<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T10:04:18.233593+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4c8f0624-bf6a-4003-bff7-be447c286ab7/export</id>
    <title>4c8f0624-bf6a-4003-bff7-be447c286ab7</title>
    <updated>2026-10-11T10:04:18.253559+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4c8f0624-bf6a-4003-bff7-be447c286ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "published-proof-of-concept", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "content": "", "creation_timestamp": "2026-09-19T00:00:10.888720Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4c8f0624-bf6a-4003-bff7-be447c286ab7/export"/>
    <published>2026-09-19T00:00:10.888720+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/94395939-2bfc-4884-b796-8a7873a9d33e/export</id>
    <title>94395939-2bfc-4884-b796-8a7873a9d33e</title>
    <updated>2026-10-11T10:04:18.255048+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "94395939-2bfc-4884-b796-8a7873a9d33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "content": "", "creation_timestamp": "2026-09-18T04:00:15.722170Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/94395939-2bfc-4884-b796-8a7873a9d33e/export"/>
    <published>2026-09-18T04:00:15.722170+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b1f4a51e-e243-4491-b41c-2b27428c92cb/export</id>
    <title>b1f4a51e-e243-4491-b41c-2b27428c92cb</title>
    <updated>2026-10-11T10:04:18.255175+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b1f4a51e-e243-4491-b41c-2b27428c92cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102322", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE #metadata\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-86259\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a uziii2208\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a TypeScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 16:56:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOpenMAIC 1.0.0: Unauthenticated Outbound SSRF to Cloud Metadata Service via Fail-Open Middleware and Environment-Gated Validation Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-14T19:00:05.598476Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b1f4a51e-e243-4491-b41c-2b27428c92cb/export"/>
    <published>2026-09-14T19:00:05.598476+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/087047e8-6ce4-492d-b74a-dbac90f97feb/export</id>
    <title>087047e8-6ce4-492d-b74a-dbac90f97feb</title>
    <updated>2026-10-11T10:04:18.255299+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "087047e8-6ce4-492d-b74a-dbac90f97feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muu6tdc6pg2f", "content": "CVE-2026-86259 - openmaic\nOlder versions of OpenMAIC do not properly check URLs when they are run in test or development mode. This lets anyone on the network send specially crafted requests that reach the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openmaic #thumaic #CVE #infosec", "creation_timestamp": "2026-09-06T14:20:04.678897Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/087047e8-6ce4-492d-b74a-dbac90f97feb/export"/>
    <published>2026-09-06T14:20:04.678897+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d/export</id>
    <title>5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d</title>
    <updated>2026-10-11T10:04:18.255400+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muu5qfieq42p", "content": "\ud83d\udfe0 CVE-2026-86259 - High (7.5)\n\nOpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86259/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T14:00:48.525293Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d/export"/>
    <published>2026-09-06T14:00:48.525293+00:00</published>
  </entry>
</feed>
