<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-28T03:13:46.823179+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1739bbea-deb0-45cd-b160-87bba9a0d36b/export</id>
    <title>1739bbea-deb0-45cd-b160-87bba9a0d36b</title>
    <updated>2026-08-28T03:13:46.849981+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1739bbea-deb0-45cd-b160-87bba9a0d36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75340", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu3d4anaei2b", "content": "CVE-2026-75340\nThe import feature in JetLinks version 2.11 can be tricked into reaching out to any address you specify. This could let an attacker make the server talk to internal systems or external services, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-27T17:00:05.092179Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1739bbea-deb0-45cd-b160-87bba9a0d36b/export"/>
    <published>2026-08-27T17:00:05.092179+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6c2a6dee-daaf-418f-96c5-9e2c273a0ddb/export</id>
    <title>6c2a6dee-daaf-418f-96c5-9e2c273a0ddb</title>
    <updated>2026-08-28T03:13:46.853347+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6c2a6dee-daaf-418f-96c5-9e2c273a0ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75340", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dgh7zzz33gbqq", "content": "CVE-2026-75340 - JetLinks Community Server-Side Request Forgery\nCVE ID : CVE-2026-75340\n \n Published : Aug. 26, 2026, 11:17 p.m. | 51\u00a0minutes ago\n \n Description : The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2...", "creation_timestamp": "2026-08-27T00:32:12.536694Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6c2a6dee-daaf-418f-96c5-9e2c273a0ddb/export"/>
    <published>2026-08-27T00:32:12.536694+00:00</published>
  </entry>
</feed>
