<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 20 Jul 2026 23:44:37 +0000</lastBuildDate>
    <item>
      <title>6597d8d5-e384-4406-b1d8-6d58d2f81d2a</title>
      <link>https://vulnerability.circl.lu/sighting/6597d8d5-e384-4406-b1d8-6d58d2f81d2a/export</link>
      <description>{"uuid": "6597d8d5-e384-4406-b1d8-6d58d2f81d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42143", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwje4owm2u", "content": "\ud83d\udfe0 CVE-2026-42143 - High (8.8)\n\nCoolify is an open-source and self-hostable tool for managing servers, applications, and database...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42143/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-07T06:01:21.327901Z"}</description>
      <content:encoded>{"uuid": "6597d8d5-e384-4406-b1d8-6d58d2f81d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42143", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwje4owm2u", "content": "\ud83d\udfe0 CVE-2026-42143 - High (8.8)\n\nCoolify is an open-source and self-hostable tool for managing servers, applications, and database...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42143/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-07T06:01:21.327901Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6597d8d5-e384-4406-b1d8-6d58d2f81d2a/export</guid>
      <pubDate>Tue, 07 Jul 2026 06:01:21 +0000</pubDate>
    </item>
    <item>
      <title>7553301f-5b9d-42e6-95fe-79695968b76b</title>
      <link>https://vulnerability.circl.lu/sighting/7553301f-5b9d-42e6-95fe-79695968b76b/export</link>
      <description>{"uuid": "7553301f-5b9d-42e6-95fe-79695968b76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzsd4btb62y", "content": "CVE-2026-42145 - Coolify: File Upload Without Type or Size Validation in Database Backup Restore\nCVE ID : CVE-2026-42145\n \n Published : July 7, 2026, 3:03 a.m. | 44\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, applications...", "creation_timestamp": "2026-07-07T04:46:15.489689Z"}</description>
      <content:encoded>{"uuid": "7553301f-5b9d-42e6-95fe-79695968b76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzsd4btb62y", "content": "CVE-2026-42145 - Coolify: File Upload Without Type or Size Validation in Database Backup Restore\nCVE ID : CVE-2026-42145\n \n Published : July 7, 2026, 3:03 a.m. | 44\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, applications...", "creation_timestamp": "2026-07-07T04:46:15.489689Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7553301f-5b9d-42e6-95fe-79695968b76b/export</guid>
      <pubDate>Tue, 07 Jul 2026 04:46:15 +0000</pubDate>
    </item>
    <item>
      <title>95923044-423a-4ea6-9caf-84f626b21fa9</title>
      <link>https://vulnerability.circl.lu/sighting/95923044-423a-4ea6-9caf-84f626b21fa9/export</link>
      <description>{"uuid": "95923044-423a-4ea6-9caf-84f626b21fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzq464xi72a", "content": "CVE-2026-42143 - Coolify: OS Command Injection via Persistent Volume Names - Root RCE on Managed Servers\nCVE ID : CVE-2026-42143\n \n Published : July 7, 2026, 3:15 a.m. | 33\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, appl...", "creation_timestamp": "2026-07-07T04:06:35.756483Z"}</description>
      <content:encoded>{"uuid": "95923044-423a-4ea6-9caf-84f626b21fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzq464xi72a", "content": "CVE-2026-42143 - Coolify: OS Command Injection via Persistent Volume Names - Root RCE on Managed Servers\nCVE ID : CVE-2026-42143\n \n Published : July 7, 2026, 3:15 a.m. | 33\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, appl...", "creation_timestamp": "2026-07-07T04:06:35.756483Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/95923044-423a-4ea6-9caf-84f626b21fa9/export</guid>
      <pubDate>Tue, 07 Jul 2026 04:06:35 +0000</pubDate>
    </item>
    <item>
      <title>d0545d65-059e-470f-a086-0d2c1ef011b4</title>
