<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 09:41:41 +0000</lastBuildDate>
    <item>
      <title>a79e626b-b557-4c8d-b00e-b21f5ef5ef1a</title>
      <link>https://vulnerability.circl.lu/sighting/a79e626b-b557-4c8d-b00e-b21f5ef5ef1a/export</link>
      <description>{"uuid": "a79e626b-b557-4c8d-b00e-b21f5ef5ef1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13248", "type": "seen", "source": "https://t.me/ics_cert/1443", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 Honeywell PD45 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f\n\nHoneywell PD45 \u06cc\u06a9 \u0686\u0627\u067e\u06af\u0631 \u0635\u0646\u0639\u062a\u06cc \u062a\u0631\u0645\u0627\u0644 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0635\u0646\u0627\u06cc\u0639 \u0645\u062e\u062a\u0644\u0641\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u062a\u0648\u0644\u06cc\u062f\u060c \u0644\u062c\u0633\u062a\u06cc\u06a9 \u0648 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u200c\u0647\u0627\u06cc \u0627\u0646\u0628\u0627\u0631 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u062f\u0633\u062a\u06af\u0627\u0647 \u0627\u0632 \u0627\u062a\u0635\u0627\u0644 \u0634\u0628\u06a9\u0647 \u0648 \u0632\u0628\u0627\u0646 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc Fingerprint \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 (firmware) \u0627\u0632 F10.19.010040 \u0628\u0647 \u0628\u0639\u062f \u0648 \u062a\u0627 F10.22.030745 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f.\n\nCVE-2026-13248, CVSS 8.8, CWE-73, CWE-434, CWE-78\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648\u0628 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u0631\u0627\u0628\u0637 \u0641\u0631\u0645\u0627\u0646 Intermec Fingerprint \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f. \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc admin \u06cc\u0627 itadmin \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0631\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0631\u0627 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0628\u0647 \u0645\u0641\u0633\u0631 \u062f\u0627\u062e\u0644\u06cc \u0686\u0627\u067e\u06af\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0632\u0628\u0627\u0646 Intermec Fingerprint \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0634\u0628\u06a9\u0647 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u062a\u0639\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u0646\u062f\u0627\u0631\u062f \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0645\u062e\u0631\u0628 \u0634\u0648\u062f.\n\n\u0634\u0631\u06a9\u062a Honeywell\u060c \u0646\u0633\u062e\u0647 F10.22.030745 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0645\u0639\u0631\u0641\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u06af\u0632\u0627\u0631\u0634 CISA ADP \u0628\u0647 \u062a\u0627\u0631\u06cc\u062e 24 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 2026\u060c \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 CVE\u060c \"Exploitation: none\" \u0630\u06a9\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0645\u0646\u0628\u0639: Honeywell Product Security\nhttps://www.honeywell.com/us/en/legal/product-security#security-notices\n\n\u0645\u0646\u0628\u0639: CVE Program, CVE-2026-13248\nhttps://www.cve.org/CVERecord?id=CVE-2026-13248\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-28T17:19:13.000000Z"}</description>
      <content:encoded>{"uuid": "a79e626b-b557-4c8d-b00e-b21f5ef5ef1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13248", "type": "seen", "source": "https://t.me/ics_cert/1443", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 Honeywell PD45 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f\n\nHoneywell PD45 \u06cc\u06a9 \u0686\u0627\u067e\u06af\u0631 \u0635\u0646\u0639\u062a\u06cc \u062a\u0631\u0645\u0627\u0644 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0635\u0646\u0627\u06cc\u0639 \u0645\u062e\u062a\u0644\u0641\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u062a\u0648\u0644\u06cc\u062f\u060c \u0644\u062c\u0633\u062a\u06cc\u06a9 \u0648 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u200c\u0647\u0627\u06cc \u0627\u0646\u0628\u0627\u0631 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u062f\u0633\u062a\u06af\u0627\u0647 \u0627\u0632 \u0627\u062a\u0635\u0627\u0644 \u0634\u0628\u06a9\u0647 \u0648 \u0632\u0628\u0627\u0646 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc Fingerprint \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 (firmware) \u0627\u0632 F10.19.010040 \u0628\u0647 \u0628\u0639\u062f \u0648 \u062a\u0627 F10.22.030745 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f.