<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T23:49:42.685511+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/89054ad9-b9c2-4820-ba64-366186067705/export</id>
    <title>89054ad9-b9c2-4820-ba64-366186067705</title>
    <updated>2026-10-11T23:49:42.715091+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "89054ad9-b9c2-4820-ba64-366186067705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108576", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxmqfzzjqp2p", "content": "TOZED X300\uff086.01.3\u307e\u3067\uff09\u306eIPPingDiagnostics Handler\u3067os\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089Host\u5f15\u6570\u3092\u64cd\u4f5c\u3059\u308b\u3053\u3068\u3067\u3001\u653b\u6483\u8005\u306f\u2026\nCVE-2026-108576 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-10-11T19:29:04.034775Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/89054ad9-b9c2-4820-ba64-366186067705/export"/>
    <published>2026-10-11T19:29:04.034775+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a76531f6-902e-4515-b1f1-ece26bee0889/export</id>
    <title>a76531f6-902e-4515-b1f1-ece26bee0889</title>
    <updated>2026-10-11T23:49:42.716707+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a76531f6-902e-4515-b1f1-ece26bee0889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108576", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxm6geegtf2h", "content": "\ud83d\udea8 CVE-2026-108576 \u2014 CVSS 10 CRITICAL\n\nA vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108576\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-11T14:07:06.234254Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a76531f6-902e-4515-b1f1-ece26bee0889/export"/>
    <published>2026-10-11T14:07:06.234254+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/811d888a-c7eb-4a38-80ab-320683f58897/export</id>
    <title>811d888a-c7eb-4a38-80ab-320683f58897</title>
    <updated>2026-10-11T23:49:42.716814+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "811d888a-c7eb-4a38-80ab-320683f58897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108576", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxm3saztai2l", "content": "CVE-2026-108576 - x300\nThe X300 device\u2019s ping diagnostic feature can be tricked into running system commands when a specially crafted host name is supplied. An attacker on the network could use this to execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#x300 #tozed #CVE #infosec", "creation_timestamp": "2026-10-11T13:20:10.131303Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/811d888a-c7eb-4a38-80ab-320683f58897/export"/>
    <published>2026-10-11T13:20:10.131303+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b0342b41-6e7e-4b68-bc83-a009867ebf8c/export</id>
    <title>b0342b41-6e7e-4b68-bc83-a009867ebf8c</title>
    <updated>2026-10-11T23:49:42.716897+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b0342b41-6e7e-4b68-bc83-a009867ebf8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108576", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117422303163151146", "content": "CVE-2026-108576 TOZED X300 IPPingDiagnostics process_ping os command injection A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in os command injection. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108576https://vuldb.com/vuln/416233https://vuldb.com/vuln/416233/ctihttps://vuldb.com/cve/CVE-2026-108576https://vuldb.com/submit/956290https://github.com/danish1162/CVE-2026-2035703-x300/security/advisories/GHSA-qcpp-vfr2-v242#TOZED #X300#CVE_2026_108576#bot", "creation_timestamp": "2026-10-11T12:35:55.746163Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b0342b41-6e7e-4b68-bc83-a009867ebf8c/export"/>
    <published>2026-10-11T12:35:55.746163+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/75914b5d-d447-48d6-8c5e-b6a907430467/export</id>
    <title>75914b5d-d447-48d6-8c5e-b6a907430467</title>
    <updated>2026-10-11T23:49:42.716975+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "75914b5d-d447-48d6-8c5e-b6a907430467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108576", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117418908799871499", "content": "\u26a0\ufe0f A severe vulnerability was disclosed for TOZED X300 (CVE-2026-108576) https://vuldb.com/vuln/416233", "creation_timestamp": "2026-10-10T22:12:41.696301Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/75914b5d-d447-48d6-8c5e-b6a907430467/export"/>
    <published>2026-10-10T22:12:41.696301+00:00</published>
  </entry>
</feed>
