https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 11 Aug 2026 23:07:12 +0000 https://vulnerability.circl.lu/sighting/570be4d8-5936-4124-94a1-fa3b8b9d347d/export {"uuid": "570be4d8-5936-4124-94a1-fa3b8b9d347d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mskzeot7sz2o", "content": "CVE-2026-48088\nAn attacker can access sensitive patient data by registering themselves as an additional encryption recipient for any tenant's appointments without proper authentication. This breaks OpenReception's end-to-end\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-08T11:58:04.480231Z"} {"uuid": "570be4d8-5936-4124-94a1-fa3b8b9d347d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mskzeot7sz2o", "content": "CVE-2026-48088\nAn attacker can access sensitive patient data by registering themselves as an additional encryption recipient for any tenant's appointments without proper authentication. This breaks OpenReception's end-to-end\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-08T11:58:04.480231Z"} https://vulnerability.circl.lu/sighting/570be4d8-5936-4124-94a1-fa3b8b9d347d/export Sat, 08 Aug 2026 11:58:04 +0000 https://vulnerability.circl.lu/sighting/0a2d7ec6-3498-4b5f-ace2-cf7594c897c7/export {"uuid": "0a2d7ec6-3498-4b5f-ace2-cf7594c897c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mshasycdxy2j", "content": "CRITICAL: open-reception appointment-booking-software <1.0.4 lets unauthenticated attackers break E2E encryption & access sensitive data. Upgrade to 1.0.4+ now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe...", "creation_timestamp": "2026-08-07T00:00:40.882661Z"} {"uuid": "0a2d7ec6-3498-4b5f-ace2-cf7594c897c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mshasycdxy2j", "content": "CRITICAL: open-reception appointment-booking-software <1.0.4 lets unauthenticated attackers break E2E encryption & access sensitive data. Upgrade to 1.0.4+ now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe...", "creation_timestamp": "2026-08-07T00:00:40.882661Z"} https://vulnerability.circl.lu/sighting/0a2d7ec6-3498-4b5f-ace2-cf7594c897c7/export Fri, 07 Aug 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/b240677e-21e4-4edf-a725-426e70dd0253/export {"uuid": "b240677e-21e4-4edf-a725-426e70dd0253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117051283088575349", "content": "CVE-2026-48088 | CRITICAL in open-reception appointment-booking-software <1.0.4: Missing authorization on crypto key API lets attackers decrypt appointments & disrupt flows. Patch to 1.0.4 now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe2ecc#OffSeq #CVE202648088 #Vuln #AppSec", "creation_timestamp": "2026-08-07T00:00:39.023930Z"} {"uuid": "b240677e-21e4-4edf-a725-426e70dd0253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48088", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117051283088575349", "content": "CVE-2026-48088 | CRITICAL in open-reception appointment-booking-software <1.0.4: Missing authorization on crypto key API lets attackers decrypt appointments & disrupt flows. Patch to 1.0.4 now. https://radar.offseq.com/threat/cve-2026-48088-cwe-862-missing-authorization-in-open-reception-appointment-booking-software-d1c4584f6afe2ecc#OffSeq #CVE202648088 #Vuln #AppSec", "creation_timestamp": "2026-08-07T00:00:39.023930Z"} https://vulnerability.circl.lu/sighting/b240677e-21e4-4edf-a725-426e70dd0253/export Fri, 07 Aug 2026 00:00:39 +0000 https://vulnerability.circl.lu/sighting/5ecb1996-a634-4ba8-9c0e-8798b5fb486a/export {"uuid": "5ecb1996-a634-4ba8-9c0e-8798b5fb486a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5uylias2a", "content": "CVE-2026-48088\nPrior to version 1.0.4, OpenReception's software allowed unauthorized users to store encryption keys for any tenant's appointments. This could have let attackers access sensitive information. To fix this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:08:06.394124Z"} {"uuid": "5ecb1996-a634-4ba8-9c0e-8798b5fb486a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48088", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5uylias2a", "content": "CVE-2026-48088\nPrior to version 1.0.4, OpenReception's software allowed unauthorized users to store encryption keys for any tenant's appointments. This could have let attackers access sensitive information. To fix this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:08:06.394124Z"} https://vulnerability.circl.lu/sighting/5ecb1996-a634-4ba8-9c0e-8798b5fb486a/export Thu, 06 Aug 2026 23:08:06 +0000