<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 05 Aug 2026 18:05:22 +0000</lastBuildDate>
    <item>
      <title>3d9e6a3e-0b90-488a-abd6-c08214a3a567</title>
      <link>https://vulnerability.circl.lu/sighting/3d9e6a3e-0b90-488a-abd6-c08214a3a567/export</link>
      <description>{"uuid": "3d9e6a3e-0b90-488a-abd6-c08214a3a567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msdtwlu54i23", "content": "CVE-2026-58073 \u00b7 trending #5\n\nCurrently trending CVE - Hype Score: 11 - A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-58073", "creation_timestamp": "2026-08-05T15:32:15.759528Z"}</description>
      <content:encoded>{"uuid": "3d9e6a3e-0b90-488a-abd6-c08214a3a567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msdtwlu54i23", "content": "CVE-2026-58073 \u00b7 trending #5\n\nCurrently trending CVE - Hype Score: 11 - A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-58073", "creation_timestamp": "2026-08-05T15:32:15.759528Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3d9e6a3e-0b90-488a-abd6-c08214a3a567/export</guid>
      <pubDate>Wed, 05 Aug 2026 15:32:15 +0000</pubDate>
    </item>
    <item>
      <title>f47bcd0c-2415-4b90-a714-489048296dd6</title>
      <link>https://vulnerability.circl.lu/sighting/f47bcd0c-2415-4b90-a714-489048296dd6/export</link>
      <description>{"uuid": "f47bcd0c-2415-4b90-a714-489048296dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-05T15:00:06.206363Z"}</description>
      <content:encoded>{"uuid": "f47bcd0c-2415-4b90-a714-489048296dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-05T15:00:06.206363Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f47bcd0c-2415-4b90-a714-489048296dd6/export</guid>
      <pubDate>Wed, 05 Aug 2026 15:00:06 +0000</pubDate>
    </item>
    <item>
      <title>225d8e5b-db6c-49a0-8c95-f8a7d2b33dc6</title>
      <link>https://vulnerability.circl.lu/sighting/225d8e5b-db6c-49a0-8c95-f8a7d2b33dc6/export</link>
      <description>{"uuid": "225d8e5b-db6c-49a0-8c95-f8a7d2b33dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p", "content": "\ud83d\udd17 CVE : CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, CVE-2026-64633, CVE-2026-64634", "creation_timestamp": "2026-08-05T13:05:27.662852Z"}</description>
      <content:encoded>{"uuid": "225d8e5b-db6c-49a0-8c95-f8a7d2b33dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p", "content": "\ud83d\udd17 CVE : CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, CVE-2026-64633, CVE-2026-64634", "creation_timestamp": "2026-08-05T13:05:27.662852Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/225d8e5b-db6c-49a0-8c95-f8a7d2b33dc6/export</guid>
      <pubDate>Wed, 05 Aug 2026 13:05:27 +0000</pubDate>
    </item>
    <item>
      <title>c84c5164-d104-4369-b172-c725875377c3</title>
      <link>https://vulnerability.circl.lu/sighting/c84c5164-d104-4369-b172-c725875377c3/export</link>
      <description>{"uuid": "c84c5164-d104-4369-b172-c725875377c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1", "content": "", "creation_timestamp": "2026-08-05T12:45:06.550526Z"}</description>
      <content:encoded>{"uuid": "c84c5164-d104-4369-b172-c725875377c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1", "content": "", "creation_timestamp": "2026-08-05T12:45:06.550526Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c84c5164-d104-4369-b172-c725875377c3/export</guid>
      <pubDate>Wed, 05 Aug 2026 12:45:06 +0000</pubDate>
    </item>
    <item>
      <title>d5cbc9d7-3bc2-4e99-8271-cbf9f5444e40</title>
      <link>https://vulnerability.circl.lu/sighting/d5cbc9d7-3bc2-4e99-8271-cbf9f5444e40/export</link>
      <description>{"uuid": "d5cbc9d7-3bc2-4e99-8271-cbf9f5444e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbmxoaj552z", "content": "CVE-2026-58073 - service provider console\nAn attacker can impersonate a managed agent in the Veeam Service Provider Console and steal its credentials without needing a login. This allows the attacker to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#veeam #CVE #infosec", "creation_timestamp": "2026-08-04T18:22:04.086636Z"}</description>
      <content:encoded>{"uuid": "d5cbc9d7-3bc2-4e99-8271-cbf9f5444e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbmxoaj552z", "content": "CVE-2026-58073 - service provider console\nAn attacker can impersonate a managed agent in the Veeam Service Provider Console and steal its credentials without needing a login. This allows the attacker to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#veeam #CVE #infosec", "creation_timestamp": "2026-08-04T18:22:04.086636Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d5cbc9d7-3bc2-4e99-8271-cbf9f5444e40/export</guid>
      <pubDate>Tue, 04 Aug 2026 18:22:04 +0000</pubDate>
    </item>
  </channel>
</rss>