      <link>https://vulnerability.circl.lu/sighting/d0545d65-059e-470f-a086-0d2c1ef011b4/export</link>
      <description>{"uuid": "d0545d65-059e-470f-a086-0d2c1ef011b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42147", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpqm2sbu2y", "content": "CVE-2026-42147 - Coolify: SSRF via S3 Storage Endpoint in testConnection()\nCVE ID : CVE-2026-42147\n \n Published : July 7, 2026, 3:13 a.m. | 34\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior...", "creation_timestamp": "2026-07-07T04:00:07.003636Z"}</description>
      <content:encoded>{"uuid": "d0545d65-059e-470f-a086-0d2c1ef011b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42147", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpqm2sbu2y", "content": "CVE-2026-42147 - Coolify: SSRF via S3 Storage Endpoint in testConnection()\nCVE ID : CVE-2026-42147\n \n Published : July 7, 2026, 3:13 a.m. | 34\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior...", "creation_timestamp": "2026-07-07T04:00:07.003636Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d0545d65-059e-470f-a086-0d2c1ef011b4/export</guid>
      <pubDate>Tue, 07 Jul 2026 04:00:07 +0000</pubDate>
    </item>
    <item>
      <title>3939d0e4-b8e2-47c9-a497-866de72c9711</title>
      <link>https://vulnerability.circl.lu/sighting/3939d0e4-b8e2-47c9-a497-866de72c9711/export</link>
      <description>{"uuid": "3939d0e4-b8e2-47c9-a497-866de72c9711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzdrvg3vk24", "content": "CVE-2026-42148 - Coolify: Command Injection via Unescaped Version String in Docker Build\nCVE ID : CVE-2026-42148\n \n Published : July 6, 2026, 10:16 p.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, application...", "creation_timestamp": "2026-07-07T00:26:11.596320Z"}</description>
      <content:encoded>{"uuid": "3939d0e4-b8e2-47c9-a497-866de72c9711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzdrvg3vk24", "content": "CVE-2026-42148 - Coolify: Command Injection via Unescaped Version String in Docker Build\nCVE ID : CVE-2026-42148\n \n Published : July 6, 2026, 10:16 p.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, application...", "creation_timestamp": "2026-07-07T00:26:11.596320Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3939d0e4-b8e2-47c9-a497-866de72c9711/export</guid>
      <pubDate>Tue, 07 Jul 2026 00:26:11 +0000</pubDate>
    </item>
    <item>
      <title>c496abe0-8fea-4fb0-967a-3cc7fa7dc1c5</title>
      <link>https://vulnerability.circl.lu/sighting/c496abe0-8fea-4fb0-967a-3cc7fa7dc1c5/export</link>
      <description>{"uuid": "c496abe0-8fea-4fb0-967a-3cc7fa7dc1c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cpesil22k", "content": "CVE-2026-42140 - Server-Side Request Forgery (SSRF) in PlantUML Macro via 'server' parameter\nCVE ID : CVE-2026-42140\n \n Published : May 4, 2026, 5:37 p.m. | 43\u00a0minutes ago\n \n Description : PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior ...", "creation_timestamp": "2026-05-04T18:33:28.860086Z"}</description>
      <content:encoded>{"uuid": "c496abe0-8fea-4fb0-967a-3cc7fa7dc1c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cpesil22k", "content": "CVE-2026-42140 - Server-Side Request Forgery (SSRF) in PlantUML Macro via 'server' parameter\nCVE ID : CVE-2026-42140\n \n Published : May 4, 2026, 5:37 p.m. | 43\u00a0minutes ago\n \n Description : PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior ...", "creation_timestamp": "2026-05-04T18:33:28.860086Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c496abe0-8fea-4fb0-967a-3cc7fa7dc1c5/export</guid>
      <pubDate>Mon, 04 May 2026 18:33:28 +0000</pubDate>
    </item>
    <item>
      <title>76217da7-793e-4267-a289-dd2adf5c69b3</title>
      <link>https://vulnerability.circl.lu/sighting/76217da7-793e-4267-a289-dd2adf5c69b3/export</link>
