<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 16 Sep 2026 01:39:20 +0000</lastBuildDate>
    <item>
      <title>c16e72f8-acb9-49f0-a0ff-543ca27f6caa</title>
      <link>https://vulnerability.circl.lu/sighting/c16e72f8-acb9-49f0-a0ff-543ca27f6caa/export</link>
      <description>{"uuid": "c16e72f8-acb9-49f0-a0ff-543ca27f6caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "published-proof-of-concept", "source": "Telegram/tYXjtXGvZOcVL05bpL_3O2jX-Uki9x_dAhf7v1swcwhwyfI", "content": "", "creation_timestamp": "2026-08-28T00:00:31.237543Z"}</description>
      <content:encoded>{"uuid": "c16e72f8-acb9-49f0-a0ff-543ca27f6caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "published-proof-of-concept", "source": "Telegram/tYXjtXGvZOcVL05bpL_3O2jX-Uki9x_dAhf7v1swcwhwyfI", "content": "", "creation_timestamp": "2026-08-28T00:00:31.237543Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c16e72f8-acb9-49f0-a0ff-543ca27f6caa/export</guid>
      <pubDate>Fri, 28 Aug 2026 00:00:31 +0000</pubDate>
    </item>
    <item>
      <title>782d53cb-3228-4eda-9698-c3e5b912656f</title>
      <link>https://vulnerability.circl.lu/sighting/782d53cb-3228-4eda-9698-c3e5b912656f/export</link>
      <description>{"uuid": "782d53cb-3228-4eda-9698-c3e5b912656f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "published-proof-of-concept", "source": "Telegram/tYXjtXGvZOcVL05bpL_3O2jX-Uki9x_dAhf7v1swcwhwyfI", "content": "", "creation_timestamp": "2026-08-27T20:00:11.841825Z"}</description>
      <content:encoded>{"uuid": "782d53cb-3228-4eda-9698-c3e5b912656f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "published-proof-of-concept", "source": "Telegram/tYXjtXGvZOcVL05bpL_3O2jX-Uki9x_dAhf7v1swcwhwyfI", "content": "", "creation_timestamp": "2026-08-27T20:00:11.841825Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/782d53cb-3228-4eda-9698-c3e5b912656f/export</guid>
      <pubDate>Thu, 27 Aug 2026 20:00:11 +0000</pubDate>
    </item>
    <item>
      <title>2357d4b1-16e9-408d-b3e9-5f0dda958970</title>
      <link>https://vulnerability.circl.lu/sighting/2357d4b1-16e9-408d-b3e9-5f0dda958970/export</link>
      <description>{"uuid": "2357d4b1-16e9-408d-b3e9-5f0dda958970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv3mjo25j25", "content": "CVE-2026-67602\nThe ip address management tool phpIPAM versions older than 1.8.2 let anyone call its web API as if they were an authorized user. By tricking a simple data cache, an attacker can use a database record number as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:30:04.127859Z"}</description>
      <content:encoded>{"uuid": "2357d4b1-16e9-408d-b3e9-5f0dda958970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv3mjo25j25", "content": "CVE-2026-67602\nThe ip address management tool phpIPAM versions older than 1.8.2 let anyone call its web API as if they were an authorized user. By tricking a simple data cache, an attacker can use a database record number as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:30:04.127859Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2357d4b1-16e9-408d-b3e9-5f0dda958970/export</guid>
      <pubDate>Tue, 25 Aug 2026 05:30:04 +0000</pubDate>
    </item>
    <item>
      <title>12783c00-92bc-442b-8054-b88934050d65</title>
      <link>https://vulnerability.circl.lu/sighting/12783c00-92bc-442b-8054-b88934050d65/export</link>
      <description>{"uuid": "12783c00-92bc-442b-8054-b88934050d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttosak7m72b", "content": "\ud83d\udea8 CVE-2026-67602 \u2014 CVSS 9.3 CRITICAL\n\nphpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67602\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T16:07:56.396039Z"}</description>
      <content:encoded>{"uuid": "12783c00-92bc-442b-8054-b88934050d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttosak7m72b", "content": "\ud83d\udea8 CVE-2026-67602 \u2014 CVSS 9.3 CRITICAL\n\nphpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67602\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T16:07:56.396039Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/12783c00-92bc-442b-8054-b88934050d65/export</guid>
