<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-08T08:29:58.500054+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/abca5c97-590b-4775-bbc2-7e27c73dab9e/export</id>
    <title>abca5c97-590b-4775-bbc2-7e27c73dab9e</title>
    <updated>2026-10-08T08:29:58.521755+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "abca5c97-590b-4775-bbc2-7e27c73dab9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107104", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxd6awdmc32z", "content": "CVE-2026-107104\nThe ERP system processes data without checking it first, so a stranger on the internet can send specially crafted information to the system. This can let the attacker run their own code, change or delete\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-08T00:10:06.053671Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/abca5c97-590b-4775-bbc2-7e27c73dab9e/export"/>
    <published>2026-10-08T00:10:06.053671+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f8e2e758-4b87-4a1a-a597-bf003180edb8/export</id>
    <title>f8e2e758-4b87-4a1a-a597-bf003180edb8</title>
    <updated>2026-10-08T08:29:58.524662+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f8e2e758-4b87-4a1a-a597-bf003180edb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107104", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxcexakkv424", "content": "CVE-2026-107104 is trending. Hype score 15, currently #1 on cvemon.\n\nThis vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-107104", "creation_timestamp": "2026-10-07T16:37:17.938473Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f8e2e758-4b87-4a1a-a597-bf003180edb8/export"/>
    <published>2026-10-07T16:37:17.938473+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0c20c2a4-fa21-43b1-bb28-0dba68dcafee/export</id>
    <title>0c20c2a4-fa21-43b1-bb28-0dba68dcafee</title>
    <updated>2026-10-08T08:29:58.524858+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0c20c2a4-fa21-43b1-bb28-0dba68dcafee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107104", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxbp724x4b27", "content": "\ud83d\udea8 CVE-2026-107104 \u2014 CVSS 9.3 CRITICAL\n\nThis vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the af...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-107104\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-07T10:07:56.854636Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0c20c2a4-fa21-43b1-bb28-0dba68dcafee/export"/>
    <published>2026-10-07T10:07:56.854636+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f49c9876-9092-43a6-be05-e09445b58f56/export</id>
    <title>f49c9876-9092-43a6-be05-e09445b58f56</title>
    <updated>2026-10-08T08:29:58.524973+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f49c9876-9092-43a6-be05-e09445b58f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107104", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxblgdhvcw2r", "content": "CRITICAL: CVE-2026-107104 in Manacle Multi-tenant ERP System enables remote code execution via unsafe deserialization. Unauthenticated attack possible \u2014 review exposure and tighten controls. https://radar.offseq.com/threat/cve-2026-107104-cwe-502-deserialization-of-untrusted-data-in-manacle-techn...", "creation_timestamp": "2026-10-07T09:00:27.246079Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f49c9876-9092-43a6-be05-e09445b58f56/export"/>
    <published>2026-10-07T09:00:27.246079+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c15a66b3-22c5-4911-8630-f211b7e215ca/export</id>
    <title>c15a66b3-22c5-4911-8630-f211b7e215ca</title>
    <updated>2026-10-08T08:29:58.525091+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c15a66b3-22c5-4911-8630-f211b7e215ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-107104", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117398806501193078", "content": "Manacle Technologies Multi-tenant ERP System hit by CVE-2026-107104 (CRITICAL, CVSS 9.3): Unsafe deserialization lets unauthenticated attackers execute code remotely. No fix yet \u2014 restrict access &amp;amp; monitor systems. https://radar.offseq.com/threat/cve-2026-107104-cwe-502-deserialization-of-untrusted-data-in-manacle-technologies-multi-tenant-erp-9e646ff6d0c210e4 #OffSeq #CVE2026107104 #ERP #infosec", "creation_timestamp": "2026-10-07T09:00:26.045430Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c15a66b3-22c5-4911-8630-f211b7e215ca/export"/>
    <published>2026-10-07T09:00:26.045430+00:00</published>
  </entry>
</feed>
