<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 13 Sep 2026 03:39:10 +0000</lastBuildDate>
    <item>
      <title>52575986-cc47-443f-b852-ccecdd41dc28</title>
      <link>https://vulnerability.circl.lu/sighting/52575986-cc47-443f-b852-ccecdd41dc28/export</link>
      <description>{"uuid": "52575986-cc47-443f-b852-ccecdd41dc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86093", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117249508395725821", "content": "The severity is increased for this new vulnerability affecting IBM Db2 (CVE-2026-86093) https://vuldb.com/vuln/402239", "creation_timestamp": "2026-09-11T00:11:56.716370Z"}</description>
      <content:encoded>{"uuid": "52575986-cc47-443f-b852-ccecdd41dc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86093", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117249508395725821", "content": "The severity is increased for this new vulnerability affecting IBM Db2 (CVE-2026-86093) https://vuldb.com/vuln/402239", "creation_timestamp": "2026-09-11T00:11:56.716370Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/52575986-cc47-443f-b852-ccecdd41dc28/export</guid>
      <pubDate>Fri, 11 Sep 2026 00:11:56 +0000</pubDate>
    </item>
    <item>
      <title>7d931770-26cd-452d-b038-6a5c874e876c</title>
      <link>https://vulnerability.circl.lu/sighting/7d931770-26cd-452d-b038-6a5c874e876c/export</link>
      <description>{"uuid": "7d931770-26cd-452d-b038-6a5c874e876c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86093", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv7bacxmck2w", "content": "\ud83d\udfe0 CVE-2026-86093 - High (7.5)\n\nIBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86093/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T00:02:25.901306Z"}</description>
      <content:encoded>{"uuid": "7d931770-26cd-452d-b038-6a5c874e876c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86093", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv7bacxmck2w", "content": "\ud83d\udfe0 CVE-2026-86093 - High (7.5)\n\nIBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86093/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T00:02:25.901306Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7d931770-26cd-452d-b038-6a5c874e876c/export</guid>
      <pubDate>Fri, 11 Sep 2026 00:02:25 +0000</pubDate>
    </item>
    <item>
      <title>3630ffdb-5cb1-4177-b92a-cd9e31bfe7eb</title>
      <link>https://vulnerability.circl.lu/sighting/3630ffdb-5cb1-4177-b92a-cd9e31bfe7eb/export</link>
      <description>{"uuid": "3630ffdb-5cb1-4177-b92a-cd9e31bfe7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86090", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv54eo74uz2v", "content": "CVE-2026-86090: ntopng auth bypass lets non-admin users delete all alert endpoints, silencing critical notifications. CVSS 7.1. No patch yet. Audit your instance now. Details: https://www.valtersit.com/cve/CVE-2026-86090/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-10T03:30:04.601021Z"}</description>
      <content:encoded>{"uuid": "3630ffdb-5cb1-4177-b92a-cd9e31bfe7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86090", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv54eo74uz2v", "content": "CVE-2026-86090: ntopng auth bypass lets non-admin users delete all alert endpoints, silencing critical notifications. CVSS 7.1. No patch yet. Audit your instance now. Details: https://www.valtersit.com/cve/CVE-2026-86090/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-10T03:30:04.601021Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3630ffdb-5cb1-4177-b92a-cd9e31bfe7eb/export</guid>
      <pubDate>Thu, 10 Sep 2026 03:30:04 +0000</pubDate>
    </item>
    <item>
      <title>6d1693ec-11b2-4c47-9d06-741626d6350f</title>
      <link>https://vulnerability.circl.lu/sighting/6d1693ec-11b2-4c47-9d06-741626d6350f/export</link>
      <description>{"uuid": "6d1693ec-11b2-4c47-9d06-741626d6350f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86090", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244625094933654", "content": "CVE-2026-86090: ntopng auth bypass lets non-admin users delete all alert endpoints, silencing critical notifications. CVSS 7.1. No patch yet. Audit your instance now. Details: https://www.valtersit.com/cve/CVE-2026-86090/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-10T03:30:04.591448Z"}</description>
