<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-04T02:00:52.606896+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7b9d63a6-f89f-4ea4-9985-fab0c1ec31e6/export</id>
    <title>7b9d63a6-f89f-4ea4-9985-fab0c1ec31e6</title>
    <updated>2026-06-04T02:00:52.987373+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7b9d63a6-f89f-4ea4-9985-fab0c1ec31e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmthwqhajr2p", "content": "CVE-2026-8054 - Unauthenticated SQL Injection in dotCMS Publish Audit API\nCVE ID : CVE-2026-8054\n \n Published : 27 May 2026, 9:16 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish ...", "creation_timestamp": "2026-05-27T12:08:49.629086Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7b9d63a6-f89f-4ea4-9985-fab0c1ec31e6/export"/>
    <published>2026-05-27T12:08:49.629086+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8be23085-2388-4152-98e1-1d0a7aae5d7a/export</id>
    <title>8be23085-2388-4152-98e1-1d0a7aae5d7a</title>
    <updated>2026-06-04T02:00:52.987287+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8be23085-2388-4152-98e1-1d0a7aae5d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8054", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmtx4dglos2m", "content": "\ud83d\udea8 Critical SQL injection flaw in dotCMS Core: CVE-2026-8054 (CVSS 10.0)\n\nUnauthenticated attackers can read, modify, or destroy database content through exposed Publish Audit API endpoints.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#CVE #dotCMS #CyberSecurity", "creation_timestamp": "2026-05-27T16:40:57.876650Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8be23085-2388-4152-98e1-1d0a7aae5d7a/export"/>
    <published>2026-05-27T16:40:57.876650+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7558909b-0bf3-4316-8fde-0566224fb15a/export</id>
    <title>7558909b-0bf3-4316-8fde-0566224fb15a</title>
    <updated>2026-06-04T02:00:52.987175+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7558909b-0bf3-4316-8fde-0566224fb15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8054", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmtx4ikisk2m", "content": "\ud83d\udea8 Critical SQL injection flaw in dotCMS Core: CVE-2026-8054 (CVSS 10.0)\n\nUnauthenticated attackers can read, modify, or destroy database content through exposed Publish Audit API endpoints.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#CVE #dotCMS #CyberSecurity", "creation_timestamp": "2026-05-27T16:40:58.408730Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7558909b-0bf3-4316-8fde-0566224fb15a/export"/>
    <published>2026-05-27T16:40:58.408730+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a0badd72-267b-467d-a72e-9c0b940050d2/export</id>
    <title>a0badd72-267b-467d-a72e-9c0b940050d2</title>
    <updated>2026-06-04T02:00:52.984911+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a0badd72-267b-467d-a72e-9c0b940050d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8054", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmtx4n6tus2m", "content": "\ud83d\udea8 Critical SQL injection flaw in dotCMS Core: CVE-2026-8054 (CVSS 10.0)\n\nUnauthenticated attackers can read, modify, or destroy database content through exposed Publish Audit API endpoints.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#CVE #dotCMS #CyberSecurity", "creation_timestamp": "2026-05-27T16:40:58.920632Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a0badd72-267b-467d-a72e-9c0b940050d2/export"/>
    <published>2026-05-27T16:40:58.920632+00:00</published>
  </entry>
</feed>
