<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 09:30:34 +0000</lastBuildDate>
    <item>
      <title>3f2274e1-0075-488b-8317-95c74cf4becb</title>
      <link>https://vulnerability.circl.lu/sighting/3f2274e1-0075-488b-8317-95c74cf4becb/export</link>
      <description>{"uuid": "3f2274e1-0075-488b-8317-95c74cf4becb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3muomfwb6ip2l", "content": "\ud83d\udccc CVE-2026-81704 - openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched... https://www.potatohub.blog/cves/CVE-2026-81704", "creation_timestamp": "2026-09-04T09:07:08.718769Z"}</description>
      <content:encoded>{"uuid": "3f2274e1-0075-488b-8317-95c74cf4becb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3muomfwb6ip2l", "content": "\ud83d\udccc CVE-2026-81704 - openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched... https://www.potatohub.blog/cves/CVE-2026-81704", "creation_timestamp": "2026-09-04T09:07:08.718769Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3f2274e1-0075-488b-8317-95c74cf4becb/export</guid>
      <pubDate>Fri, 04 Sep 2026 09:07:08 +0000</pubDate>
    </item>
    <item>
      <title>3c3994ad-8cd0-4779-9b6b-6b1f2794b0cf</title>
      <link>https://vulnerability.circl.lu/sighting/3c3994ad-8cd0-4779-9b6b-6b1f2794b0cf/export</link>
      <description>{"uuid": "3c3994ad-8cd0-4779-9b6b-6b1f2794b0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muomfv225223", "content": "\ud83d\udccc CVE-2026-81704 - openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched... https://www.cyberhub.blog/cves/CVE-2026-81704", "creation_timestamp": "2026-09-04T09:07:08.132665Z"}</description>
      <content:encoded>{"uuid": "3c3994ad-8cd0-4779-9b6b-6b1f2794b0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muomfv225223", "content": "\ud83d\udccc CVE-2026-81704 - openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched... https://www.cyberhub.blog/cves/CVE-2026-81704", "creation_timestamp": "2026-09-04T09:07:08.132665Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3c3994ad-8cd0-4779-9b6b-6b1f2794b0cf/export</guid>
      <pubDate>Fri, 04 Sep 2026 09:07:08 +0000</pubDate>
    </item>
    <item>
      <title>bbe2a753-5813-4617-86a6-9cbc3a1a1e1d</title>
      <link>https://vulnerability.circl.lu/sighting/bbe2a753-5813-4617-86a6-9cbc3a1a1e1d/export</link>
      <description>{"uuid": "bbe2a753-5813-4617-86a6-9cbc3a1a1e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81702", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3munyc54rji2l", "content": "\ud83d\udccc CVE-2026-81702 - openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute... https://www.cyberhub.blog/cves/CVE-2026-81702", "creation_timestamp": "2026-09-04T03:07:07.645196Z"}</description>
      <content:encoded>{"uuid": "bbe2a753-5813-4617-86a6-9cbc3a1a1e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81702", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3munyc54rji2l", "content": "\ud83d\udccc CVE-2026-81702 - openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute... https://www.cyberhub.blog/cves/CVE-2026-81702", "creation_timestamp": "2026-09-04T03:07:07.645196Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bbe2a753-5813-4617-86a6-9cbc3a1a1e1d/export</guid>
      <pubDate>Fri, 04 Sep 2026 03:07:07 +0000</pubDate>
    </item>
    <item>
      <title>e7d9ae6b-acca-4892-b71b-095630a17cf3</title>
      <link>https://vulnerability.circl.lu/sighting/e7d9ae6b-acca-4892-b71b-095630a17cf3/export</link>
      <description>{"uuid": "e7d9ae6b-acca-4892-b71b-095630a17cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81703", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujotdozev2l", "content": "\ud83d\udccc CVE-2026-81703 - openssl_encrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft f... https://www.cyberhub.blog/cves/CVE-2026-81703", "creation_timestamp": "2026-09-02T10:07:07.379041Z"}</description>
      <content:encoded>{"uuid": "e7d9ae6b-acca-4892-b71b-095630a17cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81703", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujotdozev2l", "content": "\ud83d\udccc CVE-2026-81703 - openssl_encrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft f... https://www.cyberhub.blog/cves/CVE-2026-81703", "creation_timestamp": "2026-09-02T10:07:07.379041Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e7d9ae6b-acca-4892-b71b-095630a17cf3/export</guid>
      <pubDate>Wed, 02 Sep 2026 10:07:07 +0000</pubDate>
    </item>
    <item>
      <title>e4543f1b-314d-4020-8542-c724ac56cc70</title>
      <link>https://vulnerability.circl.lu/sighting/e4543f1b-314d-4020-8542-c724ac56cc70/export</link>
      <description>{"uuid": "e4543f1b-314d-4020-8542-c724ac56cc70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81705", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujn5ovuzb2f", "content": "\ud83d\udccc CVE-2026-81705 - openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellin... https://www.cyberhub.blog/cves/CVE-2026-81705", "creation_timestamp": "2026-09-02T09:37:07.676832Z"}</description>
      <content:encoded>{"uuid": "e4543f1b-314d-4020-8542-c724ac56cc70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81705", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujn5ovuzb2f", "content": "\ud83d\udccc CVE-2026-81705 - openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellin... https://www.cyberhub.blog/cves/CVE-2026-81705", "creation_timestamp": "2026-09-02T09:37:07.676832Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e4543f1b-314d-4020-8542-c724ac56cc70/export</guid>
      <pubDate>Wed, 02 Sep 2026 09:37:07 +0000</pubDate>
    </item>
