<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-28T12:33:55.608644+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/321794df-6d6a-4ea8-9b34-2083fa85b8df/export</id>
    <title>321794df-6d6a-4ea8-9b34-2083fa85b8df</title>
    <updated>2026-08-28T12:33:55.626719+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "321794df-6d6a-4ea8-9b34-2083fa85b8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79774", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu27voc4kp2p", "content": "CVE-2026-79774 - wn-system-module\nIf a user can edit pages, layouts or partials in Winter CMS, they can break out of the safety checks and run any database or server commands. This could let them read or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#winter #composer #CVE #infosec", "creation_timestamp": "2026-08-27T06:30:04.668592Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/321794df-6d6a-4ea8-9b34-2083fa85b8df/export"/>
    <published>2026-08-27T06:30:04.668592+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/52095f7c-331d-474e-8b33-e159894fd5a4/export</id>
    <title>52095f7c-331d-474e-8b33-e159894fd5a4</title>
    <updated>2026-08-28T12:33:55.629870+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "52095f7c-331d-474e-8b33-e159894fd5a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79774", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtwfzdv26c2y", "content": "\ud83d\udea8 CVE-2026-79774 \u2014 CVSS 9.3 CRITICAL\n\nWinter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in Syst...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79774\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T18:08:50.044666Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/52095f7c-331d-474e-8b33-e159894fd5a4/export"/>
    <published>2026-08-25T18:08:50.044666+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b65fedb-1a30-49f7-82e1-2412aec5e429/export</id>
    <title>8b65fedb-1a30-49f7-82e1-2412aec5e429</title>
    <updated>2026-08-28T12:33:55.630020+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b65fedb-1a30-49f7-82e1-2412aec5e429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79774", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwc7jkmnh26", "content": "\ud83d\udfe0 CVE-2026-79774 - High (8.4)\n\nWinter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerabili...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-79774/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-25T17:00:43.468709Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b65fedb-1a30-49f7-82e1-2412aec5e429/export"/>
    <published>2026-08-25T17:00:43.468709+00:00</published>
  </entry>
</feed>
