<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 13 Aug 2026 03:39:08 +0000</lastBuildDate>
    <item>
      <title>356baa5f-7aba-45dc-b998-d03521782b48</title>
      <link>https://vulnerability.circl.lu/sighting/356baa5f-7aba-45dc-b998-d03521782b48/export</link>
      <description>{"uuid": "356baa5f-7aba-45dc-b998-d03521782b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56139\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 10:39:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC reproducer for CVE-2026-56139 (Apache Camel camel-undertow Rest DSL): the Rest DSL binding hard-codes muteException=false, so a configured muteException=true is ignored and an uncaught exception's full stack trace is returned to the client (CWE-209). Fixed in 4.14.8/4.18.3/4.21.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:11.950468Z"}</description>
      <content:encoded>{"uuid": "356baa5f-7aba-45dc-b998-d03521782b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56139\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 10:39:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC reproducer for CVE-2026-56139 (Apache Camel camel-undertow Rest DSL): the Rest DSL binding hard-codes muteException=false, so a configured muteException=true is ignored and an uncaught exception's full stack trace is returned to the client (CWE-209). Fixed in 4.14.8/4.18.3/4.21.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:11.950468Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/356baa5f-7aba-45dc-b998-d03521782b48/export</guid>
      <pubDate>Fri, 24 Jul 2026 00:00:11 +0000</pubDate>
    </item>
    <item>
      <title>3aaa7a94-4aa7-4b9a-97e0-7745dd9ea03a</title>
      <link>https://vulnerability.circl.lu/sighting/3aaa7a94-4aa7-4b9a-97e0-7745dd9ea03a/export</link>
      <description>{"uuid": "3aaa7a94-4aa7-4b9a-97e0-7745dd9ea03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://t.me/GithubRedTeam/94636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56139\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 10:39:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC reproducer for CVE-2026-56139 (Apache Camel camel-undertow Rest DSL): the Rest DSL binding hard-codes muteException=false, so a configured muteException=true is ignored and an uncaught exception's full stack trace is returned to the client (CWE-209). Fixed in 4.14.8/4.18.3/4.21.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:05.492217Z"}</description>
      <content:encoded>{"uuid": "3aaa7a94-4aa7-4b9a-97e0-7745dd9ea03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://t.me/GithubRedTeam/94636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-56139\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 10:39:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC reproducer for CVE-2026-56139 (Apache Camel camel-undertow Rest DSL): the Rest DSL binding hard-codes muteException=false, so a configured muteException=true is ignored and an uncaught exception's full stack trace is returned to the client (CWE-209). Fixed in 4.14.8/4.18.3/4.21.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:05.492217Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3aaa7a94-4aa7-4b9a-97e0-7745dd9ea03a/export</guid>
      <pubDate>Thu, 23 Jul 2026 04:00:05 +0000</pubDate>
    </item>
    <item>
      <title>a414092f-cafa-4bb6-9198-b07132189f4a</title>
      <link>https://vulnerability.circl.lu/sighting/a414092f-cafa-4bb6-9198-b07132189f4a/export</link>
      <description>{"uuid": "a414092f-cafa-4bb6-9198-b07132189f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "published-proof-of-concept", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-23T00:00:10.200876Z"}</description>
      <content:encoded>{"uuid": "a414092f-cafa-4bb6-9198-b07132189f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "published-proof-of-concept", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-23T00:00:10.200876Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a414092f-cafa-4bb6-9198-b07132189f4a/export</guid>
      <pubDate>Thu, 23 Jul 2026 00:00:10 +0000</pubDate>
    </item>
    <item>
