<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-16T10:11:48.064472+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0d2e32e1-f7fc-4294-8e2d-26088f138704/export</id>
    <title>0d2e32e1-f7fc-4294-8e2d-26088f138704</title>
    <updated>2026-09-16T10:11:48.093874+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0d2e32e1-f7fc-4294-8e2d-26088f138704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85663", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupe274p6g22", "content": "CVE-2026-85663 - aim\nThe Aim 3.29.1 tracking server does not check who is sending requests, so anyone on the internet can tell it to create accounts, access experiment data, or erase run records. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aim #aimhubio #CVE #infosec", "creation_timestamp": "2026-09-04T16:10:04.928446Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0d2e32e1-f7fc-4294-8e2d-26088f138704/export"/>
    <published>2026-09-04T16:10:04.928446+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9cc93de-a249-46e0-890b-cffa8868cb1f/export</id>
    <title>d9cc93de-a249-46e0-890b-cffa8868cb1f</title>
    <updated>2026-09-16T10:11:48.096516+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9cc93de-a249-46e0-890b-cffa8868cb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85663", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdwlh55522", "content": "\ud83d\udea8 CVE-2026-85663 \u2014 CVSS 9.3 CRITICAL\n\nAim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through g...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85663\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:03.394987Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9cc93de-a249-46e0-890b-cffa8868cb1f/export"/>
    <published>2026-09-04T16:08:03.394987+00:00</published>
  </entry>
</feed>