\n\nCVE-2026-13248, CVSS 8.8, CWE-73, CWE-434, CWE-78\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648\u0628 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u0631\u0627\u0628\u0637 \u0641\u0631\u0645\u0627\u0646 Intermec Fingerprint \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f. \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc admin \u06cc\u0627 itadmin \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0631\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0631\u0627 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0628\u0647 \u0645\u0641\u0633\u0631 \u062f\u0627\u062e\u0644\u06cc \u0686\u0627\u067e\u06af\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0632\u0628\u0627\u0646 Intermec Fingerprint \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0634\u0628\u06a9\u0647 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u062a\u0639\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u0646\u062f\u0627\u0631\u062f \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0645\u062e\u0631\u0628 \u0634\u0648\u062f.\n\n\u0634\u0631\u06a9\u062a Honeywell\u060c \u0646\u0633\u062e\u0647 F10.22.030745 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0645\u0639\u0631\u0641\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u06af\u0632\u0627\u0631\u0634 CISA ADP \u0628\u0647 \u062a\u0627\u0631\u06cc\u062e 24 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 2026\u060c \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 CVE\u060c \"Exploitation: none\" \u0630\u06a9\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0645\u0646\u0628\u0639: Honeywell Product Security\nhttps://www.honeywell.com/us/en/legal/product-security#security-notices\n\n\u0645\u0646\u0628\u0639: CVE Program, CVE-2026-13248\nhttps://www.cve.org/CVERecord?id=CVE-2026-13248\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-28T17:19:13.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a79e626b-b557-4c8d-b00e-b21f5ef5ef1a/export</guid>
      <pubDate>Mon, 28 Sep 2026 17:19:13 +0000</pubDate>
    </item>
    <item>
      <title>b0a9e32b-7174-4efd-a602-a7732185d49d</title>
      <link>https://vulnerability.circl.lu/sighting/b0a9e32b-7174-4efd-a602-a7732185d49d/export</link>
      <description>{"uuid": "b0a9e32b-7174-4efd-a602-a7732185d49d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13742", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwkko5nbis2d", "content": "SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742\n\nPosted by SEC Consult Vulnerability Lab via Fulldisclosure on Sep 26SEC Consult Vulnerability Lab Security Advisory &amp;lt; 20260923-0 &amp;gt; \n=================================\u2026\n#hackernews #news", "creation_timestamp": "2026-09-28T05:15:42.416441Z"}</description>
      <content:encoded>{"uuid": "b0a9e32b-7174-4efd-a602-a7732185d49d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13742", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwkko5nbis2d", "content": "SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742\n\nPosted by SEC Consult Vulnerability Lab via Fulldisclosure on Sep 26SEC Consult Vulnerability Lab Security Advisory &amp;lt; 20260923-0 &amp;gt; \n=================================\u2026\n#hackernews #news", "creation_timestamp": "2026-09-28T05:15:42.416441Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b0a9e32b-7174-4efd-a602-a7732185d49d/export</guid>
      <pubDate>Mon, 28 Sep 2026 05:15:42 +0000</pubDate>
    </item>
    <item>
      <title>e41322f4-bab5-46b2-9e38-0c7fab0b4982</title>
      <link>https://vulnerability.circl.lu/sighting/e41322f4-bab5-46b2-9e38-0c7fab0b4982/export</link>
      <description>{"uuid": "e41322f4-bab5-46b2-9e38-0c7fab0b4982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13016", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mwjw2y3ugs26", "content": "ServiceNow AI Platform\u306b5\u4ef6\u306e\u8106\u5f31\u6027-CVE-2026-13016,CVE-2026-86860 \u4ed6 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-09-27T23:07:05.822688Z"}</description>
