<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 12 Oct 2026 03:53:35 +0000</lastBuildDate>
    <item>
      <title>5b744faa-3603-4784-b289-49ea1b869a9d</title>
      <link>https://vulnerability.circl.lu/sighting/5b744faa-3603-4784-b289-49ea1b869a9d/export</link>
      <description>{"uuid": "5b744faa-3603-4784-b289-49ea1b869a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-01)", "content": "", "creation_timestamp": "2026-10-01T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "5b744faa-3603-4784-b289-49ea1b869a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-01)", "content": "", "creation_timestamp": "2026-10-01T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5b744faa-3603-4784-b289-49ea1b869a9d/export</guid>
      <pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>0190de0a-ce26-469c-9dd7-79bff3512ddf</title>
      <link>https://vulnerability.circl.lu/sighting/0190de0a-ce26-469c-9dd7-79bff3512ddf/export</link>
      <description>{"uuid": "0190de0a-ce26-469c-9dd7-79bff3512ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71329", "type": "published-proof-of-concept", "source": "Telegram/CgpRoI0kd8VOnb4H1nysqmmlkbNCUVDObmHsawTqMaNU2Qs", "content": "", "creation_timestamp": "2026-08-13T00:00:43.627665Z"}</description>
      <content:encoded>{"uuid": "0190de0a-ce26-469c-9dd7-79bff3512ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71329", "type": "published-proof-of-concept", "source": "Telegram/CgpRoI0kd8VOnb4H1nysqmmlkbNCUVDObmHsawTqMaNU2Qs", "content": "", "creation_timestamp": "2026-08-13T00:00:43.627665Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0190de0a-ce26-469c-9dd7-79bff3512ddf/export</guid>
      <pubDate>Thu, 13 Aug 2026 00:00:43 +0000</pubDate>
    </item>
    <item>
      <title>22fe8dc1-75c9-446e-a21f-4071e1e79af1</title>
      <link>https://vulnerability.circl.lu/sighting/22fe8dc1-75c9-446e-a21f-4071e1e79af1/export</link>
      <description>{"uuid": "22fe8dc1-75c9-446e-a21f-4071e1e79af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71329", "type": "seen", "source": "Telegram/CgpRoI0kd8VOnb4H1nysqmmlkbNCUVDObmHsawTqMaNU2Qs", "content": "", "creation_timestamp": "2026-08-12T08:00:05.402631Z"}</description>
      <content:encoded>{"uuid": "22fe8dc1-75c9-446e-a21f-4071e1e79af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71329", "type": "seen", "source": "Telegram/CgpRoI0kd8VOnb4H1nysqmmlkbNCUVDObmHsawTqMaNU2Qs", "content": "", "creation_timestamp": "2026-08-12T08:00:05.402631Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/22fe8dc1-75c9-446e-a21f-4071e1e79af1/export</guid>
      <pubDate>Wed, 12 Aug 2026 08:00:05 +0000</pubDate>
    </item>
    <item>
      <title>b1247575-c740-44d2-ac42-e3302fed77ff</title>
      <link>https://vulnerability.circl.lu/sighting/b1247575-c740-44d2-ac42-e3302fed77ff/export</link>
      <description>{"uuid": "b1247575-c740-44d2-ac42-e3302fed77ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msqfx3ek4u2k", "content": "CVE-2025-71324 is trending. Hype score 1, currently #9 on cvemon.\n\nFlowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-71324", "creation_timestamp": "2026-08-10T15:26:24.380711Z"}</description>
      <content:encoded>{"uuid": "b1247575-c740-44d2-ac42-e3302fed77ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msqfx3ek4u2k", "content": "CVE-2025-71324 is trending. Hype score 1, currently #9 on cvemon.\n\nFlowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-71324", "creation_timestamp": "2026-08-10T15:26:24.380711Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b1247575-c740-44d2-ac42-e3302fed77ff/export</guid>
      <pubDate>Mon, 10 Aug 2026 15:26:24 +0000</pubDate>
    </item>
    <item>
      <title>07335ba8-6558-4de5-a9f5-911045be3499</title>
      <link>https://vulnerability.circl.lu/sighting/07335ba8-6558-4de5-a9f5-911045be3499/export</link>
      <description>{"uuid": "07335ba8-6558-4de5-a9f5-911045be3499", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/15ad7e2f-6701-43c5-be22-74aeb0ba7c7a", "content": "", "creation_timestamp": "2026-08-04T01:01:04.353192Z"}</description>
      <content:encoded>{"uuid": "07335ba8-6558-4de5-a9f5-911045be3499", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/15ad7e2f-6701-43c5-be22-74aeb0ba7c7a", "content": "", "creation_timestamp": "2026-08-04T01:01:04.353192Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/07335ba8-6558-4de5-a9f5-911045be3499/export</guid>
      <pubDate>Tue, 04 Aug 2026 01:01:04 +0000</pubDate>
    </item>
    <item>
      <title>e22298a5-2bb1-4329-a42e-78df62e1babb</title>
      <link>https://vulnerability.circl.lu/sighting/e22298a5-2bb1-4329-a42e-78df62e1babb/export</link>
      <description>{"uuid": "e22298a5-2bb1-4329-a42e-78df62e1babb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3ac46ea-fc16-4463-8ef3-f6350ac3d27d", "content": "", "creation_timestamp": "2026-08-03T12:00:22.692059Z"}</description>
      <content:encoded>{"uuid": "e22298a5-2bb1-4329-a42e-78df62e1babb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3ac46ea-fc16-4463-8ef3-f6350ac3d27d", "content": "", "creation_timestamp": "2026-08-03T12:00:22.692059Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e22298a5-2bb1-4329-a42e-78df62e1babb/export</guid>
