<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-15T20:34:52.881097+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/71776686-dfbf-42a3-9969-45bd5b306179/export</id>
    <title>71776686-dfbf-42a3-9969-45bd5b306179</title>
    <updated>2026-09-15T20:34:52.909887+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "71776686-dfbf-42a3-9969-45bd5b306179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gotlnd722", "content": "\ud83d\udea8 CVE-2026-88860 \u2014 CVSS 9.3 CRITICAL\n\nCapgo fails to clean up channel permission overrides when a user's last organization role binding is delete...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:21.766760Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/71776686-dfbf-42a3-9969-45bd5b306179/export"/>
    <published>2026-09-10T16:07:21.766760+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/10b2d6ef-e557-4aa9-8873-97124b07f94c/export</id>
    <title>10b2d6ef-e557-4aa9-8873-97124b07f94c</title>
    <updated>2026-09-15T20:34:52.913474+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "10b2d6ef-e557-4aa9-8873-97124b07f94c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88860", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6bavqhlm22", "content": "CVE-2026-88860 - capgo.app\nWhen a user\u2019s organization role is removed, Capgo does not delete the extra channel permissions that were granted to them. This means the user can still act on those channels, such\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#capgoapp #capgo #CVE #infosec", "creation_timestamp": "2026-09-10T14:30:04.725400Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/10b2d6ef-e557-4aa9-8873-97124b07f94c/export"/>
    <published>2026-09-10T14:30:04.725400+00:00</published>
  </entry>
</feed>