      <content:encoded>{"uuid": "e41322f4-bab5-46b2-9e38-0c7fab0b4982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13016", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mwjw2y3ugs26", "content": "ServiceNow AI Platform\u306b5\u4ef6\u306e\u8106\u5f31\u6027-CVE-2026-13016,CVE-2026-86860 \u4ed6 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-09-27T23:07:05.822688Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e41322f4-bab5-46b2-9e38-0c7fab0b4982/export</guid>
      <pubDate>Sun, 27 Sep 2026 23:07:05 +0000</pubDate>
    </item>
    <item>
      <title>d06e15f6-5d5a-4c95-aae6-f6b53029459a</title>
      <link>https://vulnerability.circl.lu/sighting/d06e15f6-5d5a-4c95-aae6-f6b53029459a/export</link>
      <description>{"uuid": "d06e15f6-5d5a-4c95-aae6-f6b53029459a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13249", "type": "seen", "source": "Telegram/aouElhUq9Ye3BGvbzz59jTMPBnYDztZUvud3qnXOw9ieT70", "content": "", "creation_timestamp": "2026-09-26T21:00:05.000000Z"}</description>
      <content:encoded>{"uuid": "d06e15f6-5d5a-4c95-aae6-f6b53029459a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13249", "type": "seen", "source": "Telegram/aouElhUq9Ye3BGvbzz59jTMPBnYDztZUvud3qnXOw9ieT70", "content": "", "creation_timestamp": "2026-09-26T21:00:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d06e15f6-5d5a-4c95-aae6-f6b53029459a/export</guid>
      <pubDate>Sat, 26 Sep 2026 21:00:05 +0000</pubDate>
    </item>
    <item>
      <title>d23ba96c-9c46-4cd4-9e3a-f5b639a5052f</title>
      <link>https://vulnerability.circl.lu/sighting/d23ba96c-9c46-4cd4-9e3a-f5b639a5052f/export</link>
      <description>{"uuid": "d23ba96c-9c46-4cd4-9e3a-f5b639a5052f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13795", "type": "seen", "source": "Telegram/-vpUX2d8KvarI3rbVgvLB4TLB_qdAG312hy8soMbcuCP5BM", "content": "", "creation_timestamp": "2026-09-26T15:49:17.000000Z"}</description>
      <content:encoded>{"uuid": "d23ba96c-9c46-4cd4-9e3a-f5b639a5052f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13795", "type": "seen", "source": "Telegram/-vpUX2d8KvarI3rbVgvLB4TLB_qdAG312hy8soMbcuCP5BM", "content": "", "creation_timestamp": "2026-09-26T15:49:17.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d23ba96c-9c46-4cd4-9e3a-f5b639a5052f/export</guid>
      <pubDate>Sat, 26 Sep 2026 15:49:17 +0000</pubDate>
    </item>
    <item>
      <title>7c743ba7-254f-4e50-b5bd-b75d2a02fb6f</title>
      <link>https://vulnerability.circl.lu/sighting/7c743ba7-254f-4e50-b5bd-b75d2a02fb6f/export</link>
      <description>{"uuid": "7c743ba7-254f-4e50-b5bd-b75d2a02fb6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13795", "type": "published-proof-of-concept", "source": "Telegram/-vpUX2d8KvarI3rbVgvLB4TLB_qdAG312hy8soMbcuCP5BM", "content": "", "creation_timestamp": "2026-09-26T15:49:17.000000Z"}</description>
      <content:encoded>{"uuid": "7c743ba7-254f-4e50-b5bd-b75d2a02fb6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13795", "type": "published-proof-of-concept", "source": "Telegram/-vpUX2d8KvarI3rbVgvLB4TLB_qdAG312hy8soMbcuCP5BM", "content": "", "creation_timestamp": "2026-09-26T15:49:17.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7c743ba7-254f-4e50-b5bd-b75d2a02fb6f/export</guid>
      <pubDate>Sat, 26 Sep 2026 15:49:17 +0000</pubDate>
    </item>
    <item>
      <title>09a38b54-3b4a-4e5d-aaeb-8e4de93daa2a</title>
      <link>https://vulnerability.circl.lu/sighting/09a38b54-3b4a-4e5d-aaeb-8e4de93daa2a/export</link>
      <description>{"uuid": "09a38b54-3b4a-4e5d-aaeb-8e4de93daa2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13249", "type": "seen", "source": "Telegram/1icfDYPfcqBNy4oZYvRCCHditTCoxypxb2kpqptiMANqlNw", "content": "", "creation_timestamp": "2026-09-26T15:00:22.000000Z"}</description>
      <content:encoded>{"uuid": "09a38b54-3b4a-4e5d-aaeb-8e4de93daa2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13249", "type": "seen", "source": "Telegram/1icfDYPfcqBNy4oZYvRCCHditTCoxypxb2kpqptiMANqlNw", "content": "", "creation_timestamp": "2026-09-26T15:00:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/09a38b54-3b4a-4e5d-aaeb-8e4de93daa2a/export</guid>
