<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 12 Aug 2026 09:23:25 +0000</lastBuildDate>
    <item>
      <title>5022fc94-944b-4f38-96f2-b70b049f02f1</title>
      <link>https://vulnerability.circl.lu/sighting/5022fc94-944b-4f38-96f2-b70b049f02f1/export</link>
      <description>{"uuid": "5022fc94-944b-4f38-96f2-b70b049f02f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5423", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msq7juqo632n", "content": "CVE-2026-5423 is an authentication bypass in @neo4j/graphql that lets unauthenticated clients forge JWT claims and read subscription data.\n\n#Neo4j #GraphQL #CVE20265423 #AuthenticationBypass #JWT #InfoSec", "creation_timestamp": "2026-08-10T13:31:39.047920Z"}</description>
      <content:encoded>{"uuid": "5022fc94-944b-4f38-96f2-b70b049f02f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5423", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msq7juqo632n", "content": "CVE-2026-5423 is an authentication bypass in @neo4j/graphql that lets unauthenticated clients forge JWT claims and read subscription data.\n\n#Neo4j #GraphQL #CVE20265423 #AuthenticationBypass #JWT #InfoSec", "creation_timestamp": "2026-08-10T13:31:39.047920Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5022fc94-944b-4f38-96f2-b70b049f02f1/export</guid>
      <pubDate>Mon, 10 Aug 2026 13:31:39 +0000</pubDate>
    </item>
    <item>
      <title>2e230281-64e5-43aa-9e9b-751d37fd468b</title>
      <link>https://vulnerability.circl.lu/sighting/2e230281-64e5-43aa-9e9b-751d37fd468b/export</link>
      <description>{"uuid": "2e230281-64e5-43aa-9e9b-751d37fd468b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54234", "type": "published-proof-of-concept", "source": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8wr5-jm2h-8r4f", "content": "", "creation_timestamp": "2026-07-17T18:35:04.519974Z"}</description>
      <content:encoded>{"uuid": "2e230281-64e5-43aa-9e9b-751d37fd468b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54234", "type": "published-proof-of-concept", "source": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8wr5-jm2h-8r4f", "content": "", "creation_timestamp": "2026-07-17T18:35:04.519974Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2e230281-64e5-43aa-9e9b-751d37fd468b/export</guid>
      <pubDate>Fri, 17 Jul 2026 18:35:04 +0000</pubDate>
    </item>
    <item>
      <title>9516d3bc-8a8f-4974-a559-7921e8e3bd01</title>
      <link>https://vulnerability.circl.lu/sighting/9516d3bc-8a8f-4974-a559-7921e8e3bd01/export</link>
      <description>{"uuid": "9516d3bc-8a8f-4974-a559-7921e8e3bd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54234", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2rebevqb2j", "content": "CVE-2026-54234 - High-severity DoS in vLLM. Multi-request speculative decoding triggers out-of-vocabulary token crash. CVSS 7.5. No patch yet - update to v0.24.0+ immediately. #CVE #vLLM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54234/", "creation_timestamp": "2026-07-07T14:01:40.315362Z"}</description>
      <content:encoded>{"uuid": "9516d3bc-8a8f-4974-a559-7921e8e3bd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54234", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2rebevqb2j", "content": "CVE-2026-54234 - High-severity DoS in vLLM. Multi-request speculative decoding triggers out-of-vocabulary token crash. CVSS 7.5. No patch yet - update to v0.24.0+ immediately. #CVE #vLLM #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54234/", "creation_timestamp": "2026-07-07T14:01:40.315362Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9516d3bc-8a8f-4974-a559-7921e8e3bd01/export</guid>
      <pubDate>Tue, 07 Jul 2026 14:01:40 +0000</pubDate>
    </item>
    <item>
      <title>a348304b-7ed4-4a42-90ed-f656f30f04eb</title>
      <link>https://vulnerability.circl.lu/sighting/a348304b-7ed4-4a42-90ed-f656f30f04eb/export</link>
      <description>{"uuid": "a348304b-7ed4-4a42-90ed-f656f30f04eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54232", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mplgiawmxa2x", "content": "\ud83d\udccc CVE-2026-54232 - vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion... https://www.cyberhub.blog/cves/CVE-2026-54232", "creation_timestamp": "2026-07-01T11:37:07.689047Z"}</description>
      <content:encoded>{"uuid": "a348304b-7ed4-4a42-90ed-f656f30f04eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54232", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mplgiawmxa2x", "content": "\ud83d\udccc CVE-2026-54232 - vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion... https://www.cyberhub.blog/cves/CVE-2026-54232", "creation_timestamp": "2026-07-01T11:37:07.689047Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a348304b-7ed4-4a42-90ed-f656f30f04eb/export</guid>
      <pubDate>Wed, 01 Jul 2026 11:37:07 +0000</pubDate>
    </item>
    <item>
      <title>f95973c2-3c3d-469f-9a07-a889592e116f</title>
      <link>https://vulnerability.circl.lu/sighting/f95973c2-3c3d-469f-9a07-a889592e116f/export</link>
      <description>{"uuid": "f95973c2-3c3d-469f-9a07-a889592e116f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54230", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3z7euek2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54230 \u0432 ABRT: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E6418709-2B33-490A-8E17-AFB0D0BDB9FF", "creation_timestamp": "2026-06-29T18:19:05.416162Z"}</description>
