<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 10 Aug 2026 06:22:36 +0000</lastBuildDate>
    <item>
      <title>6e66b871-5cbc-4f62-9a03-69b9ac36ce19</title>
      <link>https://vulnerability.circl.lu/sighting/6e66b871-5cbc-4f62-9a03-69b9ac36ce19/export</link>
      <description>{"uuid": "6e66b871-5cbc-4f62-9a03-69b9ac36ce19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27699", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrajbgntdb23", "content": "CVE-2026-27699 - @rootio/basic-ftp\nThe Root FTP server, part of the @rootio/basic-ftp package, had a security issue that allowed attackers to access the server without proper authentication. This could have\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-22T14:18:05.221447Z"}</description>
      <content:encoded>{"uuid": "6e66b871-5cbc-4f62-9a03-69b9ac36ce19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27699", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrajbgntdb23", "content": "CVE-2026-27699 - @rootio/basic-ftp\nThe Root FTP server, part of the @rootio/basic-ftp package, had a security issue that allowed attackers to access the server without proper authentication. This could have\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-22T14:18:05.221447Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6e66b871-5cbc-4f62-9a03-69b9ac36ce19/export</guid>
      <pubDate>Wed, 22 Jul 2026 14:18:05 +0000</pubDate>
    </item>
    <item>
      <title>1ca5636b-e0ca-4589-9750-8d5e5cac3fda</title>
      <link>https://vulnerability.circl.lu/sighting/1ca5636b-e0ca-4589-9750-8d5e5cac3fda/export</link>
      <description>{"uuid": "1ca5636b-e0ca-4589-9750-8d5e5cac3fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/eu-de.bsky.social/post/3mqqjss6emp2g", "content": "Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud\n\nhttps://www.europesays.com/germany/55654/\n\nBackground SAP has released security updates to address multiple vulnerabilities (CVE-2026-44747, CVE-2026-27690, and CVE-2026-44761) affecting SAP NetWeaver Application\u2026", "creation_timestamp": "2026-07-16T05:45:12.018826Z"}</description>
      <content:encoded>{"uuid": "1ca5636b-e0ca-4589-9750-8d5e5cac3fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/eu-de.bsky.social/post/3mqqjss6emp2g", "content": "Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud\n\nhttps://www.europesays.com/germany/55654/\n\nBackground SAP has released security updates to address multiple vulnerabilities (CVE-2026-44747, CVE-2026-27690, and CVE-2026-44761) affecting SAP NetWeaver Application\u2026", "creation_timestamp": "2026-07-16T05:45:12.018826Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1ca5636b-e0ca-4589-9750-8d5e5cac3fda/export</guid>
      <pubDate>Thu, 16 Jul 2026 05:45:12 +0000</pubDate>
    </item>
    <item>
      <title>74fedf6c-6ca3-49cc-a89f-cb567294c2ac</title>
      <link>https://vulnerability.circl.lu/sighting/74fedf6c-6ca3-49cc-a89f-cb567294c2ac/export</link>
      <description>{"uuid": "74fedf6c-6ca3-49cc-a89f-cb567294c2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqpyj7dt2c2h", "content": "SAP\u30012026\u5e747\u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30c7\u30fc\u3067CVSS 9.9\u306eNetWeaver\u91cd\u5927\u8106\u5f31\u6027\u3092\u542b\u308016\u4ef6\u3092\u4fee\u6b63(CVE-2026-44747, CVE-2026-27690)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-07-16T00:35:41.376720Z"}</description>
      <content:encoded>{"uuid": "74fedf6c-6ca3-49cc-a89f-cb567294c2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqpyj7dt2c2h", "content": "SAP\u30012026\u5e747\u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30c7\u30fc\u3067CVSS 9.9\u306eNetWeaver\u91cd\u5927\u8106\u5f31\u6027\u3092\u542b\u308016\u4ef6\u3092\u4fee\u6b63(CVE-2026-44747, CVE-2026-27690)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-07-16T00:35:41.376720Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/74fedf6c-6ca3-49cc-a89f-cb567294c2ac/export</guid>
      <pubDate>Thu, 16 Jul 2026 00:35:41 +0000</pubDate>
    </item>
    <item>
      <title>207e2632-7cd8-40f2-a2f3-6eca190ad18c</title>
      <link>https://vulnerability.circl.lu/sighting/207e2632-7cd8-40f2-a2f3-6eca190ad18c/export</link>
