<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 26 Jun 2026 11:26:05 +0000</lastBuildDate>
    <item>
      <title>e87bff82-51f4-4054-9a39-04d8dbd441b8</title>
      <link>https://vulnerability.circl.lu/sighting/e87bff82-51f4-4054-9a39-04d8dbd441b8/export</link>
      <description>{"uuid": "e87bff82-51f4-4054-9a39-04d8dbd441b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mole2kzk6d2c", "content": "CVE-2026-55203 - HAProxy - Integer Overflow in FCGI Demux Record Length Field\nCVE ID : CVE-2026-55203\n \n Published : June 18, 2026, 4:05 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in ...", "creation_timestamp": "2026-06-18T17:28:28.597262Z"}</description>
      <content:encoded>{"uuid": "e87bff82-51f4-4054-9a39-04d8dbd441b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mole2kzk6d2c", "content": "CVE-2026-55203 - HAProxy - Integer Overflow in FCGI Demux Record Length Field\nCVE ID : CVE-2026-55203\n \n Published : June 18, 2026, 4:05 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in ...", "creation_timestamp": "2026-06-18T17:28:28.597262Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e87bff82-51f4-4054-9a39-04d8dbd441b8/export</guid>
      <pubDate>Thu, 18 Jun 2026 17:28:28 +0000</pubDate>
    </item>
    <item>
      <title>82b07cc6-a503-4d01-859b-efb0995899bc</title>
      <link>https://vulnerability.circl.lu/sighting/82b07cc6-a503-4d01-859b-efb0995899bc/export</link>
      <description>{"uuid": "82b07cc6-a503-4d01-859b-efb0995899bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55203", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116772813087719313", "content": ":blobcat_thisisfine: \nhttps://nvd.nist.gov/vuln/detail/CVE-2026-55203\nsev:CRIT 9.0 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:L/SI:H/SA:N\n\nHAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field wraps to 0, causing incorrect record consumption and allowing malicious FastCGI backends to desynchronize the FCGI framing parser, potentially causing request routing errors, response smuggling, or memory safety issues.", "creation_timestamp": "2026-06-18T19:42:11.098227Z"}</description>
      <content:encoded>{"uuid": "82b07cc6-a503-4d01-859b-efb0995899bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55203", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116772813087719313", "content": ":blobcat_thisisfine: \nhttps://nvd.nist.gov/vuln/detail/CVE-2026-55203\nsev:CRIT 9.0 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:L/SI:H/SA:N\n\nHAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field wraps to 0, causing incorrect record consumption and allowing malicious FastCGI backends to desynchronize the FCGI framing parser, potentially causing request routing errors, response smuggling, or memory safety issues.", "creation_timestamp": "2026-06-18T19:42:11.098227Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/82b07cc6-a503-4d01-859b-efb0995899bc/export</guid>
      <pubDate>Thu, 18 Jun 2026 19:42:11 +0000</pubDate>
    </item>
    <item>
      <title>7370633b-afc2-4d13-9c2e-4b9b1feaa5f7</title>
      <link>https://vulnerability.circl.lu/sighting/7370633b-afc2-4d13-9c2e-4b9b1feaa5f7/export</link>
      <description>{"uuid": "7370633b-afc2-4d13-9c2e-4b9b1feaa5f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55203", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116775933383461346", "content": "Some increased actor activities are shown targeting HAProxy (CVE-2026-55203) https://vuldb.com/vuln/372244/cti", "creation_timestamp": "2026-06-19T08:55:36.692814Z"}</description>
      <content:encoded>{"uuid": "7370633b-afc2-4d13-9c2e-4b9b1feaa5f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55203", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116775933383461346", "content": "Some increased actor activities are shown targeting HAProxy (CVE-2026-55203) https://vuldb.com/vuln/372244/cti", "creation_timestamp": "2026-06-19T08:55:36.692814Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7370633b-afc2-4d13-9c2e-4b9b1feaa5f7/export</guid>
      <pubDate>Fri, 19 Jun 2026 08:55:36 +0000</pubDate>
    </item>
  </channel>
</rss>
