<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-05T02:37:06.137986+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c82121d5-1e7b-4df8-b3ee-745e34ccd6ff/export</id>
    <title>c82121d5-1e7b-4df8-b3ee-745e34ccd6ff</title>
    <updated>2026-09-05T02:37:06.158315+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c82121d5-1e7b-4df8-b3ee-745e34ccd6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mueqv7t6m22f", "content": "Nodemailer \u306b SMTP\u30b3\u30de\u30f3\u30c9\u6ce8\u5165\u306e\u8106\u5f31\u6027\uff08CVE-2026-82854\uff09\u3002\n\n\u8a55\u4fa1\u306f\u958b\u767a\u5143\u304c CVSS 2.3 LOW\u3001NVD\u63b2\u8f09\u306e\u5024\u306f 9.8 CRITICAL \u3068\u5272\u308c\u3066\u3044\u307e\u3059\u3002\u65e2\u5b9a\u306eenvelope\u306b\u306f size \u304c\u542b\u307e\u308c\u306a\u3044\u305f\u3081\u3001\u591a\u304f\u306e\u30a2\u30d7\u30ea\u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: sendMail \u306b size \u4ed8\u304d\u306e envelope \u3092\u6e21\u3057\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u30018.0.4\u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\n\nforsmile.jp/articles/nod...", "creation_timestamp": "2026-08-31T11:00:39.108027Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c82121d5-1e7b-4df8-b3ee-745e34ccd6ff/export"/>
    <published>2026-08-31T11:00:39.108027+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7847242f-f12a-495a-b867-ed3997d7b0f7/export</id>
    <title>7847242f-f12a-495a-b867-ed3997d7b0f7</title>
    <updated>2026-09-05T02:37:06.160684+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7847242f-f12a-495a-b867-ed3997d7b0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenvxe2542b", "content": "\ud83d\udea8 CVE-2026-82854 \u2014 CVSS 9.3 CRITICAL\n\nNodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size param...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82854\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:22.704574Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7847242f-f12a-495a-b867-ed3997d7b0f7/export"/>
    <published>2026-08-31T10:07:22.704574+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b052afc6-abb0-4c29-bed7-6924c0ff1a9b/export</id>
    <title>b052afc6-abb0-4c29-bed7-6924c0ff1a9b</title>
    <updated>2026-09-05T02:37:06.160786+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b052afc6-abb0-4c29-bed7-6924c0ff1a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muemf4tokp2y", "content": "CVE-2026-82854 - nodemailer\nIf your system uses Nodemailer versions older than 8.0.4 and lets users influence the email envelope size, an attacker can embed line\u2011break characters that cause extra mail commands to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nodemailer #CVE #infosec", "creation_timestamp": "2026-08-31T09:40:04.187809Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b052afc6-abb0-4c29-bed7-6924c0ff1a9b/export"/>
    <published>2026-08-31T09:40:04.187809+00:00</published>
  </entry>
</feed>
