<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-28T23:26:46.207654+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c9c8b365-a56e-406a-a32a-a92297d545a1/export</id>
    <title>c9c8b365-a56e-406a-a32a-a92297d545a1</title>
    <updated>2026-09-28T23:26:46.234791+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c9c8b365-a56e-406a-a32a-a92297d545a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88003", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwgn6ollck2f", "content": "CVE-2026-88003 - invoiceplane\nIn older versions of InvoicePlane, when an administrator lowers another user's role, the system does not remove the admin rights from the user's current session. This means the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#invoiceplane #CVE #infosec", "creation_timestamp": "2026-09-26T15:50:16.926992Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c9c8b365-a56e-406a-a32a-a92297d545a1/export"/>
    <published>2026-09-26T15:50:16.926992+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/35ea5d6a-342a-4494-8e2b-271436e55076/export</id>
    <title>35ea5d6a-342a-4494-8e2b-271436e55076</title>
    <updated>2026-09-28T23:26:46.237966+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "35ea5d6a-342a-4494-8e2b-271436e55076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7d6rdzag32cmg", "content": "CVE-2026-88003 - InvoicePlane: Failure to Revoke Administrative Privileges After Role Downgrade\nCVE ID : CVE-2026-88003\n \n Published : Sept. 25, 2026, 9:20 p.m. | 48\u00a0minutes ago\n \n Description : InvoicePlane is a self-hosted open source application for managing invoices, clien...", "creation_timestamp": "2026-09-25T22:50:06.923179Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/35ea5d6a-342a-4494-8e2b-271436e55076/export"/>
    <published>2026-09-25T22:50:06.923179+00:00</published>
  </entry>
</feed>
