<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 13 Aug 2026 07:04:41 +0000</lastBuildDate>
    <item>
      <title>6671d661-b0d6-45de-8c51-c268898be56c</title>
      <link>https://vulnerability.circl.lu/sighting/6671d661-b0d6-45de-8c51-c268898be56c/export</link>
      <description>{"uuid": "6671d661-b0d6-45de-8c51-c268898be56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41771", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bzhod4u7cmjyl", "content": "CVE-2025-41771 - SQL injection\nCVE ID : CVE-2025-41771\n \n Published : Aug. 12, 2026, 8:06 a.m. | 21\u00a0minutes ago\n \n Description : An authenticated attacker with low privileges can access an endpoint in the controller\u2019s web interface that is vulnerable to SQL injection. The vuln...", "creation_timestamp": "2026-08-12T08:51:23.803254Z"}</description>
      <content:encoded>{"uuid": "6671d661-b0d6-45de-8c51-c268898be56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41771", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bzhod4u7cmjyl", "content": "CVE-2025-41771 - SQL injection\nCVE ID : CVE-2025-41771\n \n Published : Aug. 12, 2026, 8:06 a.m. | 21\u00a0minutes ago\n \n Description : An authenticated attacker with low privileges can access an endpoint in the controller\u2019s web interface that is vulnerable to SQL injection. The vuln...", "creation_timestamp": "2026-08-12T08:51:23.803254Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6671d661-b0d6-45de-8c51-c268898be56c/export</guid>
      <pubDate>Wed, 12 Aug 2026 08:51:23 +0000</pubDate>
    </item>
    <item>
      <title>52b77ddd-0350-481a-997c-cf1604268ec6</title>
      <link>https://vulnerability.circl.lu/sighting/52b77ddd-0350-481a-997c-cf1604268ec6/export</link>
      <description>{"uuid": "52b77ddd-0350-481a-997c-cf1604268ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41771", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117081508015288555", "content": "#OT #Advisory VDE-2025-056Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware\nThis advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771\nhttps://certvde.com/en/advisories/vde-2025-056/\n#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json", "creation_timestamp": "2026-08-12T08:07:14.630548Z"}</description>
      <content:encoded>{"uuid": "52b77ddd-0350-481a-997c-cf1604268ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-41771", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117081508015288555", "content": "#OT #Advisory VDE-2025-056Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware\nThis advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.#CVE CVE-2025-41769, CVE-2025-41770, CVE-2025-41771\nhttps://certvde.com/en/advisories/vde-2025-056/\n#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-056.json", "creation_timestamp": "2026-08-12T08:07:14.630548Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/52b77ddd-0350-481a-997c-cf1604268ec6/export</guid>
      <pubDate>Wed, 12 Aug 2026 08:07:14 +0000</pubDate>
    </item>
  </channel>
</rss>
