<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-28T12:56:53.464672+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/490f845f-c482-46f8-b671-2ee8b544852e/export</id>
    <title>490f845f-c482-46f8-b671-2ee8b544852e</title>
    <updated>2026-08-28T12:56:53.490406+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "490f845f-c482-46f8-b671-2ee8b544852e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80202", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2dazxkse2j", "content": "CVE-2026-80202 - kimai\nKimai timesheets can be read, deleted, or modified by team leads from other teams. This can lead to unauthorized changes or deletion of timesheet data, affecting team and project\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kimai #composer #CVE #infosec", "creation_timestamp": "2026-08-27T07:30:05.776250Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/490f845f-c482-46f8-b671-2ee8b544852e/export"/>
    <published>2026-08-27T07:30:05.776250+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8468bedc-6b4b-41f7-adf0-0157143a060a/export</id>
    <title>8468bedc-6b4b-41f7-adf0-0157143a060a</title>
    <updated>2026-08-28T12:56:53.494178+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8468bedc-6b4b-41f7-adf0-0157143a060a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jk3gkazuem6mn", "content": "CVE-2026-80202 - Kimai before 2.56.0 Authorization Bypass via TimesheetVoter\nCVE ID : CVE-2026-80202\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(), whi...", "creation_timestamp": "2026-08-26T00:32:57.574024Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8468bedc-6b4b-41f7-adf0-0157143a060a/export"/>
    <published>2026-08-26T00:32:57.574024+00:00</published>
  </entry>
</feed>