      <description>{"uuid": "76217da7-793e-4267-a289-dd2adf5c69b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42141", "type": "seen", "source": "Telegram/yjUnQ6hKYXBxzaCr4Cr42UE0MHqi1VzU3UchLcz_NxtZwAY", "content": "", "creation_timestamp": "2026-04-30T09:00:04.000000Z"}</description>
      <content:encoded>{"uuid": "76217da7-793e-4267-a289-dd2adf5c69b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42141", "type": "seen", "source": "Telegram/yjUnQ6hKYXBxzaCr4Cr42UE0MHqi1VzU3UchLcz_NxtZwAY", "content": "", "creation_timestamp": "2026-04-30T09:00:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/76217da7-793e-4267-a289-dd2adf5c69b3/export</guid>
      <pubDate>Thu, 30 Apr 2026 09:00:04 +0000</pubDate>
    </item>
    <item>
      <title>99e7ee08-0889-46ac-aaca-978f0f3f8cef</title>
      <link>https://vulnerability.circl.lu/sighting/99e7ee08-0889-46ac-aaca-978f0f3f8cef/export</link>
      <description>{"uuid": "99e7ee08-0889-46ac-aaca-978f0f3f8cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42141", "type": "seen", "source": "https://t.me/GithubRedTeam/82154", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42141-xibo-ssrf\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a H4zaz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-30 06:53:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSSRF vulnerability in Xibo CMS (CVE-2026-42141)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-30T07:02:37.000000Z"}</description>
      <content:encoded>{"uuid": "99e7ee08-0889-46ac-aaca-978f0f3f8cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42141", "type": "seen", "source": "https://t.me/GithubRedTeam/82154", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42141-xibo-ssrf\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a H4zaz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-30 06:53:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSSRF vulnerability in Xibo CMS (CVE-2026-42141)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-30T07:02:37.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/99e7ee08-0889-46ac-aaca-978f0f3f8cef/export</guid>
      <pubDate>Thu, 30 Apr 2026 07:02:37 +0000</pubDate>
    </item>
    <item>
      <title>8f90f8b6-3110-49fe-8995-3bbf1e0cefbf</title>
      <link>https://vulnerability.circl.lu/sighting/8f90f8b6-3110-49fe-8995-3bbf1e0cefbf/export</link>
      <description>{"uuid": "8f90f8b6-3110-49fe-8995-3bbf1e0cefbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42141", "type": "seen", "source": "Telegram/P5bUU6aFVi3_TImC6WDx24HeHf8RVUggO7fw0-2Q4WCtYm0", "content": "", "creation_timestamp": "2026-04-30T07:00:11.000000Z"}</description>
      <content:encoded>{"uuid": "8f90f8b6-3110-49fe-8995-3bbf1e0cefbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42141", "type": "seen", "source": "Telegram/P5bUU6aFVi3_TImC6WDx24HeHf8RVUggO7fw0-2Q4WCtYm0", "content": "", "creation_timestamp": "2026-04-30T07:00:11.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8f90f8b6-3110-49fe-8995-3bbf1e0cefbf/export</guid>
      <pubDate>Thu, 30 Apr 2026 07:00:11 +0000</pubDate>
    </item>
    <item>
      <title>4081fd64-3944-4401-be35-269d6642c811</title>
      <link>https://vulnerability.circl.lu/sighting/4081fd64-3944-4401-be35-269d6642c811/export</link>
      <description>{"uuid": "4081fd64-3944-4401-be35-269d6642c811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4214", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhmfzsqvxo23", "content": "", "creation_timestamp": "2026-03-22T01:40:09.418085Z"}</description>
      <content:encoded>{"uuid": "4081fd64-3944-4401-be35-269d6642c811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4214", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhmfzsqvxo23", "content": "", "creation_timestamp": "2026-03-22T01:40:09.418085Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4081fd64-3944-4401-be35-269d6642c811/export</guid>
      <pubDate>Sun, 22 Mar 2026 01:40:09 +0000</pubDate>
    </item>
  </channel>
</rss>
