<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 22 Jul 2026 19:08:18 +0000</lastBuildDate>
    <item>
      <title>1eceb83f-980c-459a-986b-14e9f38490fe</title>
      <link>https://vulnerability.circl.lu/sighting/1eceb83f-980c-459a-986b-14e9f38490fe/export</link>
      <description>{"uuid": "1eceb83f-980c-459a-986b-14e9f38490fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116952218421513913", "content": "CVE-2026-16242 - Critical authentication bypass in Konnectivity proxy-server. CVSS 9.4. Unpatched. Attackers can intercept control-plane traffic. Isolate affected systems immediately. #CVE #Konnectivity #infosec\nhttps://www.valtersit.com/cve/CVE-2026-16242/", "creation_timestamp": "2026-07-20T12:07:12.341862Z"}</description>
      <content:encoded>{"uuid": "1eceb83f-980c-459a-986b-14e9f38490fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116952218421513913", "content": "CVE-2026-16242 - Critical authentication bypass in Konnectivity proxy-server. CVSS 9.4. Unpatched. Attackers can intercept control-plane traffic. Isolate affected systems immediately. #CVE #Konnectivity #infosec\nhttps://www.valtersit.com/cve/CVE-2026-16242/", "creation_timestamp": "2026-07-20T12:07:12.341862Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1eceb83f-980c-459a-986b-14e9f38490fe/export</guid>
      <pubDate>Mon, 20 Jul 2026 12:07:12 +0000</pubDate>
    </item>
    <item>
      <title>e472a5ff-cee1-42b1-940e-843125cc9e06</title>
      <link>https://vulnerability.circl.lu/sighting/e472a5ff-cee1-42b1-940e-843125cc9e06/export</link>
      <description>{"uuid": "e472a5ff-cee1-42b1-940e-843125cc9e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr3azjkgm62u", "content": "CVE-2026-16242 - Critical authentication bypass in Konnectivity proxy-server. CVSS 9.4. Unpatched. Attackers can intercept control-plane traffic. Isolate affected systems immediately. #CVE #Konnectivity #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-16242/", "creation_timestamp": "2026-07-20T12:07:11.329387Z"}</description>
      <content:encoded>{"uuid": "e472a5ff-cee1-42b1-940e-843125cc9e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr3azjkgm62u", "content": "CVE-2026-16242 - Critical authentication bypass in Konnectivity proxy-server. CVSS 9.4. Unpatched. Attackers can intercept control-plane traffic. Isolate affected systems immediately. #CVE #Konnectivity #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-16242/", "creation_timestamp": "2026-07-20T12:07:11.329387Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e472a5ff-cee1-42b1-940e-843125cc9e06/export</guid>
      <pubDate>Mon, 20 Jul 2026 12:07:11 +0000</pubDate>
    </item>
    <item>
      <title>6eaa5acf-feea-4879-9c6c-a556189fdc81</title>
      <link>https://vulnerability.circl.lu/sighting/6eaa5acf-feea-4879-9c6c-a556189fdc81/export</link>
      <description>{"uuid": "6eaa5acf-feea-4879-9c6c-a556189fdc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16242", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr33mmn4ec2r", "content": "Red Hat Logging Subsystem for OpenShift hit by CRITICAL CVE-2026-16242 (CVSS 9.4): missing agent auth exposes control-plane traffic. Restrict endpoint access &amp;amp; stay updated via https://radar.offseq.com/threat/cve-2026-16242-missing-authentication-for-critical-function-in-red-hat-logging-subsystem...", "creation_timestamp": "2026-07-20T10:30:30.001432Z"}</description>
      <content:encoded>{"uuid": "6eaa5acf-feea-4879-9c6c-a556189fdc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16242", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr33mmn4ec2r", "content": "Red Hat Logging Subsystem for OpenShift hit by CRITICAL CVE-2026-16242 (CVSS 9.4): missing agent auth exposes control-plane traffic. Restrict endpoint access &amp;amp; stay updated via https://radar.offseq.com/threat/cve-2026-16242-missing-authentication-for-critical-function-in-red-hat-logging-subsystem...", "creation_timestamp": "2026-07-20T10:30:30.001432Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6eaa5acf-feea-4879-9c6c-a556189fdc81/export</guid>
      <pubDate>Mon, 20 Jul 2026 10:30:30 +0000</pubDate>
    </item>
    <item>
      <title>de66b480-79b9-4899-a005-e68001ae8c9f</title>
      <link>https://vulnerability.circl.lu/sighting/de66b480-79b9-4899-a005-e68001ae8c9f/export</link>
      <description>{"uuid": "de66b480-79b9-4899-a005-e68001ae8c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16242", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116951838064648106", "content": "CVE-2026-16242 (CRITICAL, CVSS 9.4) affects Red Hat Logging Subsystem for OpenShift: missing agent auth in Konnectivity proxy-server lets remote attackers intercept/control plane traffic. Restrict endpoint access &amp;amp; check https://radar.offseq.com/threat/cve-2026-16242-missing-authentication-for-critical-function-in-red-hat-logging-subsystem-for-red-hat-e02d26f300d35775 #OffSeq #RedHat #CVE202626242", "creation_timestamp": "2026-07-20T10:30:28.212708Z"}</description>
