<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-30T05:19:26.923386+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a000d3a6-6961-4ced-adee-596db825bd3b/export</id>
    <title>a000d3a6-6961-4ced-adee-596db825bd3b</title>
    <updated>2026-05-30T05:19:27.394807+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a000d3a6-6961-4ced-adee-596db825bd3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30893", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkobmzknpo2w", "content": "\ud83d\udd34 CVE-2026-30893 - Critical (9)\n\nWazuh is a free and open source platform used for threat prevention, detection, and response. Fro...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-30893/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-29T23:42:19.729163Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a000d3a6-6961-4ced-adee-596db825bd3b/export"/>
    <published>2026-04-29T23:42:19.729163+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6425bb4f-cfb0-4f09-bffa-91ac0f52090f/export</id>
    <title>6425bb4f-cfb0-4f09-bffa-91ac0f52090f</title>
    <updated>2026-05-30T05:19:27.394686+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6425bb4f-cfb0-4f09-bffa-91ac0f52090f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30893", "type": "seen", "source": "https://t.me/bdufstecru/3129", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 decompress_files() \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437 Wazuh \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0438\u043c\u0435\u043d\u0438 \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-06165\nCVE-2026-30893\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://github.com/wazuh/wazuh/security/advisories/GHSA-m8rw-v4f6-8787", "creation_timestamp": "2026-05-04T14:34:05.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6425bb4f-cfb0-4f09-bffa-91ac0f52090f/export"/>
    <published>2026-05-04T14:34:05+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ce786d77-cb49-4cfb-965d-3d3797fa2c69/export</id>
    <title>ce786d77-cb49-4cfb-965d-3d3797fa2c69</title>
    <updated>2026-05-30T05:19:27.394588+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ce786d77-cb49-4cfb-965d-3d3797fa2c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30893", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mllus7jgis2l", "content": "We are scanning &amp;amp; reporting daily Wazuh CVE-2026-30893 (CVSS 9.9) vulnerable instances, with over 3500 IPs seen unpatched on 2026-05-10. See advisory &amp;amp; update to latest version: github.com/wazuh/wazuh/... ... \n\nWorth keeping your security platforms up to date!", "creation_timestamp": "2026-05-11T18:12:33.725180Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ce786d77-cb49-4cfb-965d-3d3797fa2c69/export"/>
    <published>2026-05-11T18:12:33.725180+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9080e98e-37d5-476e-9a2d-51591fc1ca59/export</id>
    <title>9080e98e-37d5-476e-9a2d-51591fc1ca59</title>
    <updated>2026-05-30T05:19:27.394480+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9080e98e-37d5-476e-9a2d-51591fc1ca59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30893", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mlluscbgvs2l", "content": "We are scanning &amp;amp; reporting daily Wazuh CVE-2026-30893 (CVSS 9.9) vulnerable instances, with over 3500 IPs seen unpatched on 2026-05-10. See advisory &amp;amp; update to latest version: github.com/wazuh/wazuh/... ... \n\nWorth keeping your security platforms up to date!", "creation_timestamp": "2026-05-11T18:12:35.905170Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9080e98e-37d5-476e-9a2d-51591fc1ca59/export"/>
    <published>2026-05-11T18:12:35.905170+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eb419126-ddaa-4dd9-8f49-5a502e77650a/export</id>
    <title>eb419126-ddaa-4dd9-8f49-5a502e77650a</title>
    <updated>2026-05-30T05:19:27.394372+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eb419126-ddaa-4dd9-8f49-5a502e77650a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30893", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116557296814945888", "content": "IP data for your network/constituency shared in Vulnerable HTTP reporting, tagged 'cve-2026-30893: https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/\nPublic Dashboard tree map view:  https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&amp;amp;source=http_vulnerable&amp;amp;source=http_vulnerable6&amp;amp;tag=cve-2026-30893%2B&amp;amp;data_set=count&amp;amp;scale=log&amp;amp;auto_update=on\nNVD entry: https://nvd.nist.gov/vuln/detail/CVE-2026-30893\n#CyberCivilDefense #cybersecurity", "creation_timestamp": "2026-05-11T18:13:27.316110Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eb419126-ddaa-4dd9-8f49-5a502e77650a/export"/>
