<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 08:52:44 +0000</lastBuildDate>
    <item>
      <title>5484ff03-e7e0-4cc0-bdd8-eea6a7a18b2a</title>
      <link>https://vulnerability.circl.lu/sighting/5484ff03-e7e0-4cc0-bdd8-eea6a7a18b2a/export</link>
      <description>{"uuid": "5484ff03-e7e0-4cc0-bdd8-eea6a7a18b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-18T00:00:22.172137Z"}</description>
      <content:encoded>{"uuid": "5484ff03-e7e0-4cc0-bdd8-eea6a7a18b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-18T00:00:22.172137Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5484ff03-e7e0-4cc0-bdd8-eea6a7a18b2a/export</guid>
      <pubDate>Sat, 18 Jul 2026 00:00:22 +0000</pubDate>
    </item>
    <item>
      <title>e8a5ba9c-2886-46fc-95ce-8b5d362ba1d9</title>
      <link>https://vulnerability.circl.lu/sighting/e8a5ba9c-2886-46fc-95ce-8b5d362ba1d9/export</link>
      <description>{"uuid": "e8a5ba9c-2886-46fc-95ce-8b5d362ba1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-18T00:00:21.914081Z"}</description>
      <content:encoded>{"uuid": "e8a5ba9c-2886-46fc-95ce-8b5d362ba1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-18T00:00:21.914081Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e8a5ba9c-2886-46fc-95ce-8b5d362ba1d9/export</guid>
      <pubDate>Sat, 18 Jul 2026 00:00:21 +0000</pubDate>
    </item>
    <item>
      <title>4a67869c-3b8b-4c87-bf8d-a7376f6ce677</title>
      <link>https://vulnerability.circl.lu/sighting/4a67869c-3b8b-4c87-bf8d-a7376f6ce677/export</link>
      <description>{"uuid": "4a67869c-3b8b-4c87-bf8d-a7376f6ce677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-16T19:00:22.291600Z"}</description>
      <content:encoded>{"uuid": "4a67869c-3b8b-4c87-bf8d-a7376f6ce677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-16T19:00:22.291600Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4a67869c-3b8b-4c87-bf8d-a7376f6ce677/export</guid>
      <pubDate>Thu, 16 Jul 2026 19:00:22 +0000</pubDate>
    </item>
    <item>
      <title>f344c0b9-56f4-45d4-b553-549e95466400</title>
      <link>https://vulnerability.circl.lu/sighting/f344c0b9-56f4-45d4-b553-549e95466400/export</link>
      <description>{"uuid": "f344c0b9-56f4-45d4-b553-549e95466400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-16T19:00:22.097951Z"}</description>
      <content:encoded>{"uuid": "f344c0b9-56f4-45d4-b553-549e95466400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-16T19:00:22.097951Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f344c0b9-56f4-45d4-b553-549e95466400/export</guid>
      <pubDate>Thu, 16 Jul 2026 19:00:22 +0000</pubDate>
    </item>
    <item>
      <title>7cf96d70-d257-4a94-a869-799872c00871</title>
      <link>https://vulnerability.circl.lu/sighting/7cf96d70-d257-4a94-a869-799872c00871/export</link>
      <description>{"uuid": "7cf96d70-d257-4a94-a869-799872c00871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (&amp;lt;1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.294944Z"}</description>
      <content:encoded>{"uuid": "7cf96d70-d257-4a94-a869-799872c00871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (&amp;lt;1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.294944Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7cf96d70-d257-4a94-a869-799872c00871/export</guid>
      <pubDate>Wed, 15 Jul 2026 00:00:29 +0000</pubDate>
    </item>
    <item>
      <title>2b496d8f-e76d-47f2-b9c7-fa7554e30ee3</title>
      <link>https://vulnerability.circl.lu/sighting/2b496d8f-e76d-47f2-b9c7-fa7554e30ee3/export</link>
      <description>{"uuid": "2b496d8f-e76d-47f2-b9c7-fa7554e30ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (&amp;lt;1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.934787Z"}</description>
      <content:encoded>{"uuid": "2b496d8f-e76d-47f2-b9c7-fa7554e30ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (&amp;lt;1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.934787Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2b496d8f-e76d-47f2-b9c7-fa7554e30ee3/export</guid>
      <pubDate>Mon, 13 Jul 2026 22:00:12 +0000</pubDate>
    </item>
    <item>
      <title>ff373e0d-1eed-4e63-9c7d-beb294bace33</title>
      <link>https://vulnerability.circl.lu/sighting/ff373e0d-1eed-4e63-9c7d-beb294bace33/export</link>
      <description>{"uuid": "ff373e0d-1eed-4e63-9c7d-beb294bace33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54414", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3momt47f4ci2f", "content": "Critical path traversal in FileRise &amp;lt;3.16.0 (CVE-2026-54414): attackers with upload-enabled links can overwrite files, risking admin takeover/RCE. Update to 3.16.0+ now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54414-cwe-22-improper-limitation-of-a-pat-b161bf82d6c29f3c #OffSeq #FileRise #infosec", "creation_timestamp": "2026-06-19T07:30:30.188873Z"}</description>