      <pubDate>Sat, 26 Sep 2026 15:00:22 +0000</pubDate>
    </item>
    <item>
      <title>738c09df-d56c-4e3c-9c48-8775853e8130</title>
      <link>https://vulnerability.circl.lu/sighting/738c09df-d56c-4e3c-9c48-8775853e8130/export</link>
      <description>{"uuid": "738c09df-d56c-4e3c-9c48-8775853e8130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13249", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103427", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13249\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 11:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040\u2013before F10.22.030745) leading to RCE. Python check/exploit PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T12:00:08.000000Z"}</description>
      <content:encoded>{"uuid": "738c09df-d56c-4e3c-9c48-8775853e8130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13249", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103427", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13249\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 11:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040\u2013before F10.22.030745) leading to RCE. Python check/exploit PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T12:00:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/738c09df-d56c-4e3c-9c48-8775853e8130/export</guid>
      <pubDate>Sat, 26 Sep 2026 12:00:08 +0000</pubDate>
    </item>
    <item>
      <title>72c57232-c5d5-4564-b26e-45af5e51a7fc</title>
      <link>https://vulnerability.circl.lu/sighting/72c57232-c5d5-4564-b26e-45af5e51a7fc/export</link>
      <description>{"uuid": "72c57232-c5d5-4564-b26e-45af5e51a7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13249", "type": "seen", "source": "https://t.me/GithubRedTeam/103427", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13249\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 11:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040\u2013before F10.22.030745) leading to RCE. Python check/exploit PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T12:00:08.000000Z"}</description>
      <content:encoded>{"uuid": "72c57232-c5d5-4564-b26e-45af5e51a7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13249", "type": "seen", "source": "https://t.me/GithubRedTeam/103427", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13249\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 11:59:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload on Honeywell PD45 web admin (firmware F10.19.010040\u2013before F10.22.030745) leading to RCE. Python check/exploit PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T12:00:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/72c57232-c5d5-4564-b26e-45af5e51a7fc/export</guid>
      <pubDate>Sat, 26 Sep 2026 12:00:08 +0000</pubDate>
    </item>
    <item>
      <title>173ae26a-87e9-4a86-9406-06de2f2c7b27</title>
      <link>https://vulnerability.circl.lu/sighting/173ae26a-87e9-4a86-9406-06de2f2c7b27/export</link>
      <description>{"uuid": "173ae26a-87e9-4a86-9406-06de2f2c7b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13354", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117333374673101705", "content": "CVE-2026-13354: Stored XSS in Asset CleanUp WordPress plugin up to 1.4.0.5. Unauthenticated attackers can inject scripts via comment content. CVSS 7.2, no patch yet. Update or disable combine_loaded_css now. https://www.valtersit.com/cve/CVE-2026-13354/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-25T19:40:31.324752Z"}</description>
      <content:encoded>{"uuid": "173ae26a-87e9-4a86-9406-06de2f2c7b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13354", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117333374673101705", "content": "CVE-2026-13354: Stored XSS in Asset CleanUp WordPress plugin up to 1.4.0.5. Unauthenticated attackers can inject scripts via comment content. CVSS 7.2, no patch yet. Update or disable combine_loaded_css now. https://www.valtersit.com/cve/CVE-2026-13354/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-25T19:40:31.324752Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/173ae26a-87e9-4a86-9406-06de2f2c7b27/export</guid>
      <pubDate>Fri, 25 Sep 2026 19:40:31 +0000</pubDate>
    </item>
  </channel>
</rss>
