<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 27 Sep 2026 18:43:10 +0000</lastBuildDate>
    <item>
      <title>272955f6-8b9f-414b-a0ae-63e5f69f3247</title>
      <link>https://vulnerability.circl.lu/sighting/272955f6-8b9f-414b-a0ae-63e5f69f3247/export</link>
      <description>{"uuid": "272955f6-8b9f-414b-a0ae-63e5f69f3247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhxnoobwd24", "content": "CVE-2026-100605 - flowise\nIn Flowise versions up to 3.1.4, API keys that are meant to have limited rights can still call the chat message functions and view or erase past conversations. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-27T04:30:05.555449Z"}</description>
      <content:encoded>{"uuid": "272955f6-8b9f-414b-a0ae-63e5f69f3247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhxnoobwd24", "content": "CVE-2026-100605 - flowise\nIn Flowise versions up to 3.1.4, API keys that are meant to have limited rights can still call the chat message functions and view or erase past conversations. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-27T04:30:05.555449Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/272955f6-8b9f-414b-a0ae-63e5f69f3247/export</guid>
      <pubDate>Sun, 27 Sep 2026 04:30:05 +0000</pubDate>
    </item>
    <item>
      <title>e4bba050-7931-482b-974e-0023de558ea5</title>
      <link>https://vulnerability.circl.lu/sighting/e4bba050-7931-482b-974e-0023de558ea5/export</link>
      <description>{"uuid": "e4bba050-7931-482b-974e-0023de558ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100607", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwha6qoogj25", "content": "CVE-2026-100607 - flowise\nFlowise versions up to 3.1.4 identify users only by their email address and do not keep track of which single sign\u2011on service or password was used. Because of this, someone who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-26T21:30:07.680293Z"}</description>
      <content:encoded>{"uuid": "e4bba050-7931-482b-974e-0023de558ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100607", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwha6qoogj25", "content": "CVE-2026-100607 - flowise\nFlowise versions up to 3.1.4 identify users only by their email address and do not keep track of which single sign\u2011on service or password was used. Because of this, someone who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-26T21:30:07.680293Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e4bba050-7931-482b-974e-0023de558ea5/export</guid>
      <pubDate>Sat, 26 Sep 2026 21:30:07 +0000</pubDate>
    </item>
    <item>
      <title>21b38268-6617-4e8b-95f2-7ceffc2692cf</title>
      <link>https://vulnerability.circl.lu/sighting/21b38268-6617-4e8b-95f2-7ceffc2692cf/export</link>
      <description>{"uuid": "21b38268-6617-4e8b-95f2-7ceffc2692cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwha6nxosl2l", "content": "CVE-2026-100606 - flowise\nWhen Flowise is set up with single sign\u2011on, an email address used for an invitation can be used to log in without the invitation token. Anyone who can sign in to the same SSO\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-26T21:30:05.028608Z"}</description>
      <content:encoded>{"uuid": "21b38268-6617-4e8b-95f2-7ceffc2692cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwha6nxosl2l", "content": "CVE-2026-100606 - flowise\nWhen Flowise is set up with single sign\u2011on, an email address used for an invitation can be used to log in without the invitation token. Anyone who can sign in to the same SSO\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-26T21:30:05.028608Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/21b38268-6617-4e8b-95f2-7ceffc2692cf/export</guid>
      <pubDate>Sat, 26 Sep 2026 21:30:05 +0000</pubDate>
    </item>
    <item>
      <title>d3d1e3a3-5b7f-4a41-95da-ea5a22ff1708</title>
      <link>https://vulnerability.circl.lu/sighting/d3d1e3a3-5b7f-4a41-95da-ea5a22ff1708/export</link>
      <description>{"uuid": "d3d1e3a3-5b7f-4a41-95da-ea5a22ff1708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100607", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo5fqepx24", "content": "\ud83d\udea8 CVE-2026-100607 \u2014 CVSS 9.2 CRITICAL\n\nFlowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or sub...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100607\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:07:15.240879Z"}</description>
      <content:encoded>{"uuid": "d3d1e3a3-5b7f-4a41-95da-ea5a22ff1708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100607", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo5fqepx24", "content": "\ud83d\udea8 CVE-2026-100607 \u2014 CVSS 9.2 CRITICAL\n\nFlowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or sub...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100607\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:07:15.240879Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d3d1e3a3-5b7f-4a41-95da-ea5a22ff1708/export</guid>
      <pubDate>Sat, 26 Sep 2026 16:07:15 +0000</pubDate>
    </item>
    <item>
      <title>c8fdc87b-f28d-447d-8de5-28c1e847eeca</title>
      <link>https://vulnerability.circl.lu/sighting/c8fdc87b-f28d-447d-8de5-28c1e847eeca/export</link>
      <description>{"uuid": "c8fdc87b-f28d-447d-8de5-28c1e847eeca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo55r2q325", "content": "\ud83d\udea8 CVE-2026-100606 \u2014 CVSS 9.2 CRITICAL\n\nFlowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100606\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:07:07.077646Z"}</description>
      <content:encoded>{"uuid": "c8fdc87b-f28d-447d-8de5-28c1e847eeca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo55r2q325", "content": "\ud83d\udea8 CVE-2026-100606 \u2014 CVSS 9.2 CRITICAL\n\nFlowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100606\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:07:07.077646Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c8fdc87b-f28d-447d-8de5-28c1e847eeca/export</guid>
      <pubDate>Sat, 26 Sep 2026 16:07:07 +0000</pubDate>
    </item>
  </channel>
</rss>