      <content:encoded>{"uuid": "ff373e0d-1eed-4e63-9c7d-beb294bace33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54414", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3momt47f4ci2f", "content": "Critical path traversal in FileRise &amp;lt;3.16.0 (CVE-2026-54414): attackers with upload-enabled links can overwrite files, risking admin takeover/RCE. Update to 3.16.0+ now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54414-cwe-22-improper-limitation-of-a-pat-b161bf82d6c29f3c #OffSeq #FileRise #infosec", "creation_timestamp": "2026-06-19T07:30:30.188873Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ff373e0d-1eed-4e63-9c7d-beb294bace33/export</guid>
      <pubDate>Fri, 19 Jun 2026 07:30:30 +0000</pubDate>
    </item>
    <item>
      <title>35880e4d-1461-4441-94d5-0373f2ccd551</title>
      <link>https://vulnerability.circl.lu/sighting/35880e4d-1461-4441-94d5-0373f2ccd551/export</link>
      <description>{"uuid": "35880e4d-1461-4441-94d5-0373f2ccd551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54414", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116775598633883960", "content": "CVE-2026-54414: Critical path traversal in FileRise &amp;lt;3.16.0 allows attackers with a valid shared-folder upload link to write files outside the intended dir \u2014 can lead to admin takeover &amp;amp; RCE. Patch to 3.16.0+ ASAP. https://radar.offseq.com/threat/cve-2026-54414-cwe-22-improper-limitation-of-a-pat-b161bf82d6c29f3c #OffSeq #vuln #FileRise", "creation_timestamp": "2026-06-19T07:30:28.372134Z"}</description>
      <content:encoded>{"uuid": "35880e4d-1461-4441-94d5-0373f2ccd551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54414", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116775598633883960", "content": "CVE-2026-54414: Critical path traversal in FileRise &amp;lt;3.16.0 allows attackers with a valid shared-folder upload link to write files outside the intended dir \u2014 can lead to admin takeover &amp;amp; RCE. Patch to 3.16.0+ ASAP. https://radar.offseq.com/threat/cve-2026-54414-cwe-22-improper-limitation-of-a-pat-b161bf82d6c29f3c #OffSeq #vuln #FileRise", "creation_timestamp": "2026-06-19T07:30:28.372134Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/35880e4d-1461-4441-94d5-0373f2ccd551/export</guid>
      <pubDate>Fri, 19 Jun 2026 07:30:28 +0000</pubDate>
    </item>
    <item>
      <title>230f29ac-c970-4104-a5b6-fe152ad9da75</title>
      <link>https://vulnerability.circl.lu/sighting/230f29ac-c970-4104-a5b6-fe152ad9da75/export</link>
      <description>{"uuid": "230f29ac-c970-4104-a5b6-fe152ad9da75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3momsieefw62x", "content": "CVE-2026-54414 - FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover\nCVE ID : CVE-2026-54414\n \n Published : June 19, 2026, 5:41 a.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : FileRise before 3.16.0 is vulnerable to path traversal in the ...", "creation_timestamp": "2026-06-19T07:19:23.609204Z"}</description>
      <content:encoded>{"uuid": "230f29ac-c970-4104-a5b6-fe152ad9da75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3momsieefw62x", "content": "CVE-2026-54414 - FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover\nCVE ID : CVE-2026-54414\n \n Published : June 19, 2026, 5:41 a.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : FileRise before 3.16.0 is vulnerable to path traversal in the ...", "creation_timestamp": "2026-06-19T07:19:23.609204Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/230f29ac-c970-4104-a5b6-fe152ad9da75/export</guid>
      <pubDate>Fri, 19 Jun 2026 07:19:23 +0000</pubDate>
    </item>
    <item>
      <title>739d1dfa-a722-4880-8048-dae8aad61c28</title>
      <link>https://vulnerability.circl.lu/sighting/739d1dfa-a722-4880-8048-dae8aad61c28/export</link>
      <description>{"uuid": "739d1dfa-a722-4880-8048-dae8aad61c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mokt35ifeb2z", "content": "CVE-2026-54419 - PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query\nCVE ID : CVE-2026-54419\n \n Published : June 18, 2026, 10:21 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no rele...", "creation_timestamp": "2026-06-18T12:24:39.032738Z"}</description>
      <content:encoded>{"uuid": "739d1dfa-a722-4880-8048-dae8aad61c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mokt35ifeb2z", "content": "CVE-2026-54419 - PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query\nCVE ID : CVE-2026-54419\n \n Published : June 18, 2026, 10:21 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no rele...", "creation_timestamp": "2026-06-18T12:24:39.032738Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/739d1dfa-a722-4880-8048-dae8aad61c28/export</guid>
      <pubDate>Thu, 18 Jun 2026 12:24:39 +0000</pubDate>
    </item>
  </channel>
</rss>