      <description>{"uuid": "207e2632-7cd8-40f2-a2f3-6eca190ad18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/eu-de.bsky.social/post/3mqo77tdf6g2n", "content": "Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud\n\nhttps://www.europesays.com/germany/54957/\n\nBackground SAP has released security updates to address multiple vulnerabilities (CVE-2026-44747, CVE-2026-27690, and CVE-2026-44761) affecting SAP NetWeaver Application\u2026", "creation_timestamp": "2026-07-15T07:30:18.861808Z"}</description>
      <content:encoded>{"uuid": "207e2632-7cd8-40f2-a2f3-6eca190ad18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/eu-de.bsky.social/post/3mqo77tdf6g2n", "content": "Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud\n\nhttps://www.europesays.com/germany/54957/\n\nBackground SAP has released security updates to address multiple vulnerabilities (CVE-2026-44747, CVE-2026-27690, and CVE-2026-44761) affecting SAP NetWeaver Application\u2026", "creation_timestamp": "2026-07-15T07:30:18.861808Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/207e2632-7cd8-40f2-a2f3-6eca190ad18c/export</guid>
      <pubDate>Wed, 15 Jul 2026 07:30:18 +0000</pubDate>
    </item>
    <item>
      <title>5a8b0c73-9090-45ae-9bef-c27ae84123af</title>
      <link>https://vulnerability.circl.lu/sighting/5a8b0c73-9090-45ae-9bef-c27ae84123af/export</link>
      <description>{"uuid": "5a8b0c73-9090-45ae-9bef-c27ae84123af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn4bus4py2s", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver &amp;amp; Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data &amp;amp; trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:05:06.472746Z"}</description>
      <content:encoded>{"uuid": "5a8b0c73-9090-45ae-9bef-c27ae84123af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn4bus4py2s", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver &amp;amp; Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data &amp;amp; trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:05:06.472746Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5a8b0c73-9090-45ae-9bef-c27ae84123af/export</guid>
      <pubDate>Tue, 14 Jul 2026 21:05:06 +0000</pubDate>
    </item>
    <item>
      <title>2d37c9e1-b44a-4a01-a260-ad2d636631b4</title>
      <link>https://vulnerability.circl.lu/sighting/2d37c9e1-b44a-4a01-a260-ad2d636631b4/export</link>
      <description>{"uuid": "2d37c9e1-b44a-4a01-a260-ad2d636631b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn45xkzmd26", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver &amp;amp; Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data &amp;amp; trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:02:55.014595Z"}</description>
      <content:encoded>{"uuid": "2d37c9e1-b44a-4a01-a260-ad2d636631b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn45xkzmd26", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver &amp;amp; Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data &amp;amp; trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:02:55.014595Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2d37c9e1-b44a-4a01-a260-ad2d636631b4/export</guid>
      <pubDate>Tue, 14 Jul 2026 21:02:55 +0000</pubDate>
    </item>
    <item>
      <title>aedbe625-2ee8-482e-b242-26a3e2d4b407</title>
      <link>https://vulnerability.circl.lu/sighting/aedbe625-2ee8-482e-b242-26a3e2d4b407/export</link>
      <description>{"uuid": "aedbe625-2ee8-482e-b242-26a3e2d4b407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116918218287332576", "content": "SAP July 2026 patch day delivers CRITICAL fixes: NetWeaver (CVE-2026-44747, memory corruption), Approuter (CVE-2026-27690, HTTP smuggling), Commerce Cloud (CVE-2026-44761, hardcoded creds). Patch ASAP. https://radar.offseq.com/threat/sap-patches-critical-vulnerabilities-in-netweaver--aa75f703df9065e4 #OffSeq #SAP #Vuln #PatchTuesday", "creation_timestamp": "2026-07-14T12:00:31.386680Z"}</description>
      <content:encoded>{"uuid": "aedbe625-2ee8-482e-b242-26a3e2d4b407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116918218287332576", "content": "SAP July 2026 patch day delivers CRITICAL fixes: NetWeaver (CVE-2026-44747, memory corruption), Approuter (CVE-2026-27690, HTTP smuggling), Commerce Cloud (CVE-2026-44761, hardcoded creds). Patch ASAP. https://radar.offseq.com/threat/sap-patches-critical-vulnerabilities-in-netweaver--aa75f703df9065e4 #OffSeq #SAP #Vuln #PatchTuesday", "creation_timestamp": "2026-07-14T12:00:31.386680Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aedbe625-2ee8-482e-b242-26a3e2d4b407/export</guid>
