<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-11T15:51:56.132365+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2898a833-b03f-4ba3-b98a-1210a4d33876/export</id>
    <title>2898a833-b03f-4ba3-b98a-1210a4d33876</title>
    <updated>2026-09-11T15:51:56.153800+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2898a833-b03f-4ba3-b98a-1210a4d33876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117229450709376695", "content": "CVE-2026-86190 - Critical Broken Access Control in WWBN AVideo allows admin session hijacking &amp;amp; data theft. CVSS 9.1. Restrict endpoints now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-86190/", "creation_timestamp": "2026-09-07T11:11:10.197394Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2898a833-b03f-4ba3-b98a-1210a4d33876/export"/>
    <published>2026-09-07T11:11:10.197394+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b2b3fe2-5481-4495-b60e-00d1272f8f22/export</id>
    <title>8b2b3fe2-5481-4495-b60e-00d1272f8f22</title>
    <updated>2026-09-11T15:51:56.155383+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b2b3fe2-5481-4495-b60e-00d1272f8f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muweq6f2k727", "content": "CVE-2026-86190 - Critical Broken Access Control in WWBN AVideo allows admin session hijacking &amp;amp; data theft. CVSS 9.1. Restrict endpoints now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-86190/", "creation_timestamp": "2026-09-07T11:11:00.521171Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b2b3fe2-5481-4495-b60e-00d1272f8f22/export"/>
    <published>2026-09-07T11:11:00.521171+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/75ce8e82-09cf-4561-be3c-ace4f486f84d/export</id>
    <title>75ce8e82-09cf-4561-be3c-ace4f486f84d</title>
    <updated>2026-09-11T15:51:56.155527+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "75ce8e82-09cf-4561-be3c-ace4f486f84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murxdbp3xp2z", "content": "\ud83d\udd34 CVE-2026-86190 - Critical (9.1)\n\nWWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that retur...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86190/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T17:00:30.850270Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/75ce8e82-09cf-4561-be3c-ace4f486f84d/export"/>
    <published>2026-09-05T17:00:30.850270+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0e76f1d3-c877-4fee-93af-54b23ddc1969/export</id>
    <title>0e76f1d3-c877-4fee-93af-54b23ddc1969</title>
    <updated>2026-09-11T15:51:56.155646+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0e76f1d3-c877-4fee-93af-54b23ddc1969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3murnonfhgc2n", "content": "\ud83d\udea8 CVE-2026-86190 \u2014 CVSS 9.3 CRITICAL\n\nWWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complet...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86190\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T14:07:53.856417Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0e76f1d3-c877-4fee-93af-54b23ddc1969/export"/>
    <published>2026-09-05T14:07:53.856417+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9d57761f-44ba-46a3-af44-934dd75cfdd8/export</id>
    <title>9d57761f-44ba-46a3-af44-934dd75cfdd8</title>
    <updated>2026-09-11T15:51:56.155750+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9d57761f-44ba-46a3-af44-934dd75cfdd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3murll2oedb2y", "content": "CVE-2026-86190\nThe AVideo platform\u2019s videoViewsInfo feature can be called without logging in and will return full user records, including password hashes, password\u2011reset tokens, and live\u2011session identifiers. This lets an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-05T13:30:06.103100Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9d57761f-44ba-46a3-af44-934dd75cfdd8/export"/>
    <published>2026-09-05T13:30:06.103100+00:00</published>
  </entry>
</feed>
