<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-04T13:16:23.923786+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/90d368bd-2d8e-472e-ac45-a6553ae0bd71/export</id>
    <title>90d368bd-2d8e-472e-ac45-a6553ae0bd71</title>
    <updated>2026-07-04T13:16:23.946075+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "90d368bd-2d8e-472e-ac45-a6553ae0bd71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44250", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2k2oixus2w", "content": "\ud83d\udfe0 CVE-2026-44250 - High (7.5)\n\nNetty is a network application framework for development of protocol servers and clients. In nett...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44250/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T01:00:40.034939Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/90d368bd-2d8e-472e-ac45-a6553ae0bd71/export"/>
    <published>2026-06-12T01:00:40.034939+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0f884ad8-1e57-4080-aa49-df9b850072e3/export</id>
    <title>0f884ad8-1e57-4080-aa49-df9b850072e3</title>
    <updated>2026-07-04T13:16:23.948835+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0f884ad8-1e57-4080-aa49-df9b850072e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44258", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlpmt5s6m52m", "content": "\ud83d\udea9 CRITICAL: efwGrp efw4.X (&amp;lt;4.08.010) is vulnerable to OS command injection. Attackers can bypass file controls. Upgrade to 4.08.010+ now! https://radar.offseq.com/threat/cve-2026-44258-cwe-78-improper-neutralization-of-s-147a3557 #OffSeq #CVE202644258 #security", "creation_timestamp": "2026-05-13T06:00:28.469045Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0f884ad8-1e57-4080-aa49-df9b850072e3/export"/>
    <published>2026-05-13T06:00:28.469045+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7d7f6a36-3d33-426b-aad1-97b6e0d45889/export</id>
    <title>7d7f6a36-3d33-426b-aad1-97b6e0d45889</title>
    <updated>2026-07-04T13:16:23.949004+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7d7f6a36-3d33-426b-aad1-97b6e0d45889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44258", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116565739119113435", "content": "\ud83d\udea8 CVE-2026-44258: CRITICAL OS command injection in efwGrp efw4.X (&amp;lt;4.08.010). Attackers can copy/move files outside home dir, bypassing controls. Upgrade to 4.08.010+ ASAP! https://radar.offseq.com/threat/cve-2026-44258-cwe-78-improper-neutralization-of-s-147a3557 #OffSeq #CVE202644258 #infosec #patchnow", "creation_timestamp": "2026-05-13T06:00:26.016930Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7d7f6a36-3d33-426b-aad1-97b6e0d45889/export"/>
    <published>2026-05-13T06:00:26.016930+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b08a98a9-1712-44bf-b26e-918b680c5ab6/export</id>
    <title>b08a98a9-1712-44bf-b26e-918b680c5ab6</title>
    <updated>2026-07-04T13:16:23.949141+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b08a98a9-1712-44bf-b26e-918b680c5ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44257", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116565385652211978", "content": "\ud83d\udea8 CRITICAL: CVE-2026-44257 in efwGrp efw4.X (&amp;lt;4.08.010) enables remote, unauthenticated command execution via crafted zip uploads and path traversal. Patch to 4.08.010 ASAP. https://radar.offseq.com/threat/cve-2026-44257-cwe-77-improper-neutralization-of-s-a113f36f #OffSeq #vuln #infosec #websecurity", "creation_timestamp": "2026-05-13T04:30:40.702982Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b08a98a9-1712-44bf-b26e-918b680c5ab6/export"/>
    <published>2026-05-13T04:30:40.702982+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cd3c592c-7d01-411d-89bb-d58648d2de95/export</id>
    <title>cd3c592c-7d01-411d-89bb-d58648d2de95</title>
    <updated>2026-07-04T13:16:23.949267+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cd3c592c-7d01-411d-89bb-d58648d2de95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44257", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlphsg4x3b23", "content": "\ud83d\udd34 CRITICAL vuln in efwGrp efw4.X (&amp;lt;4.08.010): Remote attackers can upload webshells &amp;amp; run commands as Tomcat due to path traversal. Upgrade to 4.08.010 now! https://radar.offseq.com/threat/cve-2026-44257-cwe-77-improper-neutralization-of-s-a113f36f #OffSeq #infosec #patchnow", "creation_timestamp": "2026-05-13T04:30:34.519346Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cd3c592c-7d01-411d-89bb-d58648d2de95/export"/>
    <published>2026-05-13T04:30:34.519346+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/714dc24f-d1ec-42c7-973a-f43c64e29071/export</id>
    <title>714dc24f-d1ec-42c7-973a-f43c64e29071</title>
    <updated>2026-07-04T13:16:23.949383+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "714dc24f-d1ec-42c7-973a-f43c64e29071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4425", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mij5nyg3mq2e", "content": "", "creation_timestamp": "2026-04-02T11:57:35.056117Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/714dc24f-d1ec-42c7-973a-f43c64e29071/export"/>
    <published>2026-04-02T11:57:35.056117+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/907d6757-3f0e-4aea-8b56-04ce822b13f4/export</id>
    <title>907d6757-3f0e-4aea-8b56-04ce822b13f4</title>
    <updated>2026-07-04T13:16:23.949480+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "907d6757-3f0e-4aea-8b56-04ce822b13f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4425", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mic2pnbenz2g", "content": "", "creation_timestamp": "2026-03-30T16:16:10.760111Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/907d6757-3f0e-4aea-8b56-04ce822b13f4/export"/>
    <published>2026-03-30T16:16:10.760111+00:00</published>
  </entry>
</feed>