    <published>2026-05-11T18:13:27.316110+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/11c79cea-71c6-46cd-a5d9-9aa5a05831c3/export</id>
    <title>11c79cea-71c6-46cd-a5d9-9aa5a05831c3</title>
    <updated>2026-05-30T05:19:27.394237+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "11c79cea-71c6-46cd-a5d9-9aa5a05831c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30893", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116557316906275011", "content": "We are scanning &amp;amp; reporting daily Wazuh CVE-2026-30893 (CVSS 9.9) vulnerable instances, with over 3500 IPs seen unpatched on 2026-05-10. See advisory &amp;amp; update to latest version: https://github.com/wazuh/wazuh/security/advisories/GHSA-m8rw-v4f6-8787 ... \nWorth keeping your security platforms up to date!\nIP data for your network/constituency shared in Vulnerable HTTP reporting, tagged 'cve-2026-30893: https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/\nPublic Dashboard tree map view:  https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&amp;amp;source=http_vulnerable&amp;amp;source=http_vulnerable6&amp;amp;tag=cve-2026-30893%2B&amp;amp;data_set=count&amp;amp;scale=log&amp;amp;auto_update=on\nNVD entry: https://nvd.nist.gov/vuln/detail/CVE-2026-30893\n#CyberCivilDefense  #cybersecurity", "creation_timestamp": "2026-05-11T18:18:34.658716Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/11c79cea-71c6-46cd-a5d9-9aa5a05831c3/export"/>
    <published>2026-05-11T18:18:34.658716+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6c6ae991-3722-40e6-a62e-ecc786c426c8/export</id>
    <title>6c6ae991-3722-40e6-a62e-ecc786c426c8</title>
    <updated>2026-05-30T05:19:27.393074+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "6c6ae991-3722-40e6-a62e-ecc786c426c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-30893", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wazuh-poc-pubblico-per-lo-sfruttamento-della-cve-2026-30893", "content": "", "creation_timestamp": "2026-05-12T01:26:50.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6c6ae991-3722-40e6-a62e-ecc786c426c8/export"/>
    <published>2026-05-12T01:26:50+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/69a883f8-d6b8-4763-b49a-adb0fda1f782/export</id>
    <title>69a883f8-d6b8-4763-b49a-adb0fda1f782</title>
    <updated>2026-05-30T05:19:27.392930+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "69a883f8-d6b8-4763-b49a-adb0fda1f782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30893", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mlqkzmyryu2g", "content": "\u27a1\ufe0f Wazuh - Un patch est disponible\n\nUne faille de s\u00e9curit\u00e9 critique, associ\u00e9e \u00e0 la r\u00e9f\u00e9rence CVE-2026-30893 et affichant un score CVSS de 9.9, a \u00e9t\u00e9 r\u00e9v\u00e9l\u00e9e r\u00e9cemment au sein de Wazuh. \n\n\ud83d\udee1\ufe0f Quels sont les risques ? Comment se prot\u00e9ger ?\nwww.it-connect.fr/wazuh-cve-20...\n\n#CVE #Wazuh", "creation_timestamp": "2026-05-13T15:00:57.550270Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/69a883f8-d6b8-4763-b49a-adb0fda1f782/export"/>
    <published>2026-05-13T15:00:57.550270+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/082eb7de-5d54-4c39-9b91-35185e57a1ef/export</id>
    <title>082eb7de-5d54-4c39-9b91-35185e57a1ef</title>
    <updated>2026-05-30T05:19:27.391191+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "082eb7de-5d54-4c39-9b91-35185e57a1ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-30893", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mms7mak6dk2u", "content": "\ud83d\udccc CVE-2026-30893 - Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path trav... https://www.cyberhub.blog/cves/CVE-2026-30893", "creation_timestamp": "2026-05-27T00:07:13.630806Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/082eb7de-5d54-4c39-9b91-35185e57a1ef/export"/>
    <published>2026-05-27T00:07:13.630806+00:00</published>
  </entry>
</feed>