      <content:encoded>{"uuid": "6d1693ec-11b2-4c47-9d06-741626d6350f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86090", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244625094933654", "content": "CVE-2026-86090: ntopng auth bypass lets non-admin users delete all alert endpoints, silencing critical notifications. CVSS 7.1. No patch yet. Audit your instance now. Details: https://www.valtersit.com/cve/CVE-2026-86090/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-10T03:30:04.591448Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6d1693ec-11b2-4c47-9d06-741626d6350f/export</guid>
      <pubDate>Thu, 10 Sep 2026 03:30:04 +0000</pubDate>
    </item>
    <item>
      <title>b734bdf9-4b39-4a02-87df-4b3fa12a2a35</title>
      <link>https://vulnerability.circl.lu/sighting/b734bdf9-4b39-4a02-87df-4b3fa12a2a35/export</link>
      <description>{"uuid": "b734bdf9-4b39-4a02-87df-4b3fa12a2a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86098", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117242777798627415", "content": "CVE-2026-86098: Heap buffer overflow in ntop nDPI &amp;lt;6.0 via ndpi_json_string_escape. Crafted TLS SNI, HTTP, or DNS data can corrupt memory\u2014potential RCE. CVSS 7.4. No patch yet. Harden exposure &amp;amp; monitor traffic. Details: https://www.valtersit.com/cve/CVE-2026-86098/ #CVE #infosec", "creation_timestamp": "2026-09-09T19:40:22.988746Z"}</description>
      <content:encoded>{"uuid": "b734bdf9-4b39-4a02-87df-4b3fa12a2a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86098", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117242777798627415", "content": "CVE-2026-86098: Heap buffer overflow in ntop nDPI &amp;lt;6.0 via ndpi_json_string_escape. Crafted TLS SNI, HTTP, or DNS data can corrupt memory\u2014potential RCE. CVSS 7.4. No patch yet. Harden exposure &amp;amp; monitor traffic. Details: https://www.valtersit.com/cve/CVE-2026-86098/ #CVE #infosec", "creation_timestamp": "2026-09-09T19:40:22.988746Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b734bdf9-4b39-4a02-87df-4b3fa12a2a35/export</guid>
      <pubDate>Wed, 09 Sep 2026 19:40:22 +0000</pubDate>
    </item>
    <item>
      <title>73abbc34-6a35-4e4c-84aa-f27ef0bb8ad8</title>
      <link>https://vulnerability.circl.lu/sighting/73abbc34-6a35-4e4c-84aa-f27ef0bb8ad8/export</link>
      <description>{"uuid": "73abbc34-6a35-4e4c-84aa-f27ef0bb8ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86098", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv4c4nfww72f", "content": "CVE-2026-86098: Heap buffer overflow in ntop nDPI &amp;lt;6.0 via ndpi_json_string_escape. Crafted TLS SNI, HTTP, or DNS data can corrupt memory\u2014potential RCE. CVSS 7.4. No patch yet. Harden exposure &amp;amp; monitor traffic. Details: https://www.valtersit.com/cve/CVE-2026-86098/ #CVE #infosec", "creation_timestamp": "2026-09-09T19:40:16.067021Z"}</description>
      <content:encoded>{"uuid": "73abbc34-6a35-4e4c-84aa-f27ef0bb8ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86098", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv4c4nfww72f", "content": "CVE-2026-86098: Heap buffer overflow in ntop nDPI &amp;lt;6.0 via ndpi_json_string_escape. Crafted TLS SNI, HTTP, or DNS data can corrupt memory\u2014potential RCE. CVSS 7.4. No patch yet. Harden exposure &amp;amp; monitor traffic. Details: https://www.valtersit.com/cve/CVE-2026-86098/ #CVE #infosec", "creation_timestamp": "2026-09-09T19:40:16.067021Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/73abbc34-6a35-4e4c-84aa-f27ef0bb8ad8/export</guid>
      <pubDate>Wed, 09 Sep 2026 19:40:16 +0000</pubDate>
    </item>
    <item>
      <title>b8556d9b-3f69-449a-9112-715b55da7ed9</title>
      <link>https://vulnerability.circl.lu/sighting/b8556d9b-3f69-449a-9112-715b55da7ed9/export</link>
      <description>{"uuid": "b8556d9b-3f69-449a-9112-715b55da7ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86095", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117242030714604253", "content": "CVE-2026-86095 | Unidata netcdf-c has an out-of-bounds write in NC4_HDF5_inq_attname()\u2014crafted HDF5 files overflow a 256-byte buffer, causing memory corruption or crashes. CVSS 7.8. Unpatched. Update immediately. https://www.valtersit.com/cve/CVE-2026-86095/ #CVE #infosec #netcdf", "creation_timestamp": "2026-09-09T16:30:23.823171Z"}</description>
      <content:encoded>{"uuid": "b8556d9b-3f69-449a-9112-715b55da7ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86095", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117242030714604253", "content": "CVE-2026-86095 | Unidata netcdf-c has an out-of-bounds write in NC4_HDF5_inq_attname()\u2014crafted HDF5 files overflow a 256-byte buffer, causing memory corruption or crashes. CVSS 7.8. Unpatched. Update immediately. https://www.valtersit.com/cve/CVE-2026-86095/ #CVE #infosec #netcdf", "creation_timestamp": "2026-09-09T16:30:23.823171Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b8556d9b-3f69-449a-9112-715b55da7ed9/export</guid>
