<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T22:22:42.616188+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2904c45a-e023-41e7-b203-cbcb72c3aed5/export</id>
    <title>2904c45a-e023-41e7-b203-cbcb72c3aed5</title>
    <updated>2026-10-11T22:22:42.640076+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2904c45a-e023-41e7-b203-cbcb72c3aed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi4x7whm22o", "content": "CVE-2026-86405 - prestashop virtual pos module\nThe PrestaShop Virtual POS extension from Sipay Electronic Money can be tricked into accepting forged payment signatures, letting attackers make payments appear legitimate. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-09T23:30:05.348007Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2904c45a-e023-41e7-b203-cbcb72c3aed5/export"/>
    <published>2026-10-09T23:30:05.348007+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6937a706-2583-4a4a-970a-fda319a5079b/export</id>
    <title>6937a706-2583-4a4a-970a-fda319a5079b</title>
    <updated>2026-10-11T22:22:42.642060+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6937a706-2583-4a4a-970a-fda319a5079b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxh5jqxjbu27", "content": "\ud83d\udea8 CVE-2026-86405 \u2014 CVSS 9.8 CRITICAL\n\nImproper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Servic...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86405\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T14:07:47.751039Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6937a706-2583-4a4a-970a-fda319a5079b/export"/>
    <published>2026-10-09T14:07:47.751039+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8/export</id>
    <title>5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8</title>
    <updated>2026-10-11T22:22:42.642167+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5zkzrfw2gh6rz", "content": "CVE-2026-86405 - Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop\nCVE ID : CVE-2026-86405\n \n Published : Oct. 9, 2026, 12:52 p.m. | 37\u00a0minutes ago\n \n Description : Improper verification of cryptographic signature vulnerability in Sipay Electronic Money...", "creation_timestamp": "2026-10-09T13:59:28.247433Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8/export"/>
    <published>2026-10-09T13:59:28.247433+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f6e8d4b6-50f5-422d-a96a-82db26ef9d88/export</id>
    <title>f6e8d4b6-50f5-422d-a96a-82db26ef9d88</title>
    <updated>2026-10-11T22:22:42.642248+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f6e8d4b6-50f5-422d-a96a-82db26ef9d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86405", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxh3h4qzeq2r", "content": "CRITICAL flaw (CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 \u2013 26.9.1): Improper signature checks allow spoofing &amp;amp; unauthorized actions. Monitor for vendor patches &amp;amp; restrict access. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature...", "creation_timestamp": "2026-10-09T13:30:32.253732Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f6e8d4b6-50f5-422d-a96a-82db26ef9d88/export"/>
    <published>2026-10-09T13:30:32.253732+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/91988c1a-6986-42c1-acd2-1a7253606f69/export</id>
    <title>91988c1a-6986-42c1-acd2-1a7253606f69</title>
    <updated>2026-10-11T22:22:42.642326+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "91988c1a-6986-42c1-acd2-1a7253606f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86405", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117411193134892551", "content": "CVE-2026-86405 (CRITICAL, CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 \u2013 26.9.1): Improper cryptographic signature checks allow spoofing &amp;amp; data tampering. Patch not confirmed \u2014 monitor vendor. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature-in-sipay-electronic-money-and-d1d195a6023ad286 #OffSeq #CVE #vuln #cybersecurity", "creation_timestamp": "2026-10-09T13:30:30.381706Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/91988c1a-6986-42c1-acd2-1a7253606f69/export"/>
    <published>2026-10-09T13:30:30.381706+00:00</published>
  </entry>
</feed>
