<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 10 Oct 2026 22:54:46 +0000</lastBuildDate>
    <item>
      <title>e143dab4-2384-4793-8281-63d0353364a7</title>
      <link>https://vulnerability.circl.lu/sighting/e143dab4-2384-4793-8281-63d0353364a7/export</link>
      <description>{"uuid": "e143dab4-2384-4793-8281-63d0353364a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58271", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117393339322216713", "content": "CVE-2026-58271 Sync-in: lockout bypass on /api/app/sync/register lets attackers brute-force TOTP codes indefinitely, failed attempts never increment the counter. CVSS 6.8. Fix is still under review, so restrict endpoint https://www.valtersit.com/cve/CVE-2026-58271/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-10-06T09:50:04.479292Z"}</description>
      <content:encoded>{"uuid": "e143dab4-2384-4793-8281-63d0353364a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58271", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117393339322216713", "content": "CVE-2026-58271 Sync-in: lockout bypass on /api/app/sync/register lets attackers brute-force TOTP codes indefinitely, failed attempts never increment the counter. CVSS 6.8. Fix is still under review, so restrict endpoint https://www.valtersit.com/cve/CVE-2026-58271/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-10-06T09:50:04.479292Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e143dab4-2384-4793-8281-63d0353364a7/export</guid>
      <pubDate>Tue, 06 Oct 2026 09:50:04 +0000</pubDate>
    </item>
    <item>
      <title>4f93c22d-8b4b-408c-8d80-534042d72cb2</title>
      <link>https://vulnerability.circl.lu/sighting/4f93c22d-8b4b-408c-8d80-534042d72cb2/export</link>
      <description>{"uuid": "4f93c22d-8b4b-408c-8d80-534042d72cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58271", "type": "published-proof-of-concept", "source": "https://github.com/Sync-in/server/security/advisories/GHSA-274f-6w77-8qm9", "content": "", "creation_timestamp": "2026-09-22T16:35:15.051586Z"}</description>
      <content:encoded>{"uuid": "4f93c22d-8b4b-408c-8d80-534042d72cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58271", "type": "published-proof-of-concept", "source": "https://github.com/Sync-in/server/security/advisories/GHSA-274f-6w77-8qm9", "content": "", "creation_timestamp": "2026-09-22T16:35:15.051586Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4f93c22d-8b4b-408c-8d80-534042d72cb2/export</guid>
      <pubDate>Tue, 22 Sep 2026 16:35:15 +0000</pubDate>
    </item>
  </channel>
</rss>
