<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-20T06:33:57.533992+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/70a4fc72-ce60-4682-bb51-4fc2a2ba15e2/export</id>
    <title>70a4fc72-ce60-4682-bb51-4fc2a2ba15e2</title>
    <updated>2026-09-20T06:33:57.558989+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "70a4fc72-ce60-4682-bb51-4fc2a2ba15e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84700", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mujt5zqpoq2k", "content": "\ud83d\udfe0 CVE-2026-84700 - High (8.6)\n\nPikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-84700/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T11:24:41.208342Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/70a4fc72-ce60-4682-bb51-4fc2a2ba15e2/export"/>
    <published>2026-09-02T11:24:41.208342+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1b0319b7-41c1-42c0-b3ce-09c4c593d822/export</id>
    <title>1b0319b7-41c1-42c0-b3ce-09c4c593d822</title>
    <updated>2026-09-20T06:33:57.561356+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1b0319b7-41c1-42c0-b3ce-09c4c593d822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84702", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mujrtx3ggj2c", "content": "\ud83d\udfe0 CVE-2026-84702 - High (7.5)\n\nfacefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attack...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84702/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T11:01:10.040348Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1b0319b7-41c1-42c0-b3ce-09c4c593d822/export"/>
    <published>2026-09-02T11:01:10.040348+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5089d7b2-e5aa-4053-928f-22a9ba135aec/export</id>
    <title>5089d7b2-e5aa-4053-928f-22a9ba135aec</title>
    <updated>2026-09-20T06:33:57.561446+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5089d7b2-e5aa-4053-928f-22a9ba135aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84700", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mujrtqa6qz2g", "content": "\ud83d\udfe0 CVE-2026-84700 - High (8.6)\n\nPikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84700/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T11:01:02.557767Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5089d7b2-e5aa-4053-928f-22a9ba135aec/export"/>
    <published>2026-09-02T11:01:02.557767+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/df04b079-3130-4814-b3cf-d2e4e2bb1ca6/export</id>
    <title>df04b079-3130-4814-b3cf-d2e4e2bb1ca6</title>
    <updated>2026-09-20T06:33:57.561523+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "df04b079-3130-4814-b3cf-d2e4e2bb1ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fpfsezvm32izh", "content": "CVE-2026-84700 - Pika Unauthenticated Replication Access via Internal Protobuf Port\nCVE ID : CVE-2026-84700\n \n Published : Sept. 2, 2026, 1:17 a.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derive...", "creation_timestamp": "2026-09-02T02:48:24.007773Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/df04b079-3130-4814-b3cf-d2e4e2bb1ca6/export"/>
    <published>2026-09-02T02:48:24.007773+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/880a9860-8e14-4217-b4ca-a6417f124dc8/export</id>
    <title>880a9860-8e14-4217-b4ca-a6417f124dc8</title>
    <updated>2026-09-20T06:33:57.561593+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "880a9860-8e14-4217-b4ca-a6417f124dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fytuu43tqw5in", "content": "CVE-2026-84702 - facefusion before 3.7.0 Path Traversal via Job Identifier\nCVE ID : CVE-2026-84702\n \n Published : Sept. 2, 2026, 1:17 a.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attac...", "creation_timestamp": "2026-09-02T02:42:24.251461Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/880a9860-8e14-4217-b4ca-a6417f124dc8/export"/>
    <published>2026-09-02T02:42:24.251461+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/113a465a-fcc6-46f1-8967-6ffda11571ff/export</id>
    <title>113a465a-fcc6-46f1-8967-6ffda11571ff</title>
    <updated>2026-09-20T06:33:57.561654+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "113a465a-fcc6-46f1-8967-6ffda11571ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8470", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgssvwovn2h", "content": "CVE-2026-8470 - langflow oss\nIBM Langflow's encryption keys are generated using a weak method, allowing attackers to decrypt stored API keys and authentication tokens. This puts sensitive user information at\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-08-06T19:50:05.887926Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/113a465a-fcc6-46f1-8967-6ffda11571ff/export"/>
    <published>2026-08-06T19:50:05.887926+00:00</published>
  </entry>
</feed>
