<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-10T18:59:07.782441+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/15e8c105-fca5-47cb-9ae9-1f7a836ec9bf/export</id>
    <title>15e8c105-fca5-47cb-9ae9-1f7a836ec9bf</title>
    <updated>2026-09-10T18:59:07.806034+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "15e8c105-fca5-47cb-9ae9-1f7a836ec9bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4l2hf72b2y", "content": "CVE-2026-79696 - agent development kit (adk) for python\nThe Google Cloud Agent Development Kit for Python (versions 2.0.0\u20112.6.0) can be fooled into executing any code an attacker sends when the testing tool\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#googlecloud #CVE #infosec", "creation_timestamp": "2026-09-09T22:20:06.238731Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/15e8c105-fca5-47cb-9ae9-1f7a836ec9bf/export"/>
    <published>2026-09-09T22:20:06.238731+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4be88aa9-9664-4a85-a67c-e8edd3125dc8/export</id>
    <title>4be88aa9-9664-4a85-a67c-e8edd3125dc8</title>
    <updated>2026-09-10T18:59:07.808118+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4be88aa9-9664-4a85-a67c-e8edd3125dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ht2klsldv2ehl", "content": "CVE-2026-79696 - Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist\nCVE ID : CVE-2026-79696\n \n Published : Sept. 9, 2026, 9:17 a.m. | 16\u00a0minutes ago\n \n Description : A Code Injection vulnerability in adk web in Google Cloud Agent Developmen...", "creation_timestamp": "2026-09-09T11:10:50.401638Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4be88aa9-9664-4a85-a67c-e8edd3125dc8/export"/>
    <published>2026-09-09T11:10:50.401638+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5ed5d482-a57e-4c19-b9ce-c8f04b234a25/export</id>
    <title>5ed5d482-a57e-4c19-b9ce-c8f04b234a25</title>
    <updated>2026-09-10T18:59:07.808276+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5ed5d482-a57e-4c19-b9ce-c8f04b234a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79696", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117240615810716517", "content": "CVE-2026-79696: Critical code injection (CVSS 10.0) in Google Cloud ADK for Python (2.0.0 \u2013 2.6.0). Unauth RCE possible via crafted session replay in pytest-enabled Cloud Run &amp;amp; GKE. Patch or update now. https://radar.offseq.com/threat/cve-2026-79696-cwe-184-incomplete-list-of-disallowed-inputs-in-google-cloud-agent-development-kit-adk-3b96714136b44311 #OffSeq #CVE #CloudSecurity #Python", "creation_timestamp": "2026-09-09T10:30:49.857371Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5ed5d482-a57e-4c19-b9ce-c8f04b234a25/export"/>
    <published>2026-09-09T10:30:49.857371+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fa6bece6-01f5-40bf-b1ab-450a4b0af9d1/export</id>
    <title>fa6bece6-01f5-40bf-b1ab-450a4b0af9d1</title>
    <updated>2026-09-10T18:59:07.808397+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fa6bece6-01f5-40bf-b1ab-450a4b0af9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79696", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv3dfjwmtp24", "content": "Critical RCE in Google Cloud ADK for Python (v2.0.0 \u2013 2.6.0) \u26a0\ufe0f. Unauth attackers can exploit via crafted test session replay. Patch or update urgently. Google manages remediation for cloud-hosted services. https://radar.offseq.com/threat/cve-2026-79696-cwe-184-incomplete-list-of-disallowed-input...", "creation_timestamp": "2026-09-09T10:30:28.735510Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fa6bece6-01f5-40bf-b1ab-450a4b0af9d1/export"/>
    <published>2026-09-09T10:30:28.735510+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/22251afd-ab59-4375-bbdb-fb57654a66c4/export</id>
    <title>22251afd-ab59-4375-bbdb-fb57654a66c4</title>
    <updated>2026-09-10T18:59:07.808522+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "22251afd-ab59-4375-bbdb-fb57654a66c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv3c4gmsk525", "content": "\ud83d\udea8 CVE-2026-79696 \u2014 CVSS 10 CRITICAL\n\nA Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79696\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T10:07:29.152073Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/22251afd-ab59-4375-bbdb-fb57654a66c4/export"/>
    <published>2026-09-09T10:07:29.152073+00:00</published>
  </entry>
</feed>