      <pubDate>Mon, 24 Aug 2026 16:07:56 +0000</pubDate>
    </item>
    <item>
      <title>2339f3ad-c2a8-4b01-ae3e-4b7685bc0b74</title>
      <link>https://vulnerability.circl.lu/sighting/2339f3ad-c2a8-4b01-ae3e-4b7685bc0b74/export</link>
      <description>{"uuid": "2339f3ad-c2a8-4b01-ae3e-4b7685bc0b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttnafi2pu2p", "content": "CVE-2026-67602 - phpipam\nThe phpIPAM tool versions earlier than 1.8.2 let anyone use the REST API without proving they are authorized. This means an outsider could read, change, or delete your IP address records.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpipam #CVE #infosec", "creation_timestamp": "2026-08-24T15:40:03.966244Z"}</description>
      <content:encoded>{"uuid": "2339f3ad-c2a8-4b01-ae3e-4b7685bc0b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttnafi2pu2p", "content": "CVE-2026-67602 - phpipam\nThe phpIPAM tool versions earlier than 1.8.2 let anyone use the REST API without proving they are authorized. This means an outsider could read, change, or delete your IP address records.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phpipam #CVE #infosec", "creation_timestamp": "2026-08-24T15:40:03.966244Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2339f3ad-c2a8-4b01-ae3e-4b7685bc0b74/export</guid>
      <pubDate>Mon, 24 Aug 2026 15:40:03 +0000</pubDate>
    </item>
    <item>
      <title>66c27ec9-3a83-4b43-8bfe-8a0b0d7472c5</title>
      <link>https://vulnerability.circl.lu/sighting/66c27ec9-3a83-4b43-8bfe-8a0b0d7472c5/export</link>
      <description>{"uuid": "66c27ec9-3a83-4b43-8bfe-8a0b0d7472c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mttj7n552i25", "content": "\u26a0\ufe0f PATCH NOW\n\nphpIPAM, the open-source tool teams use to track their networks, has a critical bug (CVE-2026-67602, CVSS 9.3).\n\nWith no login, a stranger can read, change, and delete every IP record through its API.\n\nEverything before 1.8.2 is affected. Fix: update to 1.8.2 now.", "creation_timestamp": "2026-08-24T14:28:03.641901Z"}</description>
      <content:encoded>{"uuid": "66c27ec9-3a83-4b43-8bfe-8a0b0d7472c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67602", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mttj7n552i25", "content": "\u26a0\ufe0f PATCH NOW\n\nphpIPAM, the open-source tool teams use to track their networks, has a critical bug (CVE-2026-67602, CVSS 9.3).\n\nWith no login, a stranger can read, change, and delete every IP record through its API.\n\nEverything before 1.8.2 is affected. Fix: update to 1.8.2 now.", "creation_timestamp": "2026-08-24T14:28:03.641901Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/66c27ec9-3a83-4b43-8bfe-8a0b0d7472c5/export</guid>
      <pubDate>Mon, 24 Aug 2026 14:28:03 +0000</pubDate>
    </item>
    <item>
      <title>145c0427-d37e-4c85-9d5c-36f7f4172f78</title>
      <link>https://vulnerability.circl.lu/sighting/145c0427-d37e-4c85-9d5c-36f7f4172f78/export</link>
      <description>{"uuid": "145c0427-d37e-4c85-9d5c-36f7f4172f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67607", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibile-poc-per-lo-sfruttamento-della-cve-2026-67607-relativa-al-servizio-lightftp", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-67607 che interessa LightFTP, noto servizio FTP opensource.", "creation_timestamp": "2026-08-06T01:00:33.640550Z"}</description>
      <content:encoded>{"uuid": "145c0427-d37e-4c85-9d5c-36f7f4172f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67607", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibile-poc-per-lo-sfruttamento-della-cve-2026-67607-relativa-al-servizio-lightftp", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-67607 che interessa LightFTP, noto servizio FTP opensource.", "creation_timestamp": "2026-08-06T01:00:33.640550Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/145c0427-d37e-4c85-9d5c-36f7f4172f78/export</guid>
