "content": "CVE-2026-81704 [HIGH] OpenSSL\n\nopenssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline passwor\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81704", "creation_timestamp": "2026-09-01T04:04:51.599641Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4/export"/>
    <published>2026-09-01T04:04:51.599641+00:00</published>
  </entry>
</feed>
