<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-07T17:11:39.291479+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f9aeaf65-3bfa-419a-ba6d-48944b31c2c5/export</id>
    <title>f9aeaf65-3bfa-419a-ba6d-48944b31c2c5</title>
    <updated>2026-10-07T17:11:39.321070+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f9aeaf65-3bfa-419a-ba6d-48944b31c2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbi2gfzz52n", "content": "CVE-2026-82531 - smarty\nVersions of Smarty before 4.5.8 and 5.8.5 allow specially crafted templates to insert malicious code into the cached PHP file. This can let an attacker run any code on your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#smarty #debian #Debian12 #CVE #infosec", "creation_timestamp": "2026-10-07T08:00:05.918051Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f9aeaf65-3bfa-419a-ba6d-48944b31c2c5/export"/>
    <published>2026-10-07T08:00:05.918051+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bfb83f50-2308-4d59-acb4-212b0bbf526e/export</id>
    <title>bfb83f50-2308-4d59-acb4-212b0bbf526e</title>
    <updated>2026-10-07T17:11:39.323414+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bfb83f50-2308-4d59-acb4-212b0bbf526e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx7m6bml3d2l", "content": "\ud83d\udea8 CVE-2026-82531 \u2014 CVSS 9.2 CRITICAL\n\nSmarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocach...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82531\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T14:08:30.598464Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bfb83f50-2308-4d59-acb4-212b0bbf526e/export"/>
    <published>2026-10-06T14:08:30.598464+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/688a67f0-2a3b-4f4e-910c-3f5cb68b6484/export</id>
    <title>688a67f0-2a3b-4f4e-910c-3f5cb68b6484</title>
    <updated>2026-10-07T17:11:39.323690+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "688a67f0-2a3b-4f4e-910c-3f5cb68b6484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82531", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx7k2z3kzw2e", "content": "CRITICAL code injection in smarty-php Smarty (CVE-2026-82531) lets attackers run PHP code remotely. Update to 4.5.8/5.8.5 now to stay protected. https://radar.offseq.com/threat/cve-2026-82531-improper-control-of-generation-of-code-code-injection-in-smarty-php-smarty-eb57bcca29bb7350 #OffSeq #CVE ...", "creation_timestamp": "2026-10-06T13:30:54.605668Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/688a67f0-2a3b-4f4e-910c-3f5cb68b6484/export"/>
    <published>2026-10-06T13:30:54.605668+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3dc5cade-7cc3-4b49-a2f1-c6c7555cea5c/export</id>
    <title>3dc5cade-7cc3-4b49-a2f1-c6c7555cea5c</title>
    <updated>2026-10-07T17:11:39.323914+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3dc5cade-7cc3-4b49-a2f1-c6c7555cea5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82531", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mx7ijsphmu27", "content": "CVE-2026-82531: Smarty, the PHP template engine by smarty-php, has a code injection flaw in extends: template inheritance that allows arbitrary PHP execution. Fixed in versions 4.5.8 and 5.8.5. A proof-of-concept is published in the vendor advisory.", "creation_timestamp": "2026-10-06T13:03:22.631961Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3dc5cade-7cc3-4b49-a2f1-c6c7555cea5c/export"/>
    <published>2026-10-06T13:03:22.631961+00:00</published>
  </entry>
</feed>
