<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-01T02:50:43.760185+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ef03e747-ce08-435c-8bff-ec55207e2da6/export</id>
    <title>ef03e747-ce08-435c-8bff-ec55207e2da6</title>
    <updated>2026-08-01T02:50:43.782715+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ef03e747-ce08-435c-8bff-ec55207e2da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14540", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwygq2jw724", "content": "CVE-2026-14540\nA security issue exists in older versions of Google MCP Toolbox, which can be exploited by an attacker to make unauthorized requests to internal or external sites. This could potentially allow an attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:48:03.338082Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ef03e747-ce08-435c-8bff-ec55207e2da6/export"/>
    <published>2026-07-31T12:48:03.338082+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/78ac5b85-40a4-401b-ac55-5ad9fb9df225/export</id>
    <title>78ac5b85-40a4-401b-ac55-5ad9fb9df225</title>
    <updated>2026-08-01T02:50:43.784269+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "78ac5b85-40a4-401b-ac55-5ad9fb9df225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14540", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eimuhra2zjnpt", "content": "CVE-2026-14540 - Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox\nCVE ID : CVE-2026-14540\n \n Published : July 31, 2026, 2:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP...", "creation_timestamp": "2026-07-31T03:54:17.489460Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/78ac5b85-40a4-401b-ac55-5ad9fb9df225/export"/>
    <published>2026-07-31T03:54:17.489460+00:00</published>
  </entry>
</feed>
