<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 13 Sep 2026 18:29:52 +0000</lastBuildDate>
    <item>
      <title>04f2c610-c84c-481f-b299-2a515980d318</title>
      <link>https://vulnerability.circl.lu/sighting/04f2c610-c84c-481f-b299-2a515980d318/export</link>
      <description>{"uuid": "04f2c610-c84c-481f-b299-2a515980d318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muoj3uaetz22", "content": "\ud83d\udea8 CVE-2026-62928 \u2014 CVSS 9.3 CRITICAL\n\nXING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62928\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T08:07:49.352799Z"}</description>
      <content:encoded>{"uuid": "04f2c610-c84c-481f-b299-2a515980d318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muoj3uaetz22", "content": "\ud83d\udea8 CVE-2026-62928 \u2014 CVSS 9.3 CRITICAL\n\nXING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62928\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T08:07:49.352799Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/04f2c610-c84c-481f-b299-2a515980d318/export</guid>
      <pubDate>Fri, 04 Sep 2026 08:07:49 +0000</pubDate>
    </item>
    <item>
      <title>02cc9ea9-e396-4709-9c41-9f34b31fc7fe</title>
      <link>https://vulnerability.circl.lu/sighting/02cc9ea9-e396-4709-9c41-9f34b31fc7fe/export</link>
      <description>{"uuid": "02cc9ea9-e396-4709-9c41-9f34b31fc7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muoipb4jyl2v", "content": "\ud83d\udd34 CVE-2026-62928 - Critical (9.8)\n\nXING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62928/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T08:00:47.475260Z"}</description>
      <content:encoded>{"uuid": "02cc9ea9-e396-4709-9c41-9f34b31fc7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muoipb4jyl2v", "content": "\ud83d\udd34 CVE-2026-62928 - Critical (9.8)\n\nXING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62928/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T08:00:47.475260Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/02cc9ea9-e396-4709-9c41-9f34b31fc7fe/export</guid>
      <pubDate>Fri, 04 Sep 2026 08:00:47 +0000</pubDate>
    </item>
    <item>
      <title>39af9e2c-ab52-4459-9d84-f50f031e7e57</title>
      <link>https://vulnerability.circl.lu/sighting/39af9e2c-ab52-4459-9d84-f50f031e7e57/export</link>
      <description>{"uuid": "39af9e2c-ab52-4459-9d84-f50f031e7e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muohk7syvb2m", "content": "CVE-2026-62928 - xing cptrans-me-x\nThe XING CPTrans-ME-X component can be tricked into executing operating system commands without requiring any login. This means an attacker could potentially take control of the server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xing #CVE #infosec", "creation_timestamp": "2026-09-04T07:40:04.216597Z"}</description>
      <content:encoded>{"uuid": "39af9e2c-ab52-4459-9d84-f50f031e7e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muohk7syvb2m", "content": "CVE-2026-62928 - xing cptrans-me-x\nThe XING CPTrans-ME-X component can be tricked into executing operating system commands without requiring any login. This means an attacker could potentially take control of the server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xing #CVE #infosec", "creation_timestamp": "2026-09-04T07:40:04.216597Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/39af9e2c-ab52-4459-9d84-f50f031e7e57/export</guid>
      <pubDate>Fri, 04 Sep 2026 07:40:04 +0000</pubDate>
    </item>
    <item>
      <title>f2960dd3-f7cd-4833-9b83-19d4543d2f18</title>
      <link>https://vulnerability.circl.lu/sighting/f2960dd3-f7cd-4833-9b83-19d4543d2f18/export</link>
      <description>{"uuid": "f2960dd3-f7cd-4833-9b83-19d4543d2f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://jvn.jp/en/jp/JVN32505330", "content": "", "creation_timestamp": "2026-09-04T04:46:23.613426Z"}</description>
      <content:encoded>{"uuid": "f2960dd3-f7cd-4833-9b83-19d4543d2f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://jvn.jp/en/jp/JVN32505330", "content": "", "creation_timestamp": "2026-09-04T04:46:23.613426Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f2960dd3-f7cd-4833-9b83-19d4543d2f18/export</guid>
      <pubDate>Fri, 04 Sep 2026 04:46:23 +0000</pubDate>
    </item>
    <item>
      <title>12a21bb6-4108-4281-8028-f85324984264</title>
      <link>https://vulnerability.circl.lu/sighting/12a21bb6-4108-4281-8028-f85324984264/export</link>
      <description>{"uuid": "12a21bb6-4108-4281-8028-f85324984264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62927", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msg2mofdzy2f", "content": "\ud83d\udccc CVE-2026-62927 - In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authori... https://www.cyberhub.blog/cves/CVE-2026-62927", "creation_timestamp": "2026-08-06T12:37:06.843685Z"}</description>
      <content:encoded>{"uuid": "12a21bb6-4108-4281-8028-f85324984264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62927", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msg2mofdzy2f", "content": "\ud83d\udccc CVE-2026-62927 - In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authori... https://www.cyberhub.blog/cves/CVE-2026-62927", "creation_timestamp": "2026-08-06T12:37:06.843685Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/12a21bb6-4108-4281-8028-f85324984264/export</guid>
      <pubDate>Thu, 06 Aug 2026 12:37:06 +0000</pubDate>
    </item>
    <item>
      <title>193ddb19-25ff-4ce7-b7c2-187d9cbb1f4a</title>
      <link>https://vulnerability.circl.lu/sighting/193ddb19-25ff-4ce7-b7c2-187d9cbb1f4a/export</link>
      <description>{"uuid": "193ddb19-25ff-4ce7-b7c2-187d9cbb1f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62927", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cbcmrvdiup5yg", "content": "CVE-2026-62927 - Eclipse Milo Authorization Bypass via Batch Processing\nCVE ID : CVE-2026-62927\n \n Published : Aug. 4, 2026, 1:18 p.m. | 27\u00a0minutes ago\n \n Description : In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to addres...", "creation_timestamp": "2026-08-04T13:54:28.283774Z"}</description>
      <content:encoded>{"uuid": "193ddb19-25ff-4ce7-b7c2-187d9cbb1f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62927", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cbcmrvdiup5yg", "content": "CVE-2026-62927 - Eclipse Milo Authorization Bypass via Batch Processing\nCVE ID : CVE-2026-62927\n \n Published : Aug. 4, 2026, 1:18 p.m. | 27\u00a0minutes ago\n \n Description : In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to addres...", "creation_timestamp": "2026-08-04T13:54:28.283774Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/193ddb19-25ff-4ce7-b7c2-187d9cbb1f4a/export</guid>
      <pubDate>Tue, 04 Aug 2026 13:54:28 +0000</pubDate>
    </item>
    <item>
      <title>2ea4489f-1edf-4b56-8dbf-53b4a8633ba9</title>
      <link>https://vulnerability.circl.lu/sighting/2ea4489f-1edf-4b56-8dbf-53b4a8633ba9/export</link>
      <description>{"uuid": "2ea4489f-1edf-4b56-8dbf-53b4a8633ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6292", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mp3rr2wdgt2l", "content": "CVE-2026-6292 mp-customize-login-page (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-25T06:16:17.751262Z"}</description>
      <content:encoded>{"uuid": "2ea4489f-1edf-4b56-8dbf-53b4a8633ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6292", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mp3rr2wdgt2l", "content": "CVE-2026-6292 mp-customize-login-page (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-25T06:16:17.751262Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2ea4489f-1edf-4b56-8dbf-53b4a8633ba9/export</guid>
      <pubDate>Thu, 25 Jun 2026 06:16:17 +0000</pubDate>
    </item>
  </channel>
</rss>