      <title>7ba0a30d-387b-49d5-8eb1-7a98e6731dec</title>
      <link>https://vulnerability.circl.lu/sighting/7ba0a30d-387b-49d5-8eb1-7a98e6731dec/export</link>
      <description>{"uuid": "7ba0a30d-387b-49d5-8eb1-7a98e6731dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-22T17:00:04.292201Z"}</description>
      <content:encoded>{"uuid": "7ba0a30d-387b-49d5-8eb1-7a98e6731dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00", "content": "", "creation_timestamp": "2026-07-22T17:00:04.292201Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7ba0a30d-387b-49d5-8eb1-7a98e6731dec/export</guid>
      <pubDate>Wed, 22 Jul 2026 17:00:04 +0000</pubDate>
    </item>
    <item>
      <title>2b6c0abe-aebe-47de-ad32-9a16ac85c4fb</title>
      <link>https://vulnerability.circl.lu/sighting/2b6c0abe-aebe-47de-ad32-9a16ac85c4fb/export</link>
      <description>{"uuid": "2b6c0abe-aebe-47de-ad32-9a16ac85c4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6qezu4n627", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56139 \u0432 Apache: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u0443\u0442\u0435\u0447\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445\n\n\n\nhttps://kripta.biz/posts/B20A37FC-4048-412D-A98A-4C0A5AF345D3", "creation_timestamp": "2026-07-09T03:54:50.978043Z"}</description>
      <content:encoded>{"uuid": "2b6c0abe-aebe-47de-ad32-9a16ac85c4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6qezu4n627", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56139 \u0432 Apache: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u0443\u0442\u0435\u0447\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445\n\n\n\nhttps://kripta.biz/posts/B20A37FC-4048-412D-A98A-4C0A5AF345D3", "creation_timestamp": "2026-07-09T03:54:50.978043Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2b6c0abe-aebe-47de-ad32-9a16ac85c4fb/export</guid>
      <pubDate>Thu, 09 Jul 2026 03:54:50 +0000</pubDate>
    </item>
    <item>
      <title>38a5b89b-0cbb-4c4f-a283-f1674bafe492</title>
      <link>https://vulnerability.circl.lu/sighting/38a5b89b-0cbb-4c4f-a283-f1674bafe492/export</link>
      <description>{"uuid": "38a5b89b-0cbb-4c4f-a283-f1674bafe492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpxzvulgha26", "content": "CVE-2026-56139 - Apache Camel Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients\nCVE ID : CVE-2026-56139\n \n Pub...", "creation_timestamp": "2026-07-06T11:56:41.536606Z"}</description>
      <content:encoded>{"uuid": "38a5b89b-0cbb-4c4f-a283-f1674bafe492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpxzvulgha26", "content": "CVE-2026-56139 - Apache Camel Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients\nCVE ID : CVE-2026-56139\n \n Pub...", "creation_timestamp": "2026-07-06T11:56:41.536606Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/38a5b89b-0cbb-4c4f-a283-f1674bafe492/export</guid>
      <pubDate>Mon, 06 Jul 2026 11:56:41 +0000</pubDate>
    </item>
    <item>
      <title>9bb18ac5-95c5-4468-8e00-b70146626339</title>
      <link>https://vulnerability.circl.lu/sighting/9bb18ac5-95c5-4468-8e00-b70146626339/export</link>
      <description>{"uuid": "9bb18ac5-95c5-4468-8e00-b70146626339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwgwa3ch52o", "content": "CVE-2026-56139: Apache Camel: Camel-Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients - and the option was not honoured", "creation_timestamp": "2026-07-05T20:44:12.884112Z"}</description>
      <content:encoded>{"uuid": "9bb18ac5-95c5-4468-8e00-b70146626339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56139", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwgwa3ch52o", "content": "CVE-2026-56139: Apache Camel: Camel-Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body, disclosing sensitive internal information to unauthenticated clients - and the option was not honoured", "creation_timestamp": "2026-07-05T20:44:12.884112Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9bb18ac5-95c5-4468-8e00-b70146626339/export</guid>
      <pubDate>Sun, 05 Jul 2026 20:44:12 +0000</pubDate>
    </item>
  </channel>
</rss>
