<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-21T00:50:21.817079+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/48c6fcc8-de74-41ae-af3d-2c78d7f4a160/export</id>
    <title>48c6fcc8-de74-41ae-af3d-2c78d7f4a160</title>
    <updated>2026-08-21T00:50:21.838250+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "48c6fcc8-de74-41ae-af3d-2c78d7f4a160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtirslzue22b", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74876. openssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates key bundles from untrusted data without verifying signatures. Attackers can call from_d\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74876", "creation_timestamp": "2026-08-20T08:02:33.276231Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/48c6fcc8-de74-41ae-af3d-2c78d7f4a160/export"/>
    <published>2026-08-20T08:02:33.276231+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bdb5473b-a5fa-4d6b-9d69-c37c8ad0c6f3/export</id>
    <title>bdb5473b-a5fa-4d6b-9d69-c37c8ad0c6f3</title>
    <updated>2026-08-21T00:50:21.840705+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bdb5473b-a5fa-4d6b-9d69-c37c8ad0c6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdeyukz7t2m", "content": "CVE-2026-74876 - openssl-encrypt\nA recent OpenSSL update fixes a security issue where encryption keys are not properly verified before use. This could allow an attacker to steal sensitive information. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:30:05.270779Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bdb5473b-a5fa-4d6b-9d69-c37c8ad0c6f3/export"/>
    <published>2026-08-18T04:30:05.270779+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3c6161f6-e4a2-4263-86c4-e6e39b56d987/export</id>
    <title>3c6161f6-e4a2-4263-86c4-e6e39b56d987</title>
    <updated>2026-08-21T00:50:21.840827+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3c6161f6-e4a2-4263-86c4-e6e39b56d987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtccw4hl7d2e", "content": "CVE-2026-74876 - openssl_encrypt\nOld versions of OpenSSL allow attackers to encrypt data using their own public keys, potentially exposing sensitive information. This affects users who rely on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:20:05.953941Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3c6161f6-e4a2-4263-86c4-e6e39b56d987/export"/>
    <published>2026-08-17T18:20:05.953941+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/416f68d9-5cb3-42cf-bae2-49c6e20bcbac/export</id>
    <title>416f68d9-5cb3-42cf-bae2-49c6e20bcbac</title>
    <updated>2026-08-21T00:50:21.840905+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "416f68d9-5cb3-42cf-bae2-49c6e20bcbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117111451661196847", "content": "CVE-2026-74876 - Critical crypto flaw in openssl_encrypt &amp;lt;1.4.0. Unverified key bundles allow secret leakage via attacker-controlled keys. CVSS 9.8. Unpatched - update immediately. #CVE #infosec #cryptography\nhttps://www.valtersit.com/cve/CVE-2026-74876/", "creation_timestamp": "2026-08-17T15:03:37.770214Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/416f68d9-5cb3-42cf-bae2-49c6e20bcbac/export"/>
    <published>2026-08-17T15:03:37.770214+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/53c744d1-983a-48f6-ba4a-4669210a7561/export</id>
    <title>53c744d1-983a-48f6-ba4a-4669210a7561</title>
    <updated>2026-08-21T00:50:21.840986+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "53c744d1-983a-48f6-ba4a-4669210a7561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtbxugdhwh2l", "content": "CVE-2026-74876 - Critical crypto flaw in openssl_encrypt &amp;lt;1.4.0. Unverified key bundles allow secret leakage via attacker-controlled keys. CVSS 9.8. Unpatched - update immediately. #CVE #infosec #cryptography\n\nhttps://www.valtersit.com/cve/CVE-2026-74876/", "creation_timestamp": "2026-08-17T15:02:17.822948Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/53c744d1-983a-48f6-ba4a-4669210a7561/export"/>
    <published>2026-08-17T15:02:17.822948+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3151e626-aaf3-47e9-9f4c-d12919935952/export</id>
    <title>3151e626-aaf3-47e9-9f4c-d12919935952</title>
    <updated>2026-08-21T00:50:21.841063+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3151e626-aaf3-47e9-9f4c-d12919935952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo4tfpct2p", "content": "\ud83d\udea8 CVE-2026-74876 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates k...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74876\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:08:09.583360Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3151e626-aaf3-47e9-9f4c-d12919935952/export"/>
    <published>2026-08-17T12:08:09.583360+00:00</published>
  </entry>
</feed>
