<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 12 Oct 2026 03:00:29 +0000</lastBuildDate>
    <item>
      <title>98075f77-7125-470f-b557-8b6c0bfe344e</title>
      <link>https://vulnerability.circl.lu/sighting/98075f77-7125-470f-b557-8b6c0bfe344e/export</link>
      <description>{"uuid": "98075f77-7125-470f-b557-8b6c0bfe344e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108101", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlujsy5f62l", "content": "CVE-2026-108101\nIn HortusFox versions up to 6.3, users who are signed in can place any type of file in the public attachments folder. This means an attacker could upload web pages or server scripts that run unwanted code when\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-11T11:10:04.860707Z"}</description>
      <content:encoded>{"uuid": "98075f77-7125-470f-b557-8b6c0bfe344e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108101", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlujsy5f62l", "content": "CVE-2026-108101\nIn HortusFox versions up to 6.3, users who are signed in can place any type of file in the public attachments folder. This means an attacker could upload web pages or server scripts that run unwanted code when\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-11T11:10:04.860707Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/98075f77-7125-470f-b557-8b6c0bfe344e/export</guid>
      <pubDate>Sun, 11 Oct 2026 11:10:04 +0000</pubDate>
    </item>
    <item>
      <title>46bde708-03a5-4fda-b160-447108abe950</title>
      <link>https://vulnerability.circl.lu/sighting/46bde708-03a5-4fda-b160-447108abe950/export</link>
      <description>{"uuid": "46bde708-03a5-4fda-b160-447108abe950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108101", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxi3dlite72s", "content": "\ud83d\udfe0 CVE-2026-108101 - High (7.5)\n\nHortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in Plant...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108101/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-09T23:01:13.888452Z"}</description>
      <content:encoded>{"uuid": "46bde708-03a5-4fda-b160-447108abe950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108101", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxi3dlite72s", "content": "\ud83d\udfe0 CVE-2026-108101 - High (7.5)\n\nHortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in Plant...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108101/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-09T23:01:13.888452Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/46bde708-03a5-4fda-b160-447108abe950/export</guid>
      <pubDate>Fri, 09 Oct 2026 23:01:13 +0000</pubDate>
    </item>
  </channel>
</rss>