      <pubDate>Mon, 03 Aug 2026 12:00:22 +0000</pubDate>
    </item>
    <item>
      <title>e8af3cb8-f6ba-47d2-bca6-00dd399068c3</title>
      <link>https://vulnerability.circl.lu/sighting/e8af3cb8-f6ba-47d2-bca6-00dd399068c3/export</link>
      <description>{"uuid": "e8af3cb8-f6ba-47d2-bca6-00dd399068c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71328", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqau4qb6y72k", "content": "\ud83d\udccc CVE-2025-71328 - Flowise before 3.0.10 contains an unverified password change vulnerability. An authenticated user can change their account password through the accoun... https://www.cyberhub.blog/cves/CVE-2025-71328", "creation_timestamp": "2026-07-10T00:07:07.140304Z"}</description>
      <content:encoded>{"uuid": "e8af3cb8-f6ba-47d2-bca6-00dd399068c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71328", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqau4qb6y72k", "content": "\ud83d\udccc CVE-2025-71328 - Flowise before 3.0.10 contains an unverified password change vulnerability. An authenticated user can change their account password through the accoun... https://www.cyberhub.blog/cves/CVE-2025-71328", "creation_timestamp": "2026-07-10T00:07:07.140304Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e8af3cb8-f6ba-47d2-bca6-00dd399068c3/export</guid>
      <pubDate>Fri, 10 Jul 2026 00:07:07 +0000</pubDate>
    </item>
    <item>
      <title>8c3f1ea5-51c6-48a9-bca2-a9daea9169c1</title>
      <link>https://vulnerability.circl.lu/sighting/8c3f1ea5-51c6-48a9-bca2-a9daea9169c1/export</link>
      <description>{"uuid": "8c3f1ea5-51c6-48a9-bca2-a9daea9169c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqash3io6f23", "content": "\ud83d\udccc CVE-2025-71324 - Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistant... https://www.cyberhub.blog/cves/CVE-2025-71324", "creation_timestamp": "2026-07-09T23:37:07.014602Z"}</description>
      <content:encoded>{"uuid": "8c3f1ea5-51c6-48a9-bca2-a9daea9169c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqash3io6f23", "content": "\ud83d\udccc CVE-2025-71324 - Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistant... https://www.cyberhub.blog/cves/CVE-2025-71324", "creation_timestamp": "2026-07-09T23:37:07.014602Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8c3f1ea5-51c6-48a9-bca2-a9daea9169c1/export</guid>
      <pubDate>Thu, 09 Jul 2026 23:37:07 +0000</pubDate>
    </item>
    <item>
      <title>45a17a4c-3e58-478e-bd78-e11c406eaeaf</title>
      <link>https://vulnerability.circl.lu/sighting/45a17a4c-3e58-478e-bd78-e11c406eaeaf/export</link>
      <description>{"uuid": "45a17a4c-3e58-478e-bd78-e11c406eaeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71327", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mphzjf4nzk2g", "content": "\ud83d\udccc CVE-2025-71327 - Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to ... https://www.cyberhub.blog/cves/CVE-2025-71327", "creation_timestamp": "2026-06-30T03:07:07.025960Z"}</description>
      <content:encoded>{"uuid": "45a17a4c-3e58-478e-bd78-e11c406eaeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71327", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mphzjf4nzk2g", "content": "\ud83d\udccc CVE-2025-71327 - Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to ... https://www.cyberhub.blog/cves/CVE-2025-71327", "creation_timestamp": "2026-06-30T03:07:07.025960Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/45a17a4c-3e58-478e-bd78-e11c406eaeaf/export</guid>
      <pubDate>Tue, 30 Jun 2026 03:07:07 +0000</pubDate>
    </item>
    <item>
      <title>c43e00fb-e1c7-4051-8018-87b01640ef8e</title>
      <link>https://vulnerability.circl.lu/sighting/c43e00fb-e1c7-4051-8018-87b01640ef8e/export</link>
      <description>{"uuid": "c43e00fb-e1c7-4051-8018-87b01640ef8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp673kg6ry2x", "content": "CVE-2025-71324 - Flowise - Arbitrary File Read via chatId Parameter\nCVE ID : CVE-2025-71324\n \n Published : June 25, 2026, 9:41 p.m. | 7\u00a0hours, 30\u00a0minutes ago\n \n Description : Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api...", "creation_timestamp": "2026-06-26T05:20:07.874342Z"}</description>
      <content:encoded>{"uuid": "c43e00fb-e1c7-4051-8018-87b01640ef8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71324", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp673kg6ry2x", "content": "CVE-2025-71324 - Flowise - Arbitrary File Read via chatId Parameter\nCVE ID : CVE-2025-71324\n \n Published : June 25, 2026, 9:41 p.m. | 7\u00a0hours, 30\u00a0minutes ago\n \n Description : Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api...", "creation_timestamp": "2026-06-26T05:20:07.874342Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c43e00fb-e1c7-4051-8018-87b01640ef8e/export</guid>
      <pubDate>Fri, 26 Jun 2026 05:20:07 +0000</pubDate>
    </item>
  </channel>
</rss>
