<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 10 Aug 2026 19:54:42 +0000</lastBuildDate>
    <item>
      <title>9e7b7f13-9606-4023-b371-37ceb57af2c4</title>
      <link>https://vulnerability.circl.lu/sighting/9e7b7f13-9606-4023-b371-37ceb57af2c4/export</link>
      <description>{"uuid": "9e7b7f13-9606-4023-b371-37ceb57af2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19348", "type": "seen", "source": "https://gist.github.com/ichintu/1098501537dbd22f32fe457de414c0b1", "content": "**Cyber Threat Summary \u2013 Aug\u202f9\u202f2026**  \n- **CVE-2026-19348** \u2013 Command injection in the `sprintf` call of `/protocol.csp` on the Shenzhen Aitemi M300 Wi\u2011Fi Repeater (r0\u2011ea7890a).  \n- Attack vectors: tampering with `enable`, `name`, or `mac` parameters in the SMAC filter configuration URL.  \n- Enables arbitrary remote command execution; public exploit available.  \n- Severity: 10.0 (Critical).", "creation_timestamp": "2026-08-09T16:00:46.130248Z"}</description>
      <content:encoded>{"uuid": "9e7b7f13-9606-4023-b371-37ceb57af2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19348", "type": "seen", "source": "https://gist.github.com/ichintu/1098501537dbd22f32fe457de414c0b1", "content": "**Cyber Threat Summary \u2013 Aug\u202f9\u202f2026**  \n- **CVE-2026-19348** \u2013 Command injection in the `sprintf` call of `/protocol.csp` on the Shenzhen Aitemi M300 Wi\u2011Fi Repeater (r0\u2011ea7890a).  \n- Attack vectors: tampering with `enable`, `name`, or `mac` parameters in the SMAC filter configuration URL.  \n- Enables arbitrary remote command execution; public exploit available.  \n- Severity: 10.0 (Critical).", "creation_timestamp": "2026-08-09T16:00:46.130248Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9e7b7f13-9606-4023-b371-37ceb57af2c4/export</guid>
      <pubDate>Sun, 09 Aug 2026 16:00:46 +0000</pubDate>
    </item>
    <item>
      <title>6ecd1b73-7cfe-4990-9daf-fb5a14468ab4</title>
      <link>https://vulnerability.circl.lu/sighting/6ecd1b73-7cfe-4990-9daf-fb5a14468ab4/export</link>
      <description>{"uuid": "6ecd1b73-7cfe-4990-9daf-fb5a14468ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19348", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msnjy52jnm23", "content": "\ud83d\udd34 CVE-2026-19348 - Critical (9.8)\n\nA security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19348/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T12:00:36.110240Z"}</description>
      <content:encoded>{"uuid": "6ecd1b73-7cfe-4990-9daf-fb5a14468ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19348", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msnjy52jnm23", "content": "\ud83d\udd34 CVE-2026-19348 - Critical (9.8)\n\nA security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19348/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T12:00:36.110240Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6ecd1b73-7cfe-4990-9daf-fb5a14468ab4/export</guid>
      <pubDate>Sun, 09 Aug 2026 12:00:36 +0000</pubDate>
    </item>
    <item>
      <title>d678fbb7-3713-4d1b-aac2-5af590469e3c</title>
      <link>https://vulnerability.circl.lu/sighting/d678fbb7-3713-4d1b-aac2-5af590469e3c/export</link>
      <description>{"uuid": "d678fbb7-3713-4d1b-aac2-5af590469e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19348", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msnjxultsu2k", "content": "Shenzhen Aitemi M300 Wi-Fi Repeater hit by CRITICAL command injection (CVE-2026-19348). Public exploit code, no patch. Restrict management access &amp;amp; monitor endpoints. https://radar.offseq.com/threat/cve-2026-19348-command-injection-in-shenzhen-aitemi-m300-wi-fi-repeater-50170c9de7b315c0 #OffSeq #...", "creation_timestamp": "2026-08-09T12:00:26.923419Z"}</description>
      <content:encoded>{"uuid": "d678fbb7-3713-4d1b-aac2-5af590469e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19348", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msnjxultsu2k", "content": "Shenzhen Aitemi M300 Wi-Fi Repeater hit by CRITICAL command injection (CVE-2026-19348). Public exploit code, no patch. Restrict management access &amp;amp; monitor endpoints. https://radar.offseq.com/threat/cve-2026-19348-command-injection-in-shenzhen-aitemi-m300-wi-fi-repeater-50170c9de7b315c0 #OffSeq #...", "creation_timestamp": "2026-08-09T12:00:26.923419Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d678fbb7-3713-4d1b-aac2-5af590469e3c/export</guid>
      <pubDate>Sun, 09 Aug 2026 12:00:26 +0000</pubDate>
    </item>
  </channel>
</rss>