      <content:encoded>{"uuid": "de66b480-79b9-4899-a005-e68001ae8c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16242", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116951838064648106", "content": "CVE-2026-16242 (CRITICAL, CVSS 9.4) affects Red Hat Logging Subsystem for OpenShift: missing agent auth in Konnectivity proxy-server lets remote attackers intercept/control plane traffic. Restrict endpoint access &amp;amp; check https://radar.offseq.com/threat/cve-2026-16242-missing-authentication-for-critical-function-in-red-hat-logging-subsystem-for-red-hat-e02d26f300d35775 #OffSeq #RedHat #CVE202626242", "creation_timestamp": "2026-07-20T10:30:28.212708Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/de66b480-79b9-4899-a005-e68001ae8c9f/export</guid>
      <pubDate>Mon, 20 Jul 2026 10:30:28 +0000</pubDate>
    </item>
    <item>
      <title>1a53020d-3ea0-4fb0-bb8b-2c44f94ddbbb</title>
      <link>https://vulnerability.circl.lu/sighting/1a53020d-3ea0-4fb0-bb8b-2c44f94ddbbb/export</link>
      <description>{"uuid": "1a53020d-3ea0-4fb0-bb8b-2c44f94ddbbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr2xyhv5pa22", "content": "CVE-2026-16242 - Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates\nCVE ID : CVE-2026-16242\n \n Published : July 20, 2026, 8:16 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A flaw was found in the Konnectivity proxy-server co...", "creation_timestamp": "2026-07-20T09:25:32.836426Z"}</description>
      <content:encoded>{"uuid": "1a53020d-3ea0-4fb0-bb8b-2c44f94ddbbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr2xyhv5pa22", "content": "CVE-2026-16242 - Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates\nCVE ID : CVE-2026-16242\n \n Published : July 20, 2026, 8:16 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A flaw was found in the Konnectivity proxy-server co...", "creation_timestamp": "2026-07-20T09:25:32.836426Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1a53020d-3ea0-4fb0-bb8b-2c44f94ddbbb/export</guid>
      <pubDate>Mon, 20 Jul 2026 09:25:32 +0000</pubDate>
    </item>
    <item>
      <title>c292f7af-38ba-4351-ab4f-a033fc773188</title>
      <link>https://vulnerability.circl.lu/sighting/c292f7af-38ba-4351-ab4f-a033fc773188/export</link>
      <description>{"uuid": "c292f7af-38ba-4351-ab4f-a033fc773188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mr2ux2hzsc2u", "content": "OpenShift hosted control planes: a missing certificate check (CVE-2026-16242, CVSS 9.4) lets a remote attacker read traffic between the control plane and its nodes.\n\nNo fix shipped yet. Restrict the endpoint and watch for unknown agents.", "creation_timestamp": "2026-07-20T08:31:04.114583Z"}</description>
      <content:encoded>{"uuid": "c292f7af-38ba-4351-ab4f-a033fc773188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mr2ux2hzsc2u", "content": "OpenShift hosted control planes: a missing certificate check (CVE-2026-16242, CVSS 9.4) lets a remote attacker read traffic between the control plane and its nodes.\n\nNo fix shipped yet. Restrict the endpoint and watch for unknown agents.", "creation_timestamp": "2026-07-20T08:31:04.114583Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c292f7af-38ba-4351-ab4f-a033fc773188/export</guid>
      <pubDate>Mon, 20 Jul 2026 08:31:04 +0000</pubDate>
    </item>
    <item>
      <title>fa65d870-e580-4f83-a9a9-a52c35786789</title>
      <link>https://vulnerability.circl.lu/sighting/fa65d870-e580-4f83-a9a9-a52c35786789/export</link>
      <description>{"uuid": "fa65d870-e580-4f83-a9a9-a52c35786789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr2ugysfwu2e", "content": "CVE-2026-16242 - red hat openshift container platform 4\nThe Konnectivity proxy-server in Hypershift does not verify the identity of agents connecting to it. This means an attacker who can reach the proxy could connect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-07-20T08:22:04.730761Z"}</description>
      <content:encoded>{"uuid": "fa65d870-e580-4f83-a9a9-a52c35786789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16242", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr2ugysfwu2e", "content": "CVE-2026-16242 - red hat openshift container platform 4\nThe Konnectivity proxy-server in Hypershift does not verify the identity of agents connecting to it. This means an attacker who can reach the proxy could connect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-07-20T08:22:04.730761Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fa65d870-e580-4f83-a9a9-a52c35786789/export</guid>
      <pubDate>Mon, 20 Jul 2026 08:22:04 +0000</pubDate>
    </item>
  </channel>
</rss>
