<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 07:42:43 +0000</lastBuildDate>
    <item>
      <title>41e789a5-8c7e-46b7-84c5-88b57ec08d04</title>
      <link>https://vulnerability.circl.lu/sighting/41e789a5-8c7e-46b7-84c5-88b57ec08d04/export</link>
      <description>{"uuid": "41e789a5-8c7e-46b7-84c5-88b57ec08d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91012", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwt5bsm3je2h", "content": "CVE-2026-91012 - apache karaf\nApache Karaf lets users with the manager role change any configuration file the service can write to, including files that control admin permissions. By supplying\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachekaraf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-10-01T15:10:07.249452Z"}</description>
      <content:encoded>{"uuid": "41e789a5-8c7e-46b7-84c5-88b57ec08d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91012", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwt5bsm3je2h", "content": "CVE-2026-91012 - apache karaf\nApache Karaf lets users with the manager role change any configuration file the service can write to, including files that control admin permissions. By supplying\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachekaraf #apachefoundation #CVE #infosec", "creation_timestamp": "2026-10-01T15:10:07.249452Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/41e789a5-8c7e-46b7-84c5-88b57ec08d04/export</guid>
      <pubDate>Thu, 01 Oct 2026 15:10:07 +0000</pubDate>
    </item>
    <item>
      <title>6559d7f1-809b-4ec3-9257-6cd0934eddfb</title>
      <link>https://vulnerability.circl.lu/sighting/6559d7f1-809b-4ec3-9257-6cd0934eddfb/export</link>
      <description>{"uuid": "6559d7f1-809b-4ec3-9257-6cd0934eddfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4zjfy64trdbs5", "content": "CVE-2026-91012 - Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation\nCVE ID : CVE-2026-91012\n \n Published : Sept. 29, 2026, 8:34 a.m. | 12\u00a0minutes ago\n \n Description : org.apache.karaf.config.core.impl.ConfigRepositoryImpl#update(pid, pr...", "creation_timestamp": "2026-09-29T09:12:32.877743Z"}</description>
      <content:encoded>{"uuid": "6559d7f1-809b-4ec3-9257-6cd0934eddfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4zjfy64trdbs5", "content": "CVE-2026-91012 - Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation\nCVE ID : CVE-2026-91012\n \n Published : Sept. 29, 2026, 8:34 a.m. | 12\u00a0minutes ago\n \n Description : org.apache.karaf.config.core.impl.ConfigRepositoryImpl#update(pid, pr...", "creation_timestamp": "2026-09-29T09:12:32.877743Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6559d7f1-809b-4ec3-9257-6cd0934eddfb/export</guid>
      <pubDate>Tue, 29 Sep 2026 09:12:32 +0000</pubDate>
    </item>
  </channel>
</rss>
