<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-04T06:54:39.077721+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/508cb2f2-596f-44da-89b7-6ab32c2b059d/export</id>
    <title>508cb2f2-596f-44da-89b7-6ab32c2b059d</title>
    <updated>2026-09-04T06:54:39.112832+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "508cb2f2-596f-44da-89b7-6ab32c2b059d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muk2q5qiyj2g", "content": "CVE-2026-84372 - predis\nThe PHP library Predis, used to talk to Redis databases, mishandles batched commands in certain versions. An attacker who can supply specially crafted data could make the client execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#predis #CVE #infosec", "creation_timestamp": "2026-09-02T13:40:05.268788Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/508cb2f2-596f-44da-89b7-6ab32c2b059d/export"/>
    <published>2026-09-02T13:40:05.268788+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ad044c51-f7d1-4a00-be8b-815fb8396c7e/export</id>
    <title>ad044c51-f7d1-4a00-be8b-815fb8396c7e</title>
    <updated>2026-09-04T06:54:39.114609+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ad044c51-f7d1-4a00-be8b-815fb8396c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muinddr47n2o", "content": "\ud83d\udea8 CVE-2026-84372 \u2014 CVSS 9.8 CRITICAL\n\nPredis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84372\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T00:07:37.616575Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ad044c51-f7d1-4a00-be8b-815fb8396c7e/export"/>
    <published>2026-09-02T00:07:37.616575+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/56442386-1f57-43d8-a543-13c838995e61/export</id>
    <title>56442386-1f57-43d8-a543-13c838995e61</title>
    <updated>2026-09-04T06:54:39.114749+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "56442386-1f57-43d8-a543-13c838995e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muijmrq6t52e", "content": "\ud83d\udd34 CVE-2026-84372 - Critical (9.8)\n\nPredis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84372/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T23:01:19.706013Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/56442386-1f57-43d8-a543-13c838995e61/export"/>
    <published>2026-09-01T23:01:19.706013+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2887f836-f29c-4a8e-a0c5-ea446fd4bd07/export</id>
    <title>2887f836-f29c-4a8e-a0c5-ea446fd4bd07</title>
    <updated>2026-09-04T06:54:39.114858+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2887f836-f29c-4a8e-a0c5-ea446fd4bd07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3muifb2ywsm2v", "content": "\u26a0\ufe0f PATCH NOW\n\nPredis, a widely used PHP client for Redis, has a critical flaw (CVSS 9.8, CVE-2026-84372): attacker-controlled cache keys can smuggle extra Redis commands.\n\nHits versions 3.0 to 3.2 on cluster and replication setups.\n\nFix: upgrade to Predis 3.3.0.", "creation_timestamp": "2026-09-01T21:43:11.602921Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2887f836-f29c-4a8e-a0c5-ea446fd4bd07/export"/>
    <published>2026-09-01T21:43:11.602921+00:00</published>
  </entry>
</feed>
