<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-12T05:42:48.408303+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6c544a5b-bc2a-4fcd-98de-81f55aa1d436/export</id>
    <title>6c544a5b-bc2a-4fcd-98de-81f55aa1d436</title>
    <updated>2026-10-12T05:42:48.428344+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "6c544a5b-bc2a-4fcd-98de-81f55aa1d436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85025", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0392", "content": "", "creation_timestamp": "2026-09-23T16:15:22.671926Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6c544a5b-bc2a-4fcd-98de-81f55aa1d436/export"/>
    <published>2026-09-23T16:15:22.671926+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/786edc03-056b-46e4-bb1d-7993578c5cd8/export</id>
    <title>786edc03-056b-46e4-bb1d-7993578c5cd8</title>
    <updated>2026-10-12T05:42:48.430172+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "786edc03-056b-46e4-bb1d-7993578c5cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85025", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0392", "content": "IBM heeft 12 kwetsbaarheden verholpen in IBM MQ, IBM MQ Appliance en Langflow OSS. De kwetsbaarheden kunnen leiden tot het uitvoeren van willekeurige code of commando's. Vier kwetsbaarheden zijn als kritiek aangemerkt en kunnen zonder authenticatie en gebruikersinteractie op afstand worden misbruikt.\n\nDe kwetsbaarheid met kenmerk CVE-2026-10747 heeft een CVSS-score van 10,0 en betreft een heap-based buffer overflow in IBM MQ. De kwetsbaarheden met kenmerk CVE-2026-79724, CVE-2026-85025 en CVE-2026-81204 hebben een CVSS-score van 9,8 en bevinden zich in Langflow OSS. Een niet-geauthenticeerde kwaadwillende kan deze kwetsbaarheden misbruiken om willekeurige code of OS-commando's uit te voeren. De overige kwetsbaarheden in Langflow hebben een CVSS-score van 8,8 en vereisen geauthenticeerde toegang.", "creation_timestamp": "2026-09-23T12:33:27.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/786edc03-056b-46e4-bb1d-7993578c5cd8/export"/>
    <published>2026-09-23T12:33:27+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d6683c90-bec0-4a9c-b14a-e39b642708a9/export</id>
    <title>d6683c90-bec0-4a9c-b14a-e39b642708a9</title>
    <updated>2026-10-12T05:42:48.432000+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d6683c90-bec0-4a9c-b14a-e39b642708a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85025", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvm47kpw4s2e", "content": "\ud83d\udccc CVE-2026-85025 - IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions th... https://www.cyberhub.blog/cves/CVE-2026-85025", "creation_timestamp": "2026-09-16T02:37:07.685651Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d6683c90-bec0-4a9c-b14a-e39b642708a9/export"/>
    <published>2026-09-16T02:37:07.685651+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9b735bc0-0dc8-455b-bf8b-df10f304a6fa/export</id>
    <title>9b735bc0-0dc8-455b-bf8b-df10f304a6fa</title>
    <updated>2026-10-12T05:42:48.432154+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9b735bc0-0dc8-455b-bf8b-df10f304a6fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85025", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv7437pldz24", "content": "CVE-2026-85025 - langflow oss\nVersions of the open\u2011source Langflow tool (up to 1.11.5) let anyone on the internet send commands that the system will execute and change or view chat sessions. This happens\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-09-10T22:30:05.044508Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9b735bc0-0dc8-455b-bf8b-df10f304a6fa/export"/>
    <published>2026-09-10T22:30:05.044508+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aa61001d-19e3-4765-9041-52fbaed6ed6c/export</id>
    <title>aa61001d-19e3-4765-9041-52fbaed6ed6c</title>
    <updated>2026-10-12T05:42:48.432281+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aa61001d-19e3-4765-9041-52fbaed6ed6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85025", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv72ujiath2f", "content": "\ud83d\udea8 CVE-2026-85025 \u2014 CVSS 9.8 CRITICAL\n\nIBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85025\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T22:08:26.294477Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aa61001d-19e3-4765-9041-52fbaed6ed6c/export"/>
    <published>2026-09-10T22:08:26.294477+00:00</published>
  </entry>
</feed>