      <pubDate>Tue, 14 Jul 2026 12:00:31 +0000</pubDate>
    </item>
    <item>
      <title>4fa38082-4a52-474b-b970-cbb25b2791e1</title>
      <link>https://vulnerability.circl.lu/sighting/4fa38082-4a52-474b-b970-cbb25b2791e1/export</link>
      <description>{"uuid": "4fa38082-4a52-474b-b970-cbb25b2791e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjwjtly2o", "content": "Daily IT Security Digest \u2014 2026-07-14\nconfigurations as a mitigation.\nSources: https://infosec.exchange/@offseq/116916448461094889 \u00b7 https://radar.offseq.com/threat/cve-2026-27690\n\n## 2. CRITICAL \u2014 Chrome 150 Patches 27 Vulnerabilities Including 2 Use-After-Free Bugs\nGoogle Chrome 150 addresses 27", "creation_timestamp": "2026-07-14T05:03:14.627990Z"}</description>
      <content:encoded>{"uuid": "4fa38082-4a52-474b-b970-cbb25b2791e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjwjtly2o", "content": "Daily IT Security Digest \u2014 2026-07-14\nconfigurations as a mitigation.\nSources: https://infosec.exchange/@offseq/116916448461094889 \u00b7 https://radar.offseq.com/threat/cve-2026-27690\n\n## 2. CRITICAL \u2014 Chrome 150 Patches 27 Vulnerabilities Including 2 Use-After-Free Bugs\nGoogle Chrome 150 addresses 27", "creation_timestamp": "2026-07-14T05:03:14.627990Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4fa38082-4a52-474b-b970-cbb25b2791e1/export</guid>
      <pubDate>Tue, 14 Jul 2026 05:03:14 +0000</pubDate>
    </item>
    <item>
      <title>b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6</title>
      <link>https://vulnerability.circl.lu/sighting/b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6/export</link>
      <description>{"uuid": "b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjvxlep22", "content": "Daily IT Security Digest \u2014 2026-07-14\n# Daily IT Security Digest \u2014 2026-07-14\n\n## 1. CRITICAL \u2014 SAP Approuter HTTP Request Smuggling (CVE-2026-27690, CVSS 9.1)\nA critical HTTP request smuggling flaw was disclosed in SAP Approuter, scored 9.1 on the CVSS v3.1 scale. Remote attackers can exploit the", "creation_timestamp": "2026-07-14T05:03:14.144599Z"}</description>
      <content:encoded>{"uuid": "b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjvxlep22", "content": "Daily IT Security Digest \u2014 2026-07-14\n# Daily IT Security Digest \u2014 2026-07-14\n\n## 1. CRITICAL \u2014 SAP Approuter HTTP Request Smuggling (CVE-2026-27690, CVSS 9.1)\nA critical HTTP request smuggling flaw was disclosed in SAP Approuter, scored 9.1 on the CVSS v3.1 scale. Remote attackers can exploit the", "creation_timestamp": "2026-07-14T05:03:14.144599Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6/export</guid>
      <pubDate>Tue, 14 Jul 2026 05:03:14 +0000</pubDate>
    </item>
    <item>
      <title>bf472dfa-623c-4c7d-8ca3-9bad64449c47</title>
      <link>https://vulnerability.circl.lu/sighting/bf472dfa-623c-4c7d-8ca3-9bad64449c47/export</link>
      <description>{"uuid": "bf472dfa-623c-4c7d-8ca3-9bad64449c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqlepceb3g2f", "content": "CVE-2026-27690: SAP Approuter faces CRITICAL HTTP request smuggling (CVSS 9.1). Unauthenticated attackers can expose user data &amp;amp; disrupt services. No patch \u2014 monitor SAP for updates. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #...", "creation_timestamp": "2026-07-14T04:30:30.982493Z"}</description>
      <content:encoded>{"uuid": "bf472dfa-623c-4c7d-8ca3-9bad64449c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqlepceb3g2f", "content": "CVE-2026-27690: SAP Approuter faces CRITICAL HTTP request smuggling (CVSS 9.1). Unauthenticated attackers can expose user data &amp;amp; disrupt services. No patch \u2014 monitor SAP for updates. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #...", "creation_timestamp": "2026-07-14T04:30:30.982493Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bf472dfa-623c-4c7d-8ca3-9bad64449c47/export</guid>
      <pubDate>Tue, 14 Jul 2026 04:30:30 +0000</pubDate>
    </item>
  </channel>
</rss>
