<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-15T04:37:54.455989+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/97bb48c1-0bb0-4384-aa36-ee3c0fc55c5b/export</id>
    <title>97bb48c1-0bb0-4384-aa36-ee3c0fc55c5b</title>
    <updated>2026-09-15T04:37:54.484227+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "97bb48c1-0bb0-4384-aa36-ee3c0fc55c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvigupdgwn2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T15:37:14.938751Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/97bb48c1-0bb0-4384-aa36-ee3c0fc55c5b/export"/>
    <published>2026-09-14T15:37:14.938751+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9ad594a-c2ad-4012-aac9-b5aac160828d/export</id>
    <title>d9ad594a-c2ad-4012-aac9-b5aac160828d</title>
    <updated>2026-09-15T04:37:54.486405+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9ad594a-c2ad-4012-aac9-b5aac160828d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/cybercod.bsky.social/post/3mviazzooiq2s", "content": "Thanks for sharing this critical alert! If you're using OCaml's `jose` package, update to 0.11.0+ ASAP to mitigate CVE-2026-89086. Public exploits mean immediate action. Stay safe!", "creation_timestamp": "2026-09-14T13:52:56.047001Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9ad594a-c2ad-4012-aac9-b5aac160828d/export"/>
    <published>2026-09-14T13:52:56.047001+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f1af25f0-eb81-4318-8228-5192c036b1e1/export</id>
    <title>f1af25f0-eb81-4318-8228-5192c036b1e1</title>
    <updated>2026-09-15T04:37:54.486542+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f1af25f0-eb81-4318-8228-5192c036b1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvi7doc7si2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T13:22:27.657157Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f1af25f0-eb81-4318-8228-5192c036b1e1/export"/>
    <published>2026-09-14T13:22:27.657157+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5ba10a1e-609c-4387-a907-731cd2a5d990/export</id>
    <title>5ba10a1e-609c-4387-a907-731cd2a5d990</title>
    <updated>2026-09-15T04:37:54.486658+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5ba10a1e-609c-4387-a907-731cd2a5d990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvhuleql6f26", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T10:09:54.542475Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5ba10a1e-609c-4387-a907-731cd2a5d990/export"/>
    <published>2026-09-14T10:09:54.542475+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b073cab2-2e41-474a-a39c-da723879717e/export</id>
    <title>b073cab2-2e41-474a-a39c-da723879717e</title>
    <updated>2026-09-15T04:37:54.486764+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b073cab2-2e41-474a-a39c-da723879717e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvhcl4xrad2u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T04:47:40.944296Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b073cab2-2e41-474a-a39c-da723879717e/export"/>
    <published>2026-09-14T04:47:40.944296+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9573a875-3be5-429f-b976-a0aa760f53d6/export</id>
    <title>9573a875-3be5-429f-b976-a0aa760f53d6</title>
    <updated>2026-09-15T04:37:54.486871+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9573a875-3be5-429f-b976-a0aa760f53d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mver6bcbid2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T04:30:54.377139Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9573a875-3be5-429f-b976-a0aa760f53d6/export"/>
    <published>2026-09-13T04:30:54.377139+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/11686bd9-95f4-473d-ab9b-d5f96720b6ac/export</id>
    <title>11686bd9-95f4-473d-ab9b-d5f96720b6ac</title>
    <updated>2026-09-15T04:37:54.486968+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "11686bd9-95f4-473d-ab9b-d5f96720b6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvenhywwpu2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds,\u2026\nCVSS 9.1 \u00b7 EPSS 0.2%\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T03:24:46.368100Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/11686bd9-95f4-473d-ab9b-d5f96720b6ac/export"/>
    <published>2026-09-13T03:24:46.368100+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2c14a80b-5cd3-4995-813a-a0e5fb76ee6f/export</id>
    <title>2c14a80b-5cd3-4995-813a-a0e5fb76ee6f</title>
    <updated>2026-09-15T04:37:54.487069+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2c14a80b-5cd3-4995-813a-a0e5fb76ee6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdka6jmvt2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T16:54:03.164956Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2c14a80b-5cd3-4995-813a-a0e5fb76ee6f/export"/>
    <published>2026-09-12T16:54:03.164956+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7f8cfa79-d55c-4840-9f56-0e9bb437047f/export</id>
    <title>7f8cfa79-d55c-4840-9f56-0e9bb437047f</title>
    <updated>2026-09-15T04:37:54.487173+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7f8cfa79-d55c-4840-9f56-0e9bb437047f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvd43ogj372q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T12:40:59.060502Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7f8cfa79-d55c-4840-9f56-0e9bb437047f/export"/>
    <published>2026-09-12T12:40:59.060502+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18c24351-83c4-4732-9942-5c4a0623e9f9/export</id>
    <title>18c24351-83c4-4732-9942-5c4a0623e9f9</title>
    <updated>2026-09-15T04:37:54.487271+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18c24351-83c4-4732-9942-5c4a0623e9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbyx6m6bc2u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T02:12:15.705438Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18c24351-83c4-4732-9942-5c4a0623e9f9/export"/>
    <published>2026-09-12T02:12:15.705438+00:00</published>
  </entry>
</feed>
