<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 05 Oct 2026 00:54:39 +0000</lastBuildDate>
    <item>
      <title>adaec3c1-e70b-47a1-8f54-871900a2d0d8</title>
      <link>https://vulnerability.circl.lu/sighting/adaec3c1-e70b-47a1-8f54-871900a2d0d8/export</link>
      <description>{"uuid": "adaec3c1-e70b-47a1-8f54-871900a2d0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4123", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwwyrjcisp22", "content": "CVE-2026-4123: Missing authorization in RW Elephant Rental Inventory for WordPress up to 2.3.13, CVSS 4.3. Subscriber-level users can toggle cache settings. Patch under review, so apply mitigations now. https://www.valtersit.com/cve/CVE-2026-4123/ #CVE #WordPress #infosec", "creation_timestamp": "2026-10-03T04:00:04.143893Z"}</description>
      <content:encoded>{"uuid": "adaec3c1-e70b-47a1-8f54-871900a2d0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4123", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwwyrjcisp22", "content": "CVE-2026-4123: Missing authorization in RW Elephant Rental Inventory for WordPress up to 2.3.13, CVSS 4.3. Subscriber-level users can toggle cache settings. Patch under review, so apply mitigations now. https://www.valtersit.com/cve/CVE-2026-4123/ #CVE #WordPress #infosec", "creation_timestamp": "2026-10-03T04:00:04.143893Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/adaec3c1-e70b-47a1-8f54-871900a2d0d8/export</guid>
      <pubDate>Sat, 03 Oct 2026 04:00:04 +0000</pubDate>
    </item>
    <item>
      <title>48365f7e-5dd0-4780-9a2b-a351b85cf9c0</title>
      <link>https://vulnerability.circl.lu/sighting/48365f7e-5dd0-4780-9a2b-a351b85cf9c0/export</link>
      <description>{"uuid": "48365f7e-5dd0-4780-9a2b-a351b85cf9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4123", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117374897487776987", "content": "CVE-2026-4123: Missing authorization in RW Elephant Rental Inventory for WordPress up to 2.3.13, CVSS 4.3. Subscriber-level users can toggle cache settings. Patch under review, so apply mitigations now. https://www.valtersit.com/cve/CVE-2026-4123/ #CVE #WordPress #infosec", "creation_timestamp": "2026-10-03T03:40:03.367475Z"}</description>
      <content:encoded>{"uuid": "48365f7e-5dd0-4780-9a2b-a351b85cf9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4123", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117374897487776987", "content": "CVE-2026-4123: Missing authorization in RW Elephant Rental Inventory for WordPress up to 2.3.13, CVSS 4.3. Subscriber-level users can toggle cache settings. Patch under review, so apply mitigations now. https://www.valtersit.com/cve/CVE-2026-4123/ #CVE #WordPress #infosec", "creation_timestamp": "2026-10-03T03:40:03.367475Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/48365f7e-5dd0-4780-9a2b-a351b85cf9c0/export</guid>
      <pubDate>Sat, 03 Oct 2026 03:40:03 +0000</pubDate>
    </item>
    <item>
      <title>eb2634a6-dc72-4b11-b09a-1ed87166bba4</title>
      <link>https://vulnerability.circl.lu/sighting/eb2634a6-dc72-4b11-b09a-1ed87166bba4/export</link>
      <description>{"uuid": "eb2634a6-dc72-4b11-b09a-1ed87166bba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-03)", "content": "", "creation_timestamp": "2026-10-03T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "eb2634a6-dc72-4b11-b09a-1ed87166bba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-03)", "content": "", "creation_timestamp": "2026-10-03T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eb2634a6-dc72-4b11-b09a-1ed87166bba4/export</guid>
      <pubDate>Sat, 03 Oct 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>fab2d2a6-d1a4-431a-9237-96a629008ead</title>
      <link>https://vulnerability.circl.lu/sighting/fab2d2a6-d1a4-431a-9237-96a629008ead/export</link>
      <description>{"uuid": "fab2d2a6-d1a4-431a-9237-96a629008ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-03)", "content": "", "creation_timestamp": "2026-10-03T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "fab2d2a6-d1a4-431a-9237-96a629008ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-03)", "content": "", "creation_timestamp": "2026-10-03T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fab2d2a6-d1a4-431a-9237-96a629008ead/export</guid>
      <pubDate>Sat, 03 Oct 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>791169c9-9c7e-4a0c-b52d-3790498016f4</title>
      <link>https://vulnerability.circl.lu/sighting/791169c9-9c7e-4a0c-b52d-3790498016f4/export</link>
      <description>{"uuid": "791169c9-9c7e-4a0c-b52d-3790498016f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41920", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/hmfsb22fnlg2l", "content": "CVE-2026-102795: Apache Traffic Server: SNI to Host header matching policy is not properly enforced (supersedes CVE-2026-41920)", "creation_timestamp": "2026-10-02T19:49:27.180801Z"}</description>
