<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-08T21:52:28.256222+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2b34e369-09a6-47ad-8b8d-7accb8bf8243/export</id>
    <title>2b34e369-09a6-47ad-8b8d-7accb8bf8243</title>
    <updated>2026-06-08T21:52:28.308911+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2b34e369-09a6-47ad-8b8d-7accb8bf8243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5021", "type": "published-proof-of-concept", "source": "Telegram/uLsG1F3rRMuZRy4SE2GPACGkc6X3xLO2jk7e7xZLXH2BzSc", "content": "", "creation_timestamp": "2026-03-29T03:15:24.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2b34e369-09a6-47ad-8b8d-7accb8bf8243/export"/>
    <published>2026-03-29T03:15:24+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc7588b4-512f-461b-b540-99d780846a67/export</id>
    <title>dc7588b4-512f-461b-b540-99d780846a67</title>
    <updated>2026-06-08T21:52:28.308791+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc7588b4-512f-461b-b540-99d780846a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5021", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mi6eslbj6h2q", "content": "", "creation_timestamp": "2026-03-29T05:06:08.068348Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc7588b4-512f-461b-b540-99d780846a67/export"/>
    <published>2026-03-29T05:06:08.068348+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5e6401c8-7373-49c8-b53e-8001c2beb499/export</id>
    <title>5e6401c8-7373-49c8-b53e-8001c2beb499</title>
    <updated>2026-06-08T21:52:28.308667+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5e6401c8-7373-49c8-b53e-8001c2beb499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5021", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3micmswobep23", "content": "", "creation_timestamp": "2026-03-30T21:40:08.739569Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5e6401c8-7373-49c8-b53e-8001c2beb499/export"/>
    <published>2026-03-30T21:40:08.739569+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b8df761-498d-4ae9-b4c5-6325b037b2f3/export</id>
    <title>8b8df761-498d-4ae9-b4c5-6325b037b2f3</title>
    <updated>2026-06-08T21:52:28.308542+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b8df761-498d-4ae9-b4c5-6325b037b2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50219", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mngzdwoihc2c", "content": "CVE-2026-50219 - Expat Use-After-Free Vulnerability\nCVE ID : CVE-2026-50219\n \n Published : June 4, 2026, 6:16 a.m. | 16\u00a0minutes ago\n \n Description : libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, ...", "creation_timestamp": "2026-06-04T06:41:01.088775Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b8df761-498d-4ae9-b4c5-6325b037b2f3/export"/>
    <published>2026-06-04T06:41:01.088775+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/83660511-c384-4369-8fb5-216265b00380/export</id>
    <title>83660511-c384-4369-8fb5-216265b00380</title>
    <updated>2026-06-08T21:52:28.308418+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "83660511-c384-4369-8fb5-216265b00380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhgrli5m32d", "content": "CVE-2026-50211 - Exposed Factory Testing App Boundaries\nCVE ID : CVE-2026-50211\n \n Published : June 4, 2026, 9:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malic...", "creation_timestamp": "2026-06-04T10:41:47.493993Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/83660511-c384-4369-8fb5-216265b00380/export"/>
    <published>2026-06-04T10:41:47.493993+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18967d29-0c3b-4560-b86c-0252f2c41d8d/export</id>
    <title>18967d29-0c3b-4560-b86c-0252f2c41d8d</title>
    <updated>2026-06-08T21:52:28.308289+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18967d29-0c3b-4560-b86c-0252f2c41d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhgxfu2cx22", "content": "CVE-2026-50213 - Bulk User Private Data Harvesting\nCVE ID : CVE-2026-50213\n \n Published : June 4, 2026, 9:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The account validation endpoint\u00a0/v1/User/validate\u00a0returns comprehensive user profile data sheets, which can be crawled by...", "creation_timestamp": "2026-06-04T10:44:33.192898Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18967d29-0c3b-4560-b86c-0252f2c41d8d/export"/>
    <published>2026-06-04T10:44:33.192898+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4adb20d9-b750-42ce-924e-d81eea43707c/export</id>
    <title>4adb20d9-b750-42ce-924e-d81eea43707c</title>
    <updated>2026-06-08T21:52:28.308169+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4adb20d9-b750-42ce-924e-d81eea43707c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhh5wuoi52g", "content": "CVE-2026-50212 - Arbitrary Remote Device Unbinding\nCVE ID : CVE-2026-50212\n \n Published : June 4, 2026, 9:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Weak validation logic within device dissociation API routines allows a remote entity to forcefully unbind unrelated user ...", "creation_timestamp": "2026-06-04T10:48:12.414419Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4adb20d9-b750-42ce-924e-d81eea43707c/export"/>
    <published>2026-06-04T10:48:12.414419+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e2747837-81ff-4eac-a0e2-0f87cd687869/export</id>
    <title>e2747837-81ff-4eac-a0e2-0f87cd687869</title>
    <updated>2026-06-08T21:52:28.308034+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e2747837-81ff-4eac-a0e2-0f87cd687869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhivlg2rw2b", "content": "CVE-2026-50210 - Weak Static Cryptographic Initialization Vectors\nCVE ID : CVE-2026-50210\n \n Published : June 4, 2026, 9:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it sus...", "creation_timestamp": "2026-06-04T11:19:19.430092Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e2747837-81ff-4eac-a0e2-0f87cd687869/export"/>
    <published>2026-06-04T11:19:19.430092+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/88018a32-b6f3-4918-b812-d3aeba230b16/export</id>
    <title>88018a32-b6f3-4918-b812-d3aeba230b16</title>
    <updated>2026-06-08T21:52:28.307873+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "88018a32-b6f3-4918-b812-d3aeba230b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnhjqgwkbs2b", "content": "CVE-2026-50214 - Shared Secret Quota Inflation\nCVE ID : CVE-2026-50214\n \n Published : June 4, 2026, 10:16 a.m. | 16\u00a0minutes ago\n \n Description : The\u00a0/v1/Plan\u00a0service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of...", "creation_timestamp": "2026-06-04T11:34:20.558224Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/88018a32-b6f3-4918-b812-d3aeba230b16/export"/>
    <published>2026-06-04T11:34:20.558224+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3ff606cb-1cb1-4750-a1a7-be166f1b1fb9/export</id>
    <title>3ff606cb-1cb1-4750-a1a7-be166f1b1fb9</title>
    <updated>2026-06-08T21:52:28.306055+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3ff606cb-1cb1-4750-a1a7-be166f1b1fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50211", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116693597828292612", "content": "We have just added an important vulnerability affecting Acer Connect M6E 5G Portable WiFi Router (CVE-2026-50211) https://vuldb.com/vuln/368285", "creation_timestamp": "2026-06-04T19:56:40.034327Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3ff606cb-1cb1-4750-a1a7-be166f1b1fb9/export"/>
    <published>2026-06-04T19:56:40.034327+00:00</published>
  </entry>
</feed>
