<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-27T12:43:25.297597+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/349237a9-6fdd-47d8-8413-f93b8d6ade84/export</id>
    <title>349237a9-6fdd-47d8-8413-f93b8d6ade84</title>
    <updated>2026-05-27T12:43:25.618230+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "349237a9-6fdd-47d8-8413-f93b8d6ade84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44116", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kizyhld2g", "content": "\ud83d\udfe0 CVE-2026-44116 - High (8.6)\n\nOpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44116/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:36:25.024491Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/349237a9-6fdd-47d8-8413-f93b8d6ade84/export"/>
    <published>2026-05-06T20:36:25.024491+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3398b1ce-ec30-45ba-8c9b-3af6ebefab26/export</id>
    <title>3398b1ce-ec30-45ba-8c9b-3af6ebefab26</title>
    <updated>2026-05-27T12:43:25.618159+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3398b1ce-ec30-45ba-8c9b-3af6ebefab26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44116", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kk3hh5o2l", "content": "\ud83d\udfe0 CVE-2026-44116 - High (8.6)\n\nOpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44116/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:37:00.429183Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3398b1ce-ec30-45ba-8c9b-3af6ebefab26/export"/>
    <published>2026-05-06T20:37:00.429183+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3efe917e-f288-4480-b121-0673135ad9c0/export</id>
    <title>3efe917e-f288-4480-b121-0673135ad9c0</title>
    <updated>2026-05-27T12:43:25.618077+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3efe917e-f288-4480-b121-0673135ad9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44116", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ml7kqrtpkck2", "content": "\ud83d\udfe0 CVE-2026-44116 - High (8.6) OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin... https://www.thehackerwire.com/vulnerability/CVE-2026-44116/ #in...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-06T20:40:56.714881Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3efe917e-f288-4480-b121-0673135ad9c0/export"/>
    <published>2026-05-06T20:40:56.714881+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1ee937ab-0da9-4575-8cc1-5f27a1cbfa66/export</id>
    <title>1ee937ab-0da9-4575-8cc1-5f27a1cbfa66</title>
    <updated>2026-05-27T12:43:25.617974+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1ee937ab-0da9-4575-8cc1-5f27a1cbfa66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44116", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml7qkcg5sr2t", "content": "CVE-2026-44116 - OpenClaw Zalo SSRF\nCVE ID : CVE-2026-44116\n \n Published : May 6, 2026, 8:16 p.m. | 23\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate out...", "creation_timestamp": "2026-05-06T22:24:29.749036Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1ee937ab-0da9-4575-8cc1-5f27a1cbfa66/export"/>
    <published>2026-05-06T22:24:29.749036+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2a8b9616-e059-405d-9723-83c2c118d1b7/export</id>
    <title>2a8b9616-e059-405d-9723-83c2c118d1b7</title>
    <updated>2026-05-27T12:43:25.616112+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2a8b9616-e059-405d-9723-83c2c118d1b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44116", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmmh7f3e3e2v", "content": "\ud83d\udccc CVE-2026-44116 - OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound... https://www.cyberhub.blog/cves/CVE-2026-44116", "creation_timestamp": "2026-05-24T17:07:37.153935Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2a8b9616-e059-405d-9723-83c2c118d1b7/export"/>
    <published>2026-05-24T17:07:37.153935+00:00</published>
  </entry>
</feed>
