<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T17:52:58.893264+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/29c7d98b-e48f-4bbc-9697-a7eb877eb12c/export</id>
    <title>29c7d98b-e48f-4bbc-9697-a7eb877eb12c</title>
    <updated>2026-09-14T17:52:58.918811+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "29c7d98b-e48f-4bbc-9697-a7eb877eb12c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50894", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvg5taxnil27", "content": "CVE-2026-50894: Unrestricted file upload in easyadmin v2.0.2.2 enables authenticated RCE and full server takeover. CVSS not scored, but impact is critical. If you use easyadmin, restrict access and audit uploads now. Patch https://www.valtersit.com/cve/CVE-2026-50894/", "creation_timestamp": "2026-09-13T17:50:03.547865Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/29c7d98b-e48f-4bbc-9697-a7eb877eb12c/export"/>
    <published>2026-09-13T17:50:03.547865+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b9e26097-acc1-4ddc-8d26-81cef69ac7cb/export</id>
    <title>b9e26097-acc1-4ddc-8d26-81cef69ac7cb</title>
    <updated>2026-09-14T17:52:58.920282+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b9e26097-acc1-4ddc-8d26-81cef69ac7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50894", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117264955080387416", "content": "CVE-2026-50894: Unrestricted file upload in easyadmin v2.0.2.2 enables authenticated RCE and full server takeover. CVSS not scored, but impact is critical. If you use easyadmin, restrict access and audit uploads now. Patch https://www.valtersit.com/cve/CVE-2026-50894/", "creation_timestamp": "2026-09-13T17:40:15.747049Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b9e26097-acc1-4ddc-8d26-81cef69ac7cb/export"/>
    <published>2026-09-13T17:40:15.747049+00:00</published>
  </entry>
</feed>
