<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-04T11:31:16.665882+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/51d66a89-0de8-42dd-9610-19f03d705686/export</id>
    <title>51d66a89-0de8-42dd-9610-19f03d705686</title>
    <updated>2026-10-04T11:31:16.686764+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "51d66a89-0de8-42dd-9610-19f03d705686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95102", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwygwhqh5k2a", "content": "\ud83d\udd34 CVE-2026-95102 - Critical (9.4)\n\nWebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate char...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-95102/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T17:46:02.886977Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/51d66a89-0de8-42dd-9610-19f03d705686/export"/>
    <published>2026-10-03T17:46:02.886977+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/df98e36b-003e-43a5-8fd2-dfa4c6fefe6d/export</id>
    <title>df98e36b-003e-43a5-8fd2-dfa4c6fefe6d</title>
    <updated>2026-10-04T11:31:16.687910+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "df98e36b-003e-43a5-8fd2-dfa4c6fefe6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-95102", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwwvgwprap2j", "content": "CRITICAL vuln in Monta monta.app (CVE-2026-95102, CVSS 9.4): missing WebSocket auth lets attackers impersonate charging stations. Restrict endpoint access &amp;amp; monitor activity. More: https://radar.offseq.com/threat/cve-2026-95102-cwe-306-in-monta-montaapp-d0effdc35e6b46a2 #OffSeq #CVE202695102 #AppSec", "creation_timestamp": "2026-10-03T03:00:27.760096Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/df98e36b-003e-43a5-8fd2-dfa4c6fefe6d/export"/>
    <published>2026-10-03T03:00:27.760096+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/976781cf-e083-4bf2-a11b-50a7ee76af78/export</id>
    <title>976781cf-e083-4bf2-a11b-50a7ee76af78</title>
    <updated>2026-10-04T11:31:16.688043+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "976781cf-e083-4bf2-a11b-50a7ee76af78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-95102", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117374741695395555", "content": "Monta monta.app faces a CRITICAL risk (CVE-2026-95102, CVSS 9.4): missing auth on WebSocket endpoints allows attackers to impersonate charging stations &amp;amp; access sensitive data. Restrict access, monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-95102-cwe-306-in-monta-montaapp-d0effdc35e6b46a2 #OffSeq #CVE202695102 #InfoSec \u26a1\ufe0f", "creation_timestamp": "2026-10-03T03:00:26.824254Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/976781cf-e083-4bf2-a11b-50a7ee76af78/export"/>
    <published>2026-10-03T03:00:26.824254+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2886c22f-e8e3-4523-a7e6-8a7f31c4e6aa/export</id>
    <title>2886c22f-e8e3-4523-a7e6-8a7f31c4e6aa</title>
    <updated>2026-10-04T11:31:16.688160+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2886c22f-e8e3-4523-a7e6-8a7f31c4e6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95102", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwlrjel432o", "content": "\ud83d\udea8 CVE-2026-95102 \u2014 CVSS 9.3 CRITICAL\n\nWebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stati...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-95102\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-03T00:07:24.870677Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2886c22f-e8e3-4523-a7e6-8a7f31c4e6aa/export"/>
    <published>2026-10-03T00:07:24.870677+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f792b610-8c34-4b07-8beb-2ae27b6d30df/export</id>
    <title>f792b610-8c34-4b07-8beb-2ae27b6d30df</title>
    <updated>2026-10-04T11:31:16.688262+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f792b610-8c34-4b07-8beb-2ae27b6d30df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95102", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d6cp6xyctb7i5", "content": "CVE-2026-95102 - Monta monta.app Missing Authentication for Critical Function\nCVE ID : CVE-2026-95102\n \n Published : Oct. 2, 2026, 10:16 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate c...", "creation_timestamp": "2026-10-02T23:48:16.168796Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f792b610-8c34-4b07-8beb-2ae27b6d30df/export"/>
    <published>2026-10-02T23:48:16.168796+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4902b13c-7fa4-4e21-8f6b-0127d0b7f268/export</id>
    <title>4902b13c-7fa4-4e21-8f6b-0127d0b7f268</title>
    <updated>2026-10-04T11:31:16.688362+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4902b13c-7fa4-4e21-8f6b-0127d0b7f268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95102", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwuikidpby24", "content": "~Cisa~\nUnauthenticated WebSockets could enable admin takeover or charging disruption.\n-\nIOCs: CVE-2026-95102, CVE-2026-97363, CVE-2026-97212\n-\n#CVE202695102 #ICS #ThreatIntel", "creation_timestamp": "2026-10-02T04:04:28.570006Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4902b13c-7fa4-4e21-8f6b-0127d0b7f268/export"/>
    <published>2026-10-02T04:04:28.570006+00:00</published>
  </entry>
</feed>