      <content:encoded>{"uuid": "f95973c2-3c3d-469f-9a07-a889592e116f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54230", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3z7euek2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54230 \u0432 ABRT: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E6418709-2B33-490A-8E17-AFB0D0BDB9FF", "creation_timestamp": "2026-06-29T18:19:05.416162Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f95973c2-3c3d-469f-9a07-a889592e116f/export</guid>
      <pubDate>Mon, 29 Jun 2026 18:19:05 +0000</pubDate>
    </item>
    <item>
      <title>c8c3e578-5d8f-43de-8512-caf11abcbc22</title>
      <link>https://vulnerability.circl.lu/sighting/c8c3e578-5d8f-43de-8512-caf11abcbc22/export</link>
      <description>{"uuid": "c8c3e578-5d8f-43de-8512-caf11abcbc22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54231", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3vg2wcb2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54231: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 ABRT \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D5241133-1112-4DFE-BCB6-4FB91AAFA13D", "creation_timestamp": "2026-06-29T18:16:58.149287Z"}</description>
      <content:encoded>{"uuid": "c8c3e578-5d8f-43de-8512-caf11abcbc22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54231", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3vg2wcb2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54231: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 ABRT \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D5241133-1112-4DFE-BCB6-4FB91AAFA13D", "creation_timestamp": "2026-06-29T18:16:58.149287Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c8c3e578-5d8f-43de-8512-caf11abcbc22/export</guid>
      <pubDate>Mon, 29 Jun 2026 18:16:58 +0000</pubDate>
    </item>
    <item>
      <title>41603fc1-8248-4596-916e-0698e7de8c66</title>
      <link>https://vulnerability.circl.lu/sighting/41603fc1-8248-4596-916e-0698e7de8c66/export</link>
      <description>{"uuid": "41603fc1-8248-4596-916e-0698e7de8c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml", "content": "", "creation_timestamp": "2026-06-25T00:00:04.604049Z"}</description>
      <content:encoded>{"uuid": "41603fc1-8248-4596-916e-0698e7de8c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml", "content": "", "creation_timestamp": "2026-06-25T00:00:04.604049Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/41603fc1-8248-4596-916e-0698e7de8c66/export</guid>
      <pubDate>Thu, 25 Jun 2026 00:00:04 +0000</pubDate>
    </item>
    <item>
      <title>03c0a40a-b11b-4f2f-9c50-20cd3a85e30f</title>
      <link>https://vulnerability.circl.lu/sighting/03c0a40a-b11b-4f2f-9c50-20cd3a85e30f/export</link>
      <description>{"uuid": "03c0a40a-b11b-4f2f-9c50-20cd3a85e30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml", "content": "", "creation_timestamp": "2026-06-24T15:00:05.375630Z"}</description>
      <content:encoded>{"uuid": "03c0a40a-b11b-4f2f-9c50-20cd3a85e30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54236", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54236.yaml", "content": "", "creation_timestamp": "2026-06-24T15:00:05.375630Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/03c0a40a-b11b-4f2f-9c50-20cd3a85e30f/export</guid>
      <pubDate>Wed, 24 Jun 2026 15:00:05 +0000</pubDate>
    </item>
    <item>
      <title>0ac74372-4a3e-4d93-b7f1-2c80157629d8</title>
      <link>https://vulnerability.circl.lu/sighting/0ac74372-4a3e-4d93-b7f1-2c80157629d8/export</link>
      <description>{"uuid": "0ac74372-4a3e-4d93-b7f1-2c80157629d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow7gveg3u2j", "content": "CVE-2026-54232 - vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile\nCVE ID : CVE-2026-54232\n \n Published : June 22, 2026, 10:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, th...", "creation_timestamp": "2026-06-23T01:05:10.436634Z"}</description>
      <content:encoded>{"uuid": "0ac74372-4a3e-4d93-b7f1-2c80157629d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow7gveg3u2j", "content": "CVE-2026-54232 - vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile\nCVE ID : CVE-2026-54232\n \n Published : June 22, 2026, 10:16 p.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, th...", "creation_timestamp": "2026-06-23T01:05:10.436634Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0ac74372-4a3e-4d93-b7f1-2c80157629d8/export</guid>
      <pubDate>Tue, 23 Jun 2026 01:05:10 +0000</pubDate>
    </item>
    <item>
      <title>28cf54cc-98ec-4d59-ad2d-18216c88f96b</title>
      <link>https://vulnerability.circl.lu/sighting/28cf54cc-98ec-4d59-ad2d-18216c88f96b/export</link>
      <description>{"uuid": "28cf54cc-98ec-4d59-ad2d-18216c88f96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow5sapd2523", "content": "CVE-2026-54235 - vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels\nCVE ID : CVE-2026-54235\n \n Published : June 22, 2026, 9:59 p.m. | 1\u00a0hour, 45\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language m...", "creation_timestamp": "2026-06-23T00:35:43.885162Z"}</description>
      <content:encoded>{"uuid": "28cf54cc-98ec-4d59-ad2d-18216c88f96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow5sapd2523", "content": "CVE-2026-54235 - vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels\nCVE ID : CVE-2026-54235\n \n Published : June 22, 2026, 9:59 p.m. | 1\u00a0hour, 45\u00a0minutes ago\n \n Description : vLLM is an inference and serving engine for large language m...", "creation_timestamp": "2026-06-23T00:35:43.885162Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/28cf54cc-98ec-4d59-ad2d-18216c88f96b/export</guid>
      <pubDate>Tue, 23 Jun 2026 00:35:43 +0000</pubDate>
    </item>
  </channel>
</rss>
