<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 25 Jun 2026 15:17:20 +0000</lastBuildDate>
    <item>
      <title>fa614ba4-7aca-4be8-b19c-ca2a1b4a436a</title>
      <link>https://vulnerability.circl.lu/sighting/fa614ba4-7aca-4be8-b19c-ca2a1b4a436a/export</link>
      <description>{"uuid": "fa614ba4-7aca-4be8-b19c-ca2a1b4a436a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-23879", "type": "published-proof-of-concept", "source": "https://github.com/miurahr/py7zr/security/advisories/GHSA-q6rc-2cgv-63h7", "content": "", "creation_timestamp": "2026-06-19T09:31:59.000000Z"}</description>
      <content:encoded>{"uuid": "fa614ba4-7aca-4be8-b19c-ca2a1b4a436a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-23879", "type": "published-proof-of-concept", "source": "https://github.com/miurahr/py7zr/security/advisories/GHSA-q6rc-2cgv-63h7", "content": "", "creation_timestamp": "2026-06-19T09:31:59.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fa614ba4-7aca-4be8-b19c-ca2a1b4a436a/export</guid>
      <pubDate>Fri, 19 Jun 2026 09:31:59 +0000</pubDate>
    </item>
    <item>
      <title>cab1d463-b341-48fe-b1d0-8f472bfca05c</title>
      <link>https://vulnerability.circl.lu/sighting/cab1d463-b341-48fe-b1d0-8f472bfca05c/export</link>
      <description>{"uuid": "cab1d463-b341-48fe-b1d0-8f472bfca05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23879", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp2wxlnzkj2d", "content": "py7zr 1.1.2\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u60aa\u610f\u306e\u3042\u308b\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\u30c1\u30a7\u30fc\u30f3\u306b\u3088\u308a\u3001\u30a2\u30fc\u30ab\u30a4\u30d6\u5185\u306e\u30d5\u30a1\u30a4\u30eb\u304c\u6307\u5b9a\u5916\u306e\u5834\u6240\u306b\u66f8\u304d\u8fbc\u307e\u308c\u308b\u8106\u5f31\u6027\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306a\u3069\u306e\u88ab\u5bb3\u3092\u53d7\u3051\u308b\u53ef\u80fd\u6027\u2026\nCVE-2026-23879 CVSS 8.0 | HIGH", "creation_timestamp": "2026-06-24T22:16:45.627156Z"}</description>
      <content:encoded>{"uuid": "cab1d463-b341-48fe-b1d0-8f472bfca05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23879", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp2wxlnzkj2d", "content": "py7zr 1.1.2\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u60aa\u610f\u306e\u3042\u308b\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\u30c1\u30a7\u30fc\u30f3\u306b\u3088\u308a\u3001\u30a2\u30fc\u30ab\u30a4\u30d6\u5185\u306e\u30d5\u30a1\u30a4\u30eb\u304c\u6307\u5b9a\u5916\u306e\u5834\u6240\u306b\u66f8\u304d\u8fbc\u307e\u308c\u308b\u8106\u5f31\u6027\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306a\u3069\u306e\u88ab\u5bb3\u3092\u53d7\u3051\u308b\u53ef\u80fd\u6027\u2026\nCVE-2026-23879 CVSS 8.0 | HIGH", "creation_timestamp": "2026-06-24T22:16:45.627156Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cab1d463-b341-48fe-b1d0-8f472bfca05c/export</guid>
      <pubDate>Wed, 24 Jun 2026 22:16:45 +0000</pubDate>
    </item>
    <item>
      <title>b9ab550b-88be-4908-879f-0589ad657b1a</title>
      <link>https://vulnerability.circl.lu/sighting/b9ab550b-88be-4908-879f-0589ad657b1a/export</link>
      <description>{"uuid": "b9ab550b-88be-4908-879f-0589ad657b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23879", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mp326xv2w62h", "content": "CVE-2026-23879 - Critical RCE in Py7zr. Arbitrary file write via symbolic link chains allows escape from destination directory. CVSS 8.0. No patch available. Update or avoid extraction of untrusted 7z archives. #CVE #infosec #Python\n\nhttps://www.valtersit.com/cve/CVE-2026-23879/", "creation_timestamp": "2026-06-24T23:14:35.029665Z"}</description>
      <content:encoded>{"uuid": "b9ab550b-88be-4908-879f-0589ad657b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23879", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mp326xv2w62h", "content": "CVE-2026-23879 - Critical RCE in Py7zr. Arbitrary file write via symbolic link chains allows escape from destination directory. CVSS 8.0. No patch available. Update or avoid extraction of untrusted 7z archives. #CVE #infosec #Python\n\nhttps://www.valtersit.com/cve/CVE-2026-23879/", "creation_timestamp": "2026-06-24T23:14:35.029665Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b9ab550b-88be-4908-879f-0589ad657b1a/export</guid>
      <pubDate>Wed, 24 Jun 2026 23:14:35 +0000</pubDate>
    </item>
  </channel>
</rss>
