<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-10T00:10:17.444888+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/446e83fc-c7f2-474c-af7f-b6be53b4f9e7/export</id>
    <title>446e83fc-c7f2-474c-af7f-b6be53b4f9e7</title>
    <updated>2026-05-10T00:10:17.788425+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "446e83fc-c7f2-474c-af7f-b6be53b4f9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7548", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkrbon466a2k", "content": "CVE-2026-7548 - Totolink NR1800X cstecgi.cgi sub_41A68C command injection\nCVE ID : CVE-2026-7548\n \n Published : May 1, 2026, 3:16 a.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function sub...", "creation_timestamp": "2026-05-01T04:21:14.328589Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/446e83fc-c7f2-474c-af7f-b6be53b4f9e7/export"/>
    <published>2026-05-01T04:21:14.328589+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/66b7f2f8-36de-472a-8205-8ed28c885bf2/export</id>
    <title>66b7f2f8-36de-472a-8205-8ed28c885bf2</title>
    <updated>2026-05-10T00:10:17.788335+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "66b7f2f8-36de-472a-8205-8ed28c885bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7548", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mkrht2migd2f", "content": "Totolink NR1800X 9.1.0u.6279_B20210910\u3067\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u767a\u898b\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-7548 CVSS 8.8 | HIGH", "creation_timestamp": "2026-05-01T06:11:03.464474Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/66b7f2f8-36de-472a-8205-8ed28c885bf2/export"/>
    <published>2026-05-01T06:11:03.464474+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/88978c73-d8ca-4951-82cd-81b9bf492009/export</id>
    <title>88978c73-d8ca-4951-82cd-81b9bf492009</title>
    <updated>2026-05-10T00:10:17.788207+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "88978c73-d8ca-4951-82cd-81b9bf492009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7548", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mkrmb3s3m626", "content": "Totolink NR1800X (9.1.0u.6279_B20210910) hit by HIGH-severity remote command injection (CVE-2026-7548). Exploit code is public! Disable remote management &amp;amp; restrict access until a patch arrives. https://radar.offseq.com/threat/cve-2026-7548-command-injection-in-totolink-nr1800-9109fa5c #OffSeq #i...", "creation_timestamp": "2026-05-01T07:30:29.569437Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/88978c73-d8ca-4951-82cd-81b9bf492009/export"/>
    <published>2026-05-01T07:30:29.569437+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/62c2a035-0e55-44a0-b925-5553ef63e5eb/export</id>
    <title>62c2a035-0e55-44a0-b925-5553ef63e5eb</title>
    <updated>2026-05-10T00:10:17.786240+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "62c2a035-0e55-44a0-b925-5553ef63e5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7548", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116498145415987925", "content": "\ud83d\udd25 HIGH severity: CVE-2026-7548 hits Totolink NR1800X (9.1.0u.6279_B20210910) \u2014 remote command injection via setUssd in /cgi-bin/cstecgi.cgi. Exploit is public, no patch yet. Disable remote management ASAP! https://radar.offseq.com/threat/cve-2026-7548-command-injection-in-totolink-nr1800-9109fa5c #OffSeq #infosec #vuln #IoT", "creation_timestamp": "2026-05-01T07:30:49.758076Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/62c2a035-0e55-44a0-b925-5553ef63e5eb/export"/>
    <published>2026-05-01T07:30:49.758076+00:00</published>
  </entry>
</feed>
