<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 09:53:37 +0000</lastBuildDate>
    <item>
      <title>400b317e-03d0-42f7-84dd-ee9d8c952878</title>
      <link>https://vulnerability.circl.lu/sighting/400b317e-03d0-42f7-84dd-ee9d8c952878/export</link>
      <description>{"uuid": "400b317e-03d0-42f7-84dd-ee9d8c952878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78210", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwssoo373n2y", "content": "High-severity vuln (CVSS 7.1) in Octopus Deploy Octopus Server lets scoped users run scripts w/o proper auth. Review permissions &amp;amp; monitor for patches. Affects versions 2019.5.9+ to &amp;lt;2026.3.13951. https://radar.offseq.com/threat/cve-2026-78210-cwe-863-incorrect-authorization-in-octopus-deploy-oct...", "creation_timestamp": "2026-10-01T12:00:27.553540Z"}</description>
      <content:encoded>{"uuid": "400b317e-03d0-42f7-84dd-ee9d8c952878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78210", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwssoo373n2y", "content": "High-severity vuln (CVSS 7.1) in Octopus Deploy Octopus Server lets scoped users run scripts w/o proper auth. Review permissions &amp;amp; monitor for patches. Affects versions 2019.5.9+ to &amp;lt;2026.3.13951. https://radar.offseq.com/threat/cve-2026-78210-cwe-863-incorrect-authorization-in-octopus-deploy-oct...", "creation_timestamp": "2026-10-01T12:00:27.553540Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/400b317e-03d0-42f7-84dd-ee9d8c952878/export</guid>
      <pubDate>Thu, 01 Oct 2026 12:00:27 +0000</pubDate>
    </item>
    <item>
      <title>f6fa406a-ba7d-4603-9290-ac4a95966b5e</title>
      <link>https://vulnerability.circl.lu/sighting/f6fa406a-ba7d-4603-9290-ac4a95966b5e/export</link>
      <description>{"uuid": "f6fa406a-ba7d-4603-9290-ac4a95966b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78210", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117365540398021924", "content": "CVE-2026-78210: HIGH severity in Octopus Server (CVSS 7.1) lets users with scoped permissions execute unauthorized scripts in certain environments. Patch status unknown \u2014 minimize permissions and monitor for updates. https://radar.offseq.com/threat/cve-2026-78210-cwe-863-incorrect-authorization-in-octopus-deploy-octopus-server-50d97dfe20efe99c #OffSeq #OctopusDeploy #Vuln #CVE202678210", "creation_timestamp": "2026-10-01T12:00:24.894924Z"}</description>
      <content:encoded>{"uuid": "f6fa406a-ba7d-4603-9290-ac4a95966b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78210", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117365540398021924", "content": "CVE-2026-78210: HIGH severity in Octopus Server (CVSS 7.1) lets users with scoped permissions execute unauthorized scripts in certain environments. Patch status unknown \u2014 minimize permissions and monitor for updates. https://radar.offseq.com/threat/cve-2026-78210-cwe-863-incorrect-authorization-in-octopus-deploy-octopus-server-50d97dfe20efe99c #OffSeq #OctopusDeploy #Vuln #CVE202678210", "creation_timestamp": "2026-10-01T12:00:24.894924Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f6fa406a-ba7d-4603-9290-ac4a95966b5e/export</guid>
      <pubDate>Thu, 01 Oct 2026 12:00:24 +0000</pubDate>
    </item>
  </channel>
</rss>
