<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 20:19:28 +0000</lastBuildDate>
    <item>
      <title>7753c18a-b6da-4632-8f16-99c0ccd4fa6b</title>
      <link>https://vulnerability.circl.lu/sighting/7753c18a-b6da-4632-8f16-99c0ccd4fa6b/export</link>
      <description>{"uuid": "7753c18a-b6da-4632-8f16-99c0ccd4fa6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-80205", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-rrv8-h7p8-rx55", "content": "", "creation_timestamp": "2026-09-08T22:36:05.190072Z"}</description>
      <content:encoded>{"uuid": "7753c18a-b6da-4632-8f16-99c0ccd4fa6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-80205", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-rrv8-h7p8-rx55", "content": "", "creation_timestamp": "2026-09-08T22:36:05.190072Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7753c18a-b6da-4632-8f16-99c0ccd4fa6b/export</guid>
      <pubDate>Tue, 08 Sep 2026 22:36:05 +0000</pubDate>
    </item>
    <item>
      <title>2b52cb76-b278-44fc-ac8a-6b4773bb9c93</title>
      <link>https://vulnerability.circl.lu/sighting/2b52cb76-b278-44fc-ac8a-6b4773bb9c93/export</link>
      <description>{"uuid": "2b52cb76-b278-44fc-ac8a-6b4773bb9c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-80206", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-w3v8-gmh9-3wv7", "content": "", "creation_timestamp": "2026-09-08T22:36:02.980698Z"}</description>
      <content:encoded>{"uuid": "2b52cb76-b278-44fc-ac8a-6b4773bb9c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-80206", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-w3v8-gmh9-3wv7", "content": "", "creation_timestamp": "2026-09-08T22:36:02.980698Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2b52cb76-b278-44fc-ac8a-6b4773bb9c93/export</guid>
      <pubDate>Tue, 08 Sep 2026 22:36:02 +0000</pubDate>
    </item>
    <item>
      <title>f2873353-c00d-4775-8f9c-c22b8c94f902</title>
      <link>https://vulnerability.circl.lu/sighting/f2873353-c00d-4775-8f9c-c22b8c94f902/export</link>
      <description>{"uuid": "f2873353-c00d-4775-8f9c-c22b8c94f902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80206", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muk7lrd2v52x", "content": "\ud83d\udccc CVE-2026-80206 - NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles... https://www.cyberhub.blog/cves/CVE-2026-80206", "creation_timestamp": "2026-09-02T15:07:07.215152Z"}</description>
      <content:encoded>{"uuid": "f2873353-c00d-4775-8f9c-c22b8c94f902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80206", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muk7lrd2v52x", "content": "\ud83d\udccc CVE-2026-80206 - NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles... https://www.cyberhub.blog/cves/CVE-2026-80206", "creation_timestamp": "2026-09-02T15:07:07.215152Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f2873353-c00d-4775-8f9c-c22b8c94f902/export</guid>
      <pubDate>Wed, 02 Sep 2026 15:07:07 +0000</pubDate>
    </item>
    <item>
      <title>8ded5ead-96f1-405c-99a7-be136eef5389</title>
      <link>https://vulnerability.circl.lu/sighting/8ded5ead-96f1-405c-99a7-be136eef5389/export</link>
      <description>{"uuid": "8ded5ead-96f1-405c-99a7-be136eef5389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80205", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujqixbp4z2c", "content": "\ud83d\udccc CVE-2026-80205 - NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that ac... https://www.cyberhub.blog/cves/CVE-2026-80205", "creation_timestamp": "2026-09-02T10:37:06.828211Z"}</description>
      <content:encoded>{"uuid": "8ded5ead-96f1-405c-99a7-be136eef5389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80205", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujqixbp4z2c", "content": "\ud83d\udccc CVE-2026-80205 - NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that ac... https://www.cyberhub.blog/cves/CVE-2026-80205", "creation_timestamp": "2026-09-02T10:37:06.828211Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8ded5ead-96f1-405c-99a7-be136eef5389/export</guid>
      <pubDate>Wed, 02 Sep 2026 10:37:06 +0000</pubDate>
    </item>
    <item>
      <title>490f845f-c482-46f8-b671-2ee8b544852e</title>
      <link>https://vulnerability.circl.lu/sighting/490f845f-c482-46f8-b671-2ee8b544852e/export</link>
      <description>{"uuid": "490f845f-c482-46f8-b671-2ee8b544852e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80202", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2dazxkse2j", "content": "CVE-2026-80202 - kimai\nKimai timesheets can be read, deleted, or modified by team leads from other teams. This can lead to unauthorized changes or deletion of timesheet data, affecting team and project\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kimai #composer #CVE #infosec", "creation_timestamp": "2026-08-27T07:30:05.776250Z"}</description>
      <content:encoded>{"uuid": "490f845f-c482-46f8-b671-2ee8b544852e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80202", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2dazxkse2j", "content": "CVE-2026-80202 - kimai\nKimai timesheets can be read, deleted, or modified by team leads from other teams. This can lead to unauthorized changes or deletion of timesheet data, affecting team and project\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kimai #composer #CVE #infosec", "creation_timestamp": "2026-08-27T07:30:05.776250Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/490f845f-c482-46f8-b671-2ee8b544852e/export</guid>
