<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/rss/recent/cvelistv5/10</id>
  <title>Most recent entries from cvelistv5</title>
  <updated>2026-07-09T01:37:43.436850+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-9508</id>
    <title>cve-2026-9508</title>
    <updated>2026-05-29T13:33:31.937000+00:00</updated>
    <content>Incorrect Permission Assignment for Critical Resource vulnerability in Suprema's BioStar</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-9508"/>
    <published>2026-05-29T12:09:02.026000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-9152</id>
    <title>cve-2026-9152</title>
    <updated>2026-05-21T12:41:39.633000+00:00</updated>
    <content>Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-9152"/>
    <published>2026-05-21T00:47:24.365000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-8326</id>
    <title>cve-2026-8326</title>
    <updated>2026-05-29T13:34:00.474000+00:00</updated>
    <content>Remote Spark SparkView Path Traversal in RDP Drive Redirection leading to RCE</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-8326"/>
    <published>2026-05-29T11:47:02.652000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-8054</id>
    <title>cve-2026-8054</title>
    <updated>2026-05-27T13:40:13.159000+00:00</updated>
    <content>Unauthenticated SQL Injection in dotCMS Publish Audit API</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-8054"/>
    <published>2026-05-27T07:55:25.905000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-7411</id>
    <title>cve-2026-7411</title>
    <updated>2026-05-06T15:25:50.007000+00:00</updated>
    <content/>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-7411"/>
    <published>2026-05-05T14:07:53.476000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-7312</id>
    <title>cve-2026-7312</title>
    <updated>2026-06-03T12:55:14.770000+00:00</updated>
    <content>CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-7312"/>
    <published>2026-06-02T13:09:06.250000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-6213</id>
    <title>cve-2026-6213</title>
    <updated>2026-05-11T07:48:23.801000+00:00</updated>
    <content>Remote Spark SparkView RCE</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-6213"/>
    <published>2026-05-08T09:04:24.188000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-57700</id>
    <title>cve-2026-57700</title>
    <updated>2026-06-29T17:43:48.914000+00:00</updated>
    <content>WordPress OMGF Pro plugin &lt;= 5.2.6 - Arbitrary File Upload vulnerability</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-57700"/>
    <published>2026-06-25T17:29:31.795000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-57624</id>
    <title>cve-2026-57624</title>
    <updated>2026-07-02T19:39:14.229000+00:00</updated>
    <content>WordPress Blocksy Companion Pro plugin &lt;= 2.1.46 - Remote Code Execution (RCE) vulnerability</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-57624"/>
    <published>2026-07-02T11:15:26.664000+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/cve-2026-57572</id>
    <title>cve-2026-57572</title>
    <updated>2026-07-08T19:42:13.954000+00:00</updated>
    <content>Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args</content>
    <link href="https://vulnerability.circl.lu/vuln/cve-2026-57572"/>
    <published>2026-07-06T20:16:21.597000+00:00</published>
  </entry>
</feed>
