<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 26 Sep 2026 21:03:08 +0000</lastBuildDate>
    <item>
      <title>99da4989-9caa-410b-9066-4721cb795298</title>
      <link>https://vulnerability.circl.lu/sighting/99da4989-9caa-410b-9066-4721cb795298/export</link>
      <description>{"uuid": "99da4989-9caa-410b-9066-4721cb795298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvcp6pq4qd2t", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:50:03.198795Z"}</description>
      <content:encoded>{"uuid": "99da4989-9caa-410b-9066-4721cb795298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvcp6pq4qd2t", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:50:03.198795Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/99da4989-9caa-410b-9066-4721cb795298/export</guid>
      <pubDate>Sat, 12 Sep 2026 08:50:03 +0000</pubDate>
    </item>
    <item>
      <title>910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a</title>
      <link>https://vulnerability.circl.lu/sighting/910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a/export</link>
      <description>{"uuid": "910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117257168610414149", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:40:06.702752Z"}</description>
      <content:encoded>{"uuid": "910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117257168610414149", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:40:06.702752Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a/export</guid>
      <pubDate>Sat, 12 Sep 2026 08:40:06 +0000</pubDate>
    </item>
    <item>
      <title>46de0012-8358-4a29-920e-54dedca97f99</title>
      <link>https://vulnerability.circl.lu/sighting/46de0012-8358-4a29-920e-54dedca97f99/export</link>
      <description>{"uuid": "46de0012-8358-4a29-920e-54dedca97f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3muph6jb6xk2w", "content": "\ud83d\udea8 Moderate-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84890: undici vulnerable to Denial of Service via unbounded decompression of compressed responses\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T17:06:12.602890Z"}</description>
      <content:encoded>{"uuid": "46de0012-8358-4a29-920e-54dedca97f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3muph6jb6xk2w", "content": "\ud83d\udea8 Moderate-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84890: undici vulnerable to Denial of Service via unbounded decompression of compressed responses\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T17:06:12.602890Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/46de0012-8358-4a29-920e-54dedca97f99/export</guid>
      <pubDate>Fri, 04 Sep 2026 17:06:12 +0000</pubDate>
    </item>
    <item>
      <title>08f0a258-eb70-41c2-b577-16543a937580</title>
      <link>https://vulnerability.circl.lu/sighting/08f0a258-eb70-41c2-b577-16543a937580/export</link>
      <description>{"uuid": "08f0a258-eb70-41c2-b577-16543a937580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprgdxehyf2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8489 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ultimate Member: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6191C0D4-A9B8-45D4-B4F6-6BEBA4BFE0D0", "creation_timestamp": "2026-07-03T20:50:41.264133Z"}</description>
      <content:encoded>{"uuid": "08f0a258-eb70-41c2-b577-16543a937580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprgdxehyf2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8489 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ultimate Member: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6191C0D4-A9B8-45D4-B4F6-6BEBA4BFE0D0", "creation_timestamp": "2026-07-03T20:50:41.264133Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/08f0a258-eb70-41c2-b577-16543a937580/export</guid>
      <pubDate>Fri, 03 Jul 2026 20:50:41 +0000</pubDate>
    </item>
    <item>
      <title>fd4f6a6e-7038-44fd-afdc-46fdf4d31873</title>
      <link>https://vulnerability.circl.lu/sighting/fd4f6a6e-7038-44fd-afdc-46fdf4d31873/export</link>
      <description>{"uuid": "fd4f6a6e-7038-44fd-afdc-46fdf4d31873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpqqch5bk727", "content": "CVE-2026-8489 ultimate-member (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-03T14:16:07.975529Z"}</description>
      <content:encoded>{"uuid": "fd4f6a6e-7038-44fd-afdc-46fdf4d31873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpqqch5bk727", "content": "CVE-2026-8489 ultimate-member (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-03T14:16:07.975529Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fd4f6a6e-7038-44fd-afdc-46fdf4d31873/export</guid>
      <pubDate>Fri, 03 Jul 2026 14:16:07 +0000</pubDate>
    </item>
    <item>
      <title>dd6bcfe7-3d7c-4075-b299-f609e3dd902c</title>
      <link>https://vulnerability.circl.lu/sighting/dd6bcfe7-3d7c-4075-b299-f609e3dd902c/export</link>
      <description>{"uuid": "dd6bcfe7-3d7c-4075-b299-f609e3dd902c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mppumip7bu2a", "content": "CVE-2026-8489 - Ultimate Member\nCVE ID : CVE-2026-8489\n \n Published : July 3, 2026, 4:30 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction &amp;amp; Membership Plugin plugin for WordPress i...", "creation_timestamp": "2026-07-03T06:00:43.739184Z"}</description>
      <content:encoded>{"uuid": "dd6bcfe7-3d7c-4075-b299-f609e3dd902c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mppumip7bu2a", "content": "CVE-2026-8489 - Ultimate Member\nCVE ID : CVE-2026-8489\n \n Published : July 3, 2026, 4:30 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction &amp;amp; Membership Plugin plugin for WordPress i...", "creation_timestamp": "2026-07-03T06:00:43.739184Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dd6bcfe7-3d7c-4075-b299-f609e3dd902c/export</guid>
      <pubDate>Fri, 03 Jul 2026 06:00:43 +0000</pubDate>
    </item>
  </channel>
</rss>
