<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 11 Oct 2026 05:34:19 +0000</lastBuildDate>
    <item>
      <title>4c8f0624-bf6a-4003-bff7-be447c286ab7</title>
      <link>https://vulnerability.circl.lu/sighting/4c8f0624-bf6a-4003-bff7-be447c286ab7/export</link>
      <description>{"uuid": "4c8f0624-bf6a-4003-bff7-be447c286ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "published-proof-of-concept", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "content": "", "creation_timestamp": "2026-09-19T00:00:10.888720Z"}</description>
      <content:encoded>{"uuid": "4c8f0624-bf6a-4003-bff7-be447c286ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "published-proof-of-concept", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "content": "", "creation_timestamp": "2026-09-19T00:00:10.888720Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4c8f0624-bf6a-4003-bff7-be447c286ab7/export</guid>
      <pubDate>Sat, 19 Sep 2026 00:00:10 +0000</pubDate>
    </item>
    <item>
      <title>94395939-2bfc-4884-b796-8a7873a9d33e</title>
      <link>https://vulnerability.circl.lu/sighting/94395939-2bfc-4884-b796-8a7873a9d33e/export</link>
      <description>{"uuid": "94395939-2bfc-4884-b796-8a7873a9d33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "content": "", "creation_timestamp": "2026-09-18T04:00:15.722170Z"}</description>
      <content:encoded>{"uuid": "94395939-2bfc-4884-b796-8a7873a9d33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "content": "", "creation_timestamp": "2026-09-18T04:00:15.722170Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/94395939-2bfc-4884-b796-8a7873a9d33e/export</guid>
      <pubDate>Fri, 18 Sep 2026 04:00:15 +0000</pubDate>
    </item>
    <item>
      <title>b1f4a51e-e243-4491-b41c-2b27428c92cb</title>
      <link>https://vulnerability.circl.lu/sighting/b1f4a51e-e243-4491-b41c-2b27428c92cb/export</link>
      <description>{"uuid": "b1f4a51e-e243-4491-b41c-2b27428c92cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102322", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE #metadata\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-86259\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a uziii2208\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a TypeScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 16:56:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOpenMAIC 1.0.0: Unauthenticated Outbound SSRF to Cloud Metadata Service via Fail-Open Middleware and Environment-Gated Validation Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-14T19:00:05.598476Z"}</description>
      <content:encoded>{"uuid": "b1f4a51e-e243-4491-b41c-2b27428c92cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102322", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE #metadata\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-86259\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a uziii2208\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a TypeScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 16:56:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOpenMAIC 1.0.0: Unauthenticated Outbound SSRF to Cloud Metadata Service via Fail-Open Middleware and Environment-Gated Validation Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-14T19:00:05.598476Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b1f4a51e-e243-4491-b41c-2b27428c92cb/export</guid>
      <pubDate>Mon, 14 Sep 2026 19:00:05 +0000</pubDate>
    </item>
    <item>
      <title>087047e8-6ce4-492d-b74a-dbac90f97feb</title>
      <link>https://vulnerability.circl.lu/sighting/087047e8-6ce4-492d-b74a-dbac90f97feb/export</link>
      <description>{"uuid": "087047e8-6ce4-492d-b74a-dbac90f97feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muu6tdc6pg2f", "content": "CVE-2026-86259 - openmaic\nOlder versions of OpenMAIC do not properly check URLs when they are run in test or development mode. This lets anyone on the network send specially crafted requests that reach the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openmaic #thumaic #CVE #infosec", "creation_timestamp": "2026-09-06T14:20:04.678897Z"}</description>
      <content:encoded>{"uuid": "087047e8-6ce4-492d-b74a-dbac90f97feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muu6tdc6pg2f", "content": "CVE-2026-86259 - openmaic\nOlder versions of OpenMAIC do not properly check URLs when they are run in test or development mode. This lets anyone on the network send specially crafted requests that reach the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openmaic #thumaic #CVE #infosec", "creation_timestamp": "2026-09-06T14:20:04.678897Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/087047e8-6ce4-492d-b74a-dbac90f97feb/export</guid>
      <pubDate>Sun, 06 Sep 2026 14:20:04 +0000</pubDate>
    </item>
    <item>
      <title>5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d</title>
      <link>https://vulnerability.circl.lu/sighting/5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d/export</link>
      <description>{"uuid": "5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muu5qfieq42p", "content": "\ud83d\udfe0 CVE-2026-86259 - High (7.5)\n\nOpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86259/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T14:00:48.525293Z"}</description>
      <content:encoded>{"uuid": "5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muu5qfieq42p", "content": "\ud83d\udfe0 CVE-2026-86259 - High (7.5)\n\nOpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86259/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T14:00:48.525293Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d/export</guid>
      <pubDate>Sun, 06 Sep 2026 14:00:48 +0000</pubDate>
    </item>
  </channel>
</rss>