      <pubDate>Wed, 09 Sep 2026 16:30:23 +0000</pubDate>
    </item>
    <item>
      <title>4fcd212a-58f8-45a0-a604-422ba29e4095</title>
      <link>https://vulnerability.circl.lu/sighting/4fcd212a-58f8-45a0-a604-422ba29e4095/export</link>
      <description>{"uuid": "4fcd212a-58f8-45a0-a604-422ba29e4095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86095", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv3xivveya2z", "content": "CVE-2026-86095 | Unidata netcdf-c has an out-of-bounds write in NC4_HDF5_inq_attname()\u2014crafted HDF5 files overflow a 256-byte buffer, causing memory corruption or crashes. CVSS 7.8. Unpatched. Update immediately. https://www.valtersit.com/cve/CVE-2026-86095/ #CVE #infosec #netcdf", "creation_timestamp": "2026-09-09T16:30:17.280928Z"}</description>
      <content:encoded>{"uuid": "4fcd212a-58f8-45a0-a604-422ba29e4095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86095", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv3xivveya2z", "content": "CVE-2026-86095 | Unidata netcdf-c has an out-of-bounds write in NC4_HDF5_inq_attname()\u2014crafted HDF5 files overflow a 256-byte buffer, causing memory corruption or crashes. CVSS 7.8. Unpatched. Update immediately. https://www.valtersit.com/cve/CVE-2026-86095/ #CVE #infosec #netcdf", "creation_timestamp": "2026-09-09T16:30:17.280928Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4fcd212a-58f8-45a0-a604-422ba29e4095/export</guid>
      <pubDate>Wed, 09 Sep 2026 16:30:17 +0000</pubDate>
    </item>
    <item>
      <title>26cb14da-a155-405f-a075-9e28f331f379</title>
      <link>https://vulnerability.circl.lu/sighting/26cb14da-a155-405f-a075-9e28f331f379/export</link>
      <description>{"uuid": "26cb14da-a155-405f-a075-9e28f331f379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86091", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117240930233128852", "content": "CVE-2026-86091: ntopng privilege flaw lets authenticated users delete all host pools, bypassing security policies. CVSS 7.1. Critical admin action needed\u2014if unpatched, restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-86091/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-09T11:50:27.256852Z"}</description>
      <content:encoded>{"uuid": "26cb14da-a155-405f-a075-9e28f331f379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86091", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117240930233128852", "content": "CVE-2026-86091: ntopng privilege flaw lets authenticated users delete all host pools, bypassing security policies. CVSS 7.1. Critical admin action needed\u2014if unpatched, restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-86091/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-09T11:50:27.256852Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/26cb14da-a155-405f-a075-9e28f331f379/export</guid>
      <pubDate>Wed, 09 Sep 2026 11:50:27 +0000</pubDate>
    </item>
    <item>
      <title>b54cd57d-539f-41a5-912b-03687ba2480c</title>
      <link>https://vulnerability.circl.lu/sighting/b54cd57d-539f-41a5-912b-03687ba2480c/export</link>
      <description>{"uuid": "b54cd57d-539f-41a5-912b-03687ba2480c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86091", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv3huhsxyv2t", "content": "CVE-2026-86091: ntopng privilege flaw lets authenticated users delete all host pools, bypassing security policies. CVSS 7.1. Critical admin action needed\u2014if unpatched, restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-86091/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-09T11:50:24.529817Z"}</description>
      <content:encoded>{"uuid": "b54cd57d-539f-41a5-912b-03687ba2480c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86091", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv3huhsxyv2t", "content": "CVE-2026-86091: ntopng privilege flaw lets authenticated users delete all host pools, bypassing security policies. CVSS 7.1. Critical admin action needed\u2014if unpatched, restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-86091/ #CVE #infosec #ntopng", "creation_timestamp": "2026-09-09T11:50:24.529817Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b54cd57d-539f-41a5-912b-03687ba2480c/export</guid>
      <pubDate>Wed, 09 Sep 2026 11:50:24 +0000</pubDate>
    </item>
  </channel>
</rss>