    <item>
      <title>bce44651-ca38-4719-be8c-a83f7ab44250</title>
      <link>https://vulnerability.circl.lu/sighting/bce44651-ca38-4719-be8c-a83f7ab44250/export</link>
      <description>{"uuid": "bce44651-ca38-4719-be8c-a83f7ab44250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81701", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujbg6cpvp2x", "content": "\ud83d\udccc CVE-2026-81701 - openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories... https://www.cyberhub.blog/cves/CVE-2026-81701", "creation_timestamp": "2026-09-02T06:07:07.410527Z"}</description>
      <content:encoded>{"uuid": "bce44651-ca38-4719-be8c-a83f7ab44250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81701", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujbg6cpvp2x", "content": "\ud83d\udccc CVE-2026-81701 - openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories... https://www.cyberhub.blog/cves/CVE-2026-81701", "creation_timestamp": "2026-09-02T06:07:07.410527Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bce44651-ca38-4719-be8c-a83f7ab44250/export</guid>
      <pubDate>Wed, 02 Sep 2026 06:07:07 +0000</pubDate>
    </item>
    <item>
      <title>e6280a60-7f18-4d5e-afe5-ef81d6f15aaa</title>
      <link>https://vulnerability.circl.lu/sighting/e6280a60-7f18-4d5e-afe5-ef81d6f15aaa/export</link>
      <description>{"uuid": "e6280a60-7f18-4d5e-afe5-ef81d6f15aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81700", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj7qjzqbm23", "content": "\ud83d\udccc CVE-2026-81700 - openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired ke... https://www.cyberhub.blog/cves/CVE-2026-81700", "creation_timestamp": "2026-09-02T05:37:08.320181Z"}</description>
      <content:encoded>{"uuid": "e6280a60-7f18-4d5e-afe5-ef81d6f15aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81700", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj7qjzqbm23", "content": "\ud83d\udccc CVE-2026-81700 - openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired ke... https://www.cyberhub.blog/cves/CVE-2026-81700", "creation_timestamp": "2026-09-02T05:37:08.320181Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e6280a60-7f18-4d5e-afe5-ef81d6f15aaa/export</guid>
      <pubDate>Wed, 02 Sep 2026 05:37:08 +0000</pubDate>
    </item>
    <item>
      <title>b5c59a48-021e-4de7-99c1-93965b53dbcf</title>
      <link>https://vulnerability.circl.lu/sighting/b5c59a48-021e-4de7-99c1-93965b53dbcf/export</link>
      <description>{"uuid": "b5c59a48-021e-4de7-99c1-93965b53dbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81706", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj4famslz2f", "content": "\ud83d\udccc CVE-2026-81706 - openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create ... https://www.cyberhub.blog/cves/CVE-2026-81706", "creation_timestamp": "2026-09-02T04:37:07.712835Z"}</description>
      <content:encoded>{"uuid": "b5c59a48-021e-4de7-99c1-93965b53dbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81706", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj4famslz2f", "content": "\ud83d\udccc CVE-2026-81706 - openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create ... https://www.cyberhub.blog/cves/CVE-2026-81706", "creation_timestamp": "2026-09-02T04:37:07.712835Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b5c59a48-021e-4de7-99c1-93965b53dbcf/export</guid>
      <pubDate>Wed, 02 Sep 2026 04:37:07 +0000</pubDate>
    </item>
    <item>
      <title>aab005fe-0d55-4c09-b70f-5eb7ed60c9f8</title>
      <link>https://vulnerability.circl.lu/sighting/aab005fe-0d55-4c09-b70f-5eb7ed60c9f8/export</link>
      <description>{"uuid": "aab005fe-0d55-4c09-b70f-5eb7ed60c9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81705", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mugxfesjqz2s", "content": "HIGH severity CVE just published in OpenSSL:\n\nCVE-2026-81705. openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81705", "creation_timestamp": "2026-09-01T08:02:23.735149Z"}</description>
      <content:encoded>{"uuid": "aab005fe-0d55-4c09-b70f-5eb7ed60c9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81705", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mugxfesjqz2s", "content": "HIGH severity CVE just published in OpenSSL:\n\nCVE-2026-81705. openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81705", "creation_timestamp": "2026-09-01T08:02:23.735149Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aab005fe-0d55-4c09-b70f-5eb7ed60c9f8/export</guid>
      <pubDate>Tue, 01 Sep 2026 08:02:23 +0000</pubDate>
    </item>
    <item>
      <title>f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4</title>
      <link>https://vulnerability.circl.lu/sighting/f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4/export</link>
      <description>{"uuid": "f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mugk4ncenb2s", "content": "CVE-2026-81704 [HIGH] OpenSSL\n\nopenssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline passwor\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81704", "creation_timestamp": "2026-09-01T04:04:51.599641Z"}</description>
      <content:encoded>{"uuid": "f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mugk4ncenb2s", "content": "CVE-2026-81704 [HIGH] OpenSSL\n\nopenssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline passwor\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81704", "creation_timestamp": "2026-09-01T04:04:51.599641Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4/export</guid>
      <pubDate>Tue, 01 Sep 2026 04:04:51 +0000</pubDate>
    </item>
  </channel>
</rss>