      <pubDate>Thu, 27 Aug 2026 07:30:05 +0000</pubDate>
    </item>
    <item>
      <title>fb652b35-c871-4702-9c72-a317e15ff1f7</title>
      <link>https://vulnerability.circl.lu/sighting/fb652b35-c871-4702-9c72-a317e15ff1f7/export</link>
      <description>{"uuid": "fb652b35-c871-4702-9c72-a317e15ff1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80203", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtyar4we3r2c", "content": "CVE-2026-80203 - grav\nIf you use the Grav content system with the API plugin older than version 1.0.18, a command\u2011line key that is not supposed to have full rights can still be used to change or delete other\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-26T11:40:05.153880Z"}</description>
      <content:encoded>{"uuid": "fb652b35-c871-4702-9c72-a317e15ff1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80203", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtyar4we3r2c", "content": "CVE-2026-80203 - grav\nIf you use the Grav content system with the API plugin older than version 1.0.18, a command\u2011line key that is not supposed to have full rights can still be used to change or delete other\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-26T11:40:05.153880Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fb652b35-c871-4702-9c72-a317e15ff1f7/export</guid>
      <pubDate>Wed, 26 Aug 2026 11:40:05 +0000</pubDate>
    </item>
    <item>
      <title>8468bedc-6b4b-41f7-adf0-0157143a060a</title>
      <link>https://vulnerability.circl.lu/sighting/8468bedc-6b4b-41f7-adf0-0157143a060a/export</link>
      <description>{"uuid": "8468bedc-6b4b-41f7-adf0-0157143a060a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jk3gkazuem6mn", "content": "CVE-2026-80202 - Kimai before 2.56.0 Authorization Bypass via TimesheetVoter\nCVE ID : CVE-2026-80202\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(), whi...", "creation_timestamp": "2026-08-26T00:32:57.574024Z"}</description>
      <content:encoded>{"uuid": "8468bedc-6b4b-41f7-adf0-0157143a060a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jk3gkazuem6mn", "content": "CVE-2026-80202 - Kimai before 2.56.0 Authorization Bypass via TimesheetVoter\nCVE ID : CVE-2026-80202\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(), whi...", "creation_timestamp": "2026-08-26T00:32:57.574024Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8468bedc-6b4b-41f7-adf0-0157143a060a/export</guid>
      <pubDate>Wed, 26 Aug 2026 00:32:57 +0000</pubDate>
    </item>
    <item>
      <title>0a92b059-3575-4761-83ce-bd37805ee41d</title>
      <link>https://vulnerability.circl.lu/sighting/0a92b059-3575-4761-83ce-bd37805ee41d/export</link>
      <description>{"uuid": "0a92b059-3575-4761-83ce-bd37805ee41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ddfj5rmkf3fh3", "content": "CVE-2026-80201 - Kimai before 2.53.0 API Token Leakage via Invoice Template\nCVE ID : CVE-2026-80201\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowi...", "creation_timestamp": "2026-08-26T00:26:57.637087Z"}</description>
      <content:encoded>{"uuid": "0a92b059-3575-4761-83ce-bd37805ee41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ddfj5rmkf3fh3", "content": "CVE-2026-80201 - Kimai before 2.53.0 API Token Leakage via Invoice Template\nCVE ID : CVE-2026-80201\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowi...", "creation_timestamp": "2026-08-26T00:26:57.637087Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0a92b059-3575-4761-83ce-bd37805ee41d/export</guid>
      <pubDate>Wed, 26 Aug 2026 00:26:57 +0000</pubDate>
    </item>
    <item>
      <title>569d85ea-b87b-4cc3-8f61-911354002d34</title>
      <link>https://vulnerability.circl.lu/sighting/569d85ea-b87b-4cc3-8f61-911354002d34/export</link>
      <description>{"uuid": "569d85ea-b87b-4cc3-8f61-911354002d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6gawym4ilvqnr", "content": "CVE-2026-80200 - Kimai before 2.53.0 Open Redirect via RelayState\nCVE ID : CVE-2026-80200\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that acce...", "creation_timestamp": "2026-08-26T00:14:58.329678Z"}</description>
      <content:encoded>{"uuid": "569d85ea-b87b-4cc3-8f61-911354002d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6gawym4ilvqnr", "content": "CVE-2026-80200 - Kimai before 2.53.0 Open Redirect via RelayState\nCVE ID : CVE-2026-80200\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that acce...", "creation_timestamp": "2026-08-26T00:14:58.329678Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/569d85ea-b87b-4cc3-8f61-911354002d34/export</guid>
      <pubDate>Wed, 26 Aug 2026 00:14:58 +0000</pubDate>
    </item>
    <item>
      <title>c3102f7d-1f2b-4944-8ef0-a23275cfcc16</title>
      <link>https://vulnerability.circl.lu/sighting/c3102f7d-1f2b-4944-8ef0-a23275cfcc16/export</link>
      <description>{"uuid": "c3102f7d-1f2b-4944-8ef0-a23275cfcc16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8020", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "c3102f7d-1f2b-4944-8ef0-a23275cfcc16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8020", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c3102f7d-1f2b-4944-8ef0-a23275cfcc16/export</guid>
      <pubDate>Sun, 17 May 2026 18:00:00 +0000</pubDate>
    </item>
  </channel>
</rss>
