<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-04T21:18:29.375640+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5e763cfb-59ab-4a5d-9be9-f667480acd43/export</id>
    <title>5e763cfb-59ab-4a5d-9be9-f667480acd43</title>
    <updated>2026-08-04T21:18:29.402882+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5e763cfb-59ab-4a5d-9be9-f667480acd43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18248", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msadmhleyc2o", "content": "CVE-2026-18248\nA bug in the 6.4.0 version of Fastify AWS Lambda allows an attacker to pretend to be someone they're not by manipulating HTTP headers. This could let them access your system without proper authorization. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T06:02:04.724798Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5e763cfb-59ab-4a5d-9be9-f667480acd43/export"/>
    <published>2026-08-04T06:02:04.724798+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/05f7bcdf-3118-4bda-a9af-fb9f41009da2/export</id>
    <title>05f7bcdf-3118-4bda-a9af-fb9f41009da2</title>
    <updated>2026-08-04T21:18:29.405022+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "05f7bcdf-3118-4bda-a9af-fb9f41009da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18248", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-18248", "content": "", "creation_timestamp": "2026-08-03T20:15:09.583887Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/05f7bcdf-3118-4bda-a9af-fb9f41009da2/export"/>
    <published>2026-08-03T20:15:09.583887+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5c4e82db-0f91-464d-88d2-2e1c7fbfc8a4/export</id>
    <title>5c4e82db-0f91-464d-88d2-2e1c7fbfc8a4</title>
    <updated>2026-08-04T21:18:29.406159+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5c4e82db-0f91-464d-88d2-2e1c7fbfc8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18248", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ms7byvyn2b22", "content": "@fastify/aws-lambda 6.4.0\u306b\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306fHTTP\u30d8\u30c3\u30c0\u30fc\u3092\u64cd\u4f5c\u3057\u3066Lambda\u30a4\u30d9\u30f3\u30c8\u3092\u507d\u9020\u3057\u3001\u8a8d\u8a3c\u30fb\u8a8d\u53ef\u3092\u5b8c\u5168\u306b\u30d0\u30a4\u30d1\u30b9\u3057\u3001\u6a29\u9650\u6607\u683c\u304c\u53ef\u80fd\u3002ID\u3084\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306brequ\u2026\nCVE-2026-18248 CVSS 9.1 | CRITICAL", "creation_timestamp": "2026-08-03T20:00:35.069747Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5c4e82db-0f91-464d-88d2-2e1c7fbfc8a4/export"/>
    <published>2026-08-03T20:00:35.069747+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d7eb9a89-44dd-4b59-a749-3314ef56a692/export</id>
    <title>d7eb9a89-44dd-4b59-a749-3314ef56a692</title>
    <updated>2026-08-04T21:18:29.406285+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d7eb9a89-44dd-4b59-a749-3314ef56a692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18248", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms6tyyifgt22", "content": "CVE-2026-18248 - @fastify/aws-lambda\nA vulnerability in version 6.4.0 of Fastify AWS Lambda allows an attacker to fake authentication and access control. This can happen if an application trusts the event data from API\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-03T15:50:05.543708Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d7eb9a89-44dd-4b59-a749-3314ef56a692/export"/>
    <published>2026-08-03T15:50:05.543708+00:00</published>
  </entry>
</feed>
