<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T03:35:31.582918+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ce482070-4ab0-414b-998a-6625e0c64b82/export</id>
    <title>ce482070-4ab0-414b-998a-6625e0c64b82</title>
    <updated>2026-09-14T03:35:31.610920+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ce482070-4ab0-414b-998a-6625e0c64b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85702", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117240181716666474", "content": "CVE-2026-85702: Missing auth flaw in Freegpt Webui backend (\u2264098db3d) lets remote attackers abuse the Conversation API. CVSS 7.3. Exploit is public and unpatched. If you run this, disable remote access or roll back now. https://www.valtersit.com/cve/CVE-2026-85702/ #CVE #infosec", "creation_timestamp": "2026-09-09T08:40:15.036591Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ce482070-4ab0-414b-998a-6625e0c64b82/export"/>
    <published>2026-09-09T08:40:15.036591+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2bc2cdcb-ad0a-4924-8cde-0b4c1d14490d/export</id>
    <title>2bc2cdcb-ad0a-4924-8cde-0b4c1d14490d</title>
    <updated>2026-09-14T03:35:31.613183+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2bc2cdcb-ad0a-4924-8cde-0b4c1d14490d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85702", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv35a2rqrj2g", "content": "CVE-2026-85702: Missing auth flaw in Freegpt Webui backend (\u2264098db3d) lets remote attackers abuse the Conversation API. CVSS 7.3. Exploit is public and unpatched. If you run this, disable remote access or roll back now. https://www.valtersit.com/cve/CVE-2026-85702/ #CVE #infosec ", "creation_timestamp": "2026-09-09T08:40:02.933141Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2bc2cdcb-ad0a-4924-8cde-0b4c1d14490d/export"/>
    <published>2026-09-09T08:40:02.933141+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/65ab8839-45c9-4e73-8269-d168b0f64610/export</id>
    <title>65ab8839-45c9-4e73-8269-d168b0f64610</title>
    <updated>2026-09-14T03:35:31.613404+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "65ab8839-45c9-4e73-8269-d168b0f64610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j74zbtuplef5k", "content": "CVE-2026-85702 - ramon-victor freegpt-webui Backend Conversation API backend.py _conversation missing authentication\nCVE ID : CVE-2026-85702\n \n Published : Sept. 4, 2026, 8:30 p.m. | 52\u00a0minutes ago\n \n Description : A security vulnerability has been detected in ramon-victor fre...", "creation_timestamp": "2026-09-04T21:24:55.150992Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/65ab8839-45c9-4e73-8269-d168b0f64610/export"/>
    <published>2026-09-04T21:24:55.150992+00:00</published>
  </entry>
</feed>
