<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 11 Oct 2026 20:08:01 +0000</lastBuildDate>
    <item>
      <title>2904c45a-e023-41e7-b203-cbcb72c3aed5</title>
      <link>https://vulnerability.circl.lu/sighting/2904c45a-e023-41e7-b203-cbcb72c3aed5/export</link>
      <description>{"uuid": "2904c45a-e023-41e7-b203-cbcb72c3aed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi4x7whm22o", "content": "CVE-2026-86405 - prestashop virtual pos module\nThe PrestaShop Virtual POS extension from Sipay Electronic Money can be tricked into accepting forged payment signatures, letting attackers make payments appear legitimate. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-09T23:30:05.348007Z"}</description>
      <content:encoded>{"uuid": "2904c45a-e023-41e7-b203-cbcb72c3aed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi4x7whm22o", "content": "CVE-2026-86405 - prestashop virtual pos module\nThe PrestaShop Virtual POS extension from Sipay Electronic Money can be tricked into accepting forged payment signatures, letting attackers make payments appear legitimate. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-09T23:30:05.348007Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2904c45a-e023-41e7-b203-cbcb72c3aed5/export</guid>
      <pubDate>Fri, 09 Oct 2026 23:30:05 +0000</pubDate>
    </item>
    <item>
      <title>6937a706-2583-4a4a-970a-fda319a5079b</title>
      <link>https://vulnerability.circl.lu/sighting/6937a706-2583-4a4a-970a-fda319a5079b/export</link>
      <description>{"uuid": "6937a706-2583-4a4a-970a-fda319a5079b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxh5jqxjbu27", "content": "\ud83d\udea8 CVE-2026-86405 \u2014 CVSS 9.8 CRITICAL\n\nImproper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Servic...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86405\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T14:07:47.751039Z"}</description>
      <content:encoded>{"uuid": "6937a706-2583-4a4a-970a-fda319a5079b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxh5jqxjbu27", "content": "\ud83d\udea8 CVE-2026-86405 \u2014 CVSS 9.8 CRITICAL\n\nImproper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Servic...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86405\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T14:07:47.751039Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6937a706-2583-4a4a-970a-fda319a5079b/export</guid>
      <pubDate>Fri, 09 Oct 2026 14:07:47 +0000</pubDate>
    </item>
    <item>
      <title>5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8</title>
      <link>https://vulnerability.circl.lu/sighting/5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8/export</link>
      <description>{"uuid": "5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5zkzrfw2gh6rz", "content": "CVE-2026-86405 - Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop\nCVE ID : CVE-2026-86405\n \n Published : Oct. 9, 2026, 12:52 p.m. | 37\u00a0minutes ago\n \n Description : Improper verification of cryptographic signature vulnerability in Sipay Electronic Money...", "creation_timestamp": "2026-10-09T13:59:28.247433Z"}</description>
      <content:encoded>{"uuid": "5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86405", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5zkzrfw2gh6rz", "content": "CVE-2026-86405 - Payment Validation Bypass in Sipay Electronic Money's SanalPos PrestaShop\nCVE ID : CVE-2026-86405\n \n Published : Oct. 9, 2026, 12:52 p.m. | 37\u00a0minutes ago\n \n Description : Improper verification of cryptographic signature vulnerability in Sipay Electronic Money...", "creation_timestamp": "2026-10-09T13:59:28.247433Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5618b4e6-ba03-4e0f-ad06-ca3d2515f7b8/export</guid>
      <pubDate>Fri, 09 Oct 2026 13:59:28 +0000</pubDate>
    </item>
    <item>
      <title>f6e8d4b6-50f5-422d-a96a-82db26ef9d88</title>
      <link>https://vulnerability.circl.lu/sighting/f6e8d4b6-50f5-422d-a96a-82db26ef9d88/export</link>
      <description>{"uuid": "f6e8d4b6-50f5-422d-a96a-82db26ef9d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86405", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxh3h4qzeq2r", "content": "CRITICAL flaw (CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 \u2013 26.9.1): Improper signature checks allow spoofing &amp;amp; unauthorized actions. Monitor for vendor patches &amp;amp; restrict access. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature...", "creation_timestamp": "2026-10-09T13:30:32.253732Z"}</description>
      <content:encoded>{"uuid": "f6e8d4b6-50f5-422d-a96a-82db26ef9d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86405", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxh3h4qzeq2r", "content": "CRITICAL flaw (CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 \u2013 26.9.1): Improper signature checks allow spoofing &amp;amp; unauthorized actions. Monitor for vendor patches &amp;amp; restrict access. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature...", "creation_timestamp": "2026-10-09T13:30:32.253732Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f6e8d4b6-50f5-422d-a96a-82db26ef9d88/export</guid>
      <pubDate>Fri, 09 Oct 2026 13:30:32 +0000</pubDate>
    </item>
    <item>
      <title>91988c1a-6986-42c1-acd2-1a7253606f69</title>
      <link>https://vulnerability.circl.lu/sighting/91988c1a-6986-42c1-acd2-1a7253606f69/export</link>
      <description>{"uuid": "91988c1a-6986-42c1-acd2-1a7253606f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86405", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117411193134892551", "content": "CVE-2026-86405 (CRITICAL, CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 \u2013 26.9.1): Improper cryptographic signature checks allow spoofing &amp;amp; data tampering. Patch not confirmed \u2014 monitor vendor. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature-in-sipay-electronic-money-and-d1d195a6023ad286 #OffSeq #CVE #vuln #cybersecurity", "creation_timestamp": "2026-10-09T13:30:30.381706Z"}</description>
      <content:encoded>{"uuid": "91988c1a-6986-42c1-acd2-1a7253606f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86405", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117411193134892551", "content": "CVE-2026-86405 (CRITICAL, CVSS 9.8) in Sipay PrestaShop Virtual POS Module (26.8.1 \u2013 26.9.1): Improper cryptographic signature checks allow spoofing &amp;amp; data tampering. Patch not confirmed \u2014 monitor vendor. https://radar.offseq.com/threat/cve-2026-86405-cwe-347-improper-verification-of-cryptographic-signature-in-sipay-electronic-money-and-d1d195a6023ad286 #OffSeq #CVE #vuln #cybersecurity", "creation_timestamp": "2026-10-09T13:30:30.381706Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/91988c1a-6986-42c1-acd2-1a7253606f69/export</guid>
      <pubDate>Fri, 09 Oct 2026 13:30:30 +0000</pubDate>
    </item>
  </channel>
</rss>