      <pubDate>Thu, 06 Aug 2026 01:00:33 +0000</pubDate>
    </item>
    <item>
      <title>8e46eef5-44e3-44a7-96b1-ffcd2d90936b</title>
      <link>https://vulnerability.circl.lu/sighting/8e46eef5-44e3-44a7-96b1-ffcd2d90936b/export</link>
      <description>{"uuid": "8e46eef5-44e3-44a7-96b1-ffcd2d90936b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67607", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibile-poc-per-lo-sfruttamento-della-cve-2026-67607-relativa-al-servizio-lightftp", "content": "", "creation_timestamp": "2026-08-05T12:15:28.773707Z"}</description>
      <content:encoded>{"uuid": "8e46eef5-44e3-44a7-96b1-ffcd2d90936b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67607", "type": "seen", "source": "https://www.acn.gov.it/portale/w/disponibile-poc-per-lo-sfruttamento-della-cve-2026-67607-relativa-al-servizio-lightftp", "content": "", "creation_timestamp": "2026-08-05T12:15:28.773707Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8e46eef5-44e3-44a7-96b1-ffcd2d90936b/export</guid>
      <pubDate>Wed, 05 Aug 2026 12:15:28 +0000</pubDate>
    </item>
    <item>
      <title>42704ee4-2fe5-44c9-a434-46eafb178546</title>
      <link>https://vulnerability.circl.lu/sighting/42704ee4-2fe5-44c9-a434-46eafb178546/export</link>
      <description>{"uuid": "42704ee4-2fe5-44c9-a434-46eafb178546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67609", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ms7bw6w6qd2v", "content": "Telenia Software TVox 26.5.3\u4ee5\u524d\u306824.9.21\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u7279\u6a29\u6607\u683c\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002apache\u30a2\u30ab\u30a6\u30f3\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306a\u653b\u6483\u8005\u306f\u3001\u4e0d\u9069\u5207\u306asudoers\u8a2d\u5b9a\u3092\u60aa\u7528\u2026\nCVE-2026-67609 CVSS 7.8 | HIGH", "creation_timestamp": "2026-08-03T19:59:03.854069Z"}</description>
      <content:encoded>{"uuid": "42704ee4-2fe5-44c9-a434-46eafb178546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67609", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ms7bw6w6qd2v", "content": "Telenia Software TVox 26.5.3\u4ee5\u524d\u306824.9.21\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u7279\u6a29\u6607\u683c\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002apache\u30a2\u30ab\u30a6\u30f3\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306a\u653b\u6483\u8005\u306f\u3001\u4e0d\u9069\u5207\u306asudoers\u8a2d\u5b9a\u3092\u60aa\u7528\u2026\nCVE-2026-67609 CVSS 7.8 | HIGH", "creation_timestamp": "2026-08-03T19:59:03.854069Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/42704ee4-2fe5-44c9-a434-46eafb178546/export</guid>
      <pubDate>Mon, 03 Aug 2026 19:59:03 +0000</pubDate>
    </item>
    <item>
      <title>258980de-9bdf-483a-81ea-588b9b190d21</title>
      <link>https://vulnerability.circl.lu/sighting/258980de-9bdf-483a-81ea-588b9b190d21/export</link>
      <description>{"uuid": "258980de-9bdf-483a-81ea-588b9b190d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jmbxd5vat537y", "content": "CVE-2026-67608 - Telenia TVox 26.5.3 OS Command Injection via action_audio.php\nCVE ID : CVE-2026-67608\n \n Published : Aug. 3, 2026, 1:30 p.m. | 26\u00a0minutes ago\n \n Description : Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an...", "creation_timestamp": "2026-08-03T14:22:58.911142Z"}</description>
      <content:encoded>{"uuid": "258980de-9bdf-483a-81ea-588b9b190d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jmbxd5vat537y", "content": "CVE-2026-67608 - Telenia TVox 26.5.3 OS Command Injection via action_audio.php\nCVE ID : CVE-2026-67608\n \n Published : Aug. 3, 2026, 1:30 p.m. | 26\u00a0minutes ago\n \n Description : Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an...", "creation_timestamp": "2026-08-03T14:22:58.911142Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/258980de-9bdf-483a-81ea-588b9b190d21/export</guid>
      <pubDate>Mon, 03 Aug 2026 14:22:58 +0000</pubDate>
    </item>
  </channel>
</rss>