      <content:encoded>{"uuid": "791169c9-9c7e-4a0c-b52d-3790498016f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41920", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/hmfsb22fnlg2l", "content": "CVE-2026-102795: Apache Traffic Server: SNI to Host header matching policy is not properly enforced (supersedes CVE-2026-41920)", "creation_timestamp": "2026-10-02T19:49:27.180801Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/791169c9-9c7e-4a0c-b52d-3790498016f4/export</guid>
      <pubDate>Fri, 02 Oct 2026 19:49:27 +0000</pubDate>
    </item>
    <item>
      <title>c93a2578-e9af-44e6-bd6a-6b56ef0b7743</title>
      <link>https://vulnerability.circl.lu/sighting/c93a2578-e9af-44e6-bd6a-6b56ef0b7743/export</link>
      <description>{"uuid": "c93a2578-e9af-44e6-bd6a-6b56ef0b7743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-02)", "content": "", "creation_timestamp": "2026-10-02T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "c93a2578-e9af-44e6-bd6a-6b56ef0b7743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-02)", "content": "", "creation_timestamp": "2026-10-02T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c93a2578-e9af-44e6-bd6a-6b56ef0b7743/export</guid>
      <pubDate>Fri, 02 Oct 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>6d75b40f-2661-41ff-95af-935bc5c90367</title>
      <link>https://vulnerability.circl.lu/sighting/6d75b40f-2661-41ff-95af-935bc5c90367/export</link>
      <description>{"uuid": "6d75b40f-2661-41ff-95af-935bc5c90367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-02)", "content": "", "creation_timestamp": "2026-10-02T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "6d75b40f-2661-41ff-95af-935bc5c90367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-02)", "content": "", "creation_timestamp": "2026-10-02T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6d75b40f-2661-41ff-95af-935bc5c90367/export</guid>
      <pubDate>Fri, 02 Oct 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>4962d6f2-5d1d-4dd0-a808-751ea1aec68c</title>
      <link>https://vulnerability.circl.lu/sighting/4962d6f2-5d1d-4dd0-a808-751ea1aec68c/export</link>
      <description>{"uuid": "4962d6f2-5d1d-4dd0-a808-751ea1aec68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41303", "type": "seen", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "content": "", "creation_timestamp": "2026-10-01T23:00:20.000000Z"}</description>
      <content:encoded>{"uuid": "4962d6f2-5d1d-4dd0-a808-751ea1aec68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41303", "type": "seen", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "content": "", "creation_timestamp": "2026-10-01T23:00:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4962d6f2-5d1d-4dd0-a808-751ea1aec68c/export</guid>
      <pubDate>Thu, 01 Oct 2026 23:00:20 +0000</pubDate>
    </item>
    <item>
      <title>26338bb2-0f61-49c2-a866-912f41345c2f</title>
      <link>https://vulnerability.circl.lu/sighting/26338bb2-0f61-49c2-a866-912f41345c2f/export</link>
      <description>{"uuid": "26338bb2-0f61-49c2-a866-912f41345c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41303", "type": "published-proof-of-concept", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "content": "", "creation_timestamp": "2026-10-01T23:00:20.000000Z"}</description>
      <content:encoded>{"uuid": "26338bb2-0f61-49c2-a866-912f41345c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41303", "type": "published-proof-of-concept", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "content": "", "creation_timestamp": "2026-10-01T23:00:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/26338bb2-0f61-49c2-a866-912f41345c2f/export</guid>
      <pubDate>Thu, 01 Oct 2026 23:00:20 +0000</pubDate>
    </item>
    <item>
      <title>b9ed90ca-e1c2-45bc-9003-e76565451af4</title>
      <link>https://vulnerability.circl.lu/sighting/b9ed90ca-e1c2-45bc-9003-e76565451af4/export</link>
      <description>{"uuid": "b9ed90ca-e1c2-45bc-9003-e76565451af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-01)", "content": "", "creation_timestamp": "2026-10-01T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "b9ed90ca-e1c2-45bc-9003-e76565451af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41940", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-01)", "content": "", "creation_timestamp": "2026-10-01T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b9ed90ca-e1c2-45bc-9003-e76565451af4/export</guid>
      <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
    </item>
  </channel>
</rss>
