<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-01T08:56:22.391067+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bda4ede8-36d5-4050-9e32-6a805e64c367/export</id>
    <title>bda4ede8-36d5-4050-9e32-6a805e64c367</title>
    <updated>2026-08-01T08:56:22.414904+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bda4ede8-36d5-4050-9e32-6a805e64c367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14541", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwygrbhhl2y", "content": "CVE-2026-14541\nA security issue in Google MCP Toolbox allows unauthorized access to protected tools and data backends using valid Google OAuth tokens. This happens when the toolbox is set up to use Google OAuth without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:48:04.657135Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bda4ede8-36d5-4050-9e32-6a805e64c367/export"/>
    <published>2026-07-31T12:48:04.657135+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1883f44b-3be6-4833-ba32-81a82adc2ff0/export</id>
    <title>1883f44b-3be6-4833-ba32-81a82adc2ff0</title>
    <updated>2026-08-01T08:56:22.417266+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1883f44b-3be6-4833-ba32-81a82adc2ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jjkywoers73sy", "content": "CVE-2026-14541 - Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider\nCVE ID : CVE-2026-14541\n \n Published : July 31, 2026, 3:16 a.m. | 29\u00a0minutes ago\n \n Description : An authentication bypass and audience confusion vulnerability exists in the Google OAut...", "creation_timestamp": "2026-07-31T04:00:16.854626Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1883f44b-3be6-4833-ba32-81a82adc2ff0/export"/>
    <published>2026-07-31T04:00:16.854626+00:00</published>
  </entry>
</feed>
