<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-03T14:04:24.048492+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/611a27d8-a18c-4a8d-8b3f-aca977510db8/export</id>
    <title>611a27d8-a18c-4a8d-8b3f-aca977510db8</title>
    <updated>2026-09-03T14:04:24.062816+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "611a27d8-a18c-4a8d-8b3f-aca977510db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7G4W-CG88-2CQ2", "type": "exploited", "source": "Telegram/CzREW4zYQrdpDU3f06_fKc9y00y9UGbjYDqP2BwY_P4brA", "content": "", "creation_timestamp": "2026-08-30T00:00:55.171037Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/611a27d8-a18c-4a8d-8b3f-aca977510db8/export"/>
    <published>2026-08-30T00:00:55.171037+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/502b5154-ea88-44ad-a6ee-f557411357d5/export</id>
    <title>502b5154-ea88-44ad-a6ee-f557411357d5</title>
    <updated>2026-09-03T14:04:24.066653+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "502b5154-ea88-44ad-a6ee-f557411357d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7g4w-cg88-2cq2", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117179605144571410", "content": "This was posted yesterday regarding a critical vulnerability:\n\"We were unable to reproduce the vulnerability on 18-decimal networks and incorrectly concluded that it affected only non-18-decimal networks.\" \nCosmos EVM GHSA-7g4w-cg88-2cq2 Post-Mortem https://github.com/cosmos/security/blob/main/communications/cosmos_evm_GHSA-7g4w-cg88-2cq2_post_mortem.md\nMore:\nThe Hacker News: Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable https://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html @thehackernews #infosec #vulnerability", "creation_timestamp": "2026-08-29T15:54:38.057249Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/502b5154-ea88-44ad-a6ee-f557411357d5/export"/>
    <published>2026-08-29T15:54:38.057249+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/75fdd7be-dc0f-4934-9361-0694da82418a/export</id>
    <title>75fdd7be-dc0f-4934-9361-0694da82418a</title>
    <updated>2026-09-03T14:04:24.066777+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "75fdd7be-dc0f-4934-9361-0694da82418a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7g4w-cg88-2cq2", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu7xrryqyf2v", "content": "\ud83e\udd16 Critical flaw in the Cosmos EVM module (GHSA-7g4w-cg88-2cq2) exploited in the wild: funds drained from 6 blockchains, Aug 20-25. Fix in v0.6.2/v0.7.2, upgrade is state-breaking.\n\nhttps://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html", "creation_timestamp": "2026-08-29T13:20:41.464032Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/75fdd7be-dc0f-4934-9361-0694da82418a/export"/>
    <published>2026-08-29T13:20:41.464032+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/721c206f-096d-4012-8f8e-e58c202ee0fd/export</id>
    <title>721c206f-096d-4012-8f8e-e58c202ee0fd</title>
    <updated>2026-09-03T14:04:24.066850+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "721c206f-096d-4012-8f8e-e58c202ee0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7G4W-CG88-2CQ2", "type": "exploited", "source": "Telegram/CzREW4zYQrdpDU3f06_fKc9y00y9UGbjYDqP2BwY_P4brA", "content": "", "creation_timestamp": "2026-08-29T08:00:05.110364Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/721c206f-096d-4012-8f8e-e58c202ee0fd/export"/>
    <published>2026-08-29T08:00:05.110364+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4546ac5c-6c6a-42a6-b6d4-93b29804d0cb/export</id>
    <title>4546ac5c-6c6a-42a6-b6d4-93b29804d0cb</title>
    <updated>2026-09-03T14:04:24.066918+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4546ac5c-6c6a-42a6-b6d4-93b29804d0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7g4w-cg88-2cq2", "type": "seen", "source": "https://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html", "content": "Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026.\n\nThe vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was published without a CVE identifier, a weakness classification, or a CVSS score.\n\nAffected versions are &amp;lt; 0.6.2 and &amp;gt;=", "creation_timestamp": "2026-08-29T01:00:36.093676Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4546ac5c-6c6a-42a6-b6d4-93b29804d0cb/export"/>
    <published>2026-08-29T01:00:36.093676+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/edc5afe0-709b-484f-911d-c22c86b05426/export</id>
    <title>edc5afe0-709b-484f-911d-c22c86b05426</title>
    <updated>2026-09-03T14:04:24.066985+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "edc5afe0-709b-484f-911d-c22c86b05426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7g4w-cg88-2cq2", "type": "seen", "source": "https://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html", "content": "Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026.\n\nThe vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was published without a CVE identifier, a weakness classification, or a CVSS score.\n\nAffected versions are &amp;lt; 0.6.2 and &amp;gt;=", "creation_timestamp": "2026-08-28T22:00:41.389261Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/edc5afe0-709b-484f-911d-c22c86b05426/export"/>
    <published>2026-08-28T22:00:41.389261+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2474e26d-eeaf-42bd-a641-e78ee36fb616/export</id>
    <title>2474e26d-eeaf-42bd-a641-e78ee36fb616</title>
    <updated>2026-09-03T14:04:24.067052+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2474e26d-eeaf-42bd-a641-e78ee36fb616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7g4w-cg88-2cq2", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu6ax42wfx2g", "content": "\ud83e\udd16 Critical balance-handling flaw in the Cosmos EVM module (GHSA-7g4w-cg88-2cq2) exploited in the wild: funds drained from six blockchains. Versions &amp;lt; 0.6.2 affected; no CVE/CVSS yet.\nhttps://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html", "creation_timestamp": "2026-08-28T20:59:24.621341Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2474e26d-eeaf-42bd-a641-e78ee36fb616/export"/>
    <published>2026-08-28T20:59:24.621341+00:00</published>
  </entry>
</feed>
