<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-03T20:31:41.810274+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/861a701e-2cfd-49d0-9e7f-4b3fa76b790e/export</id>
    <title>861a701e-2cfd-49d0-9e7f-4b3fa76b790e</title>
    <updated>2026-08-03T20:31:41.837125+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "861a701e-2cfd-49d0-9e7f-4b3fa76b790e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18363", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrufcr4hqa24", "content": "osTicket CRITICAL vuln (CVE-2026-18363): Weak password reset logic lets attackers reuse valid reset tokens. Affects versions &amp;lt;1.17.8 &amp;amp; &amp;lt;1.18.4. Upgrade ASAP when patch is released; monitor reset activity. https://radar.offseq.com/threat/cve-2026-18363-cwe-640-weak-password-recovery-mechanism-for-...", "creation_timestamp": "2026-07-30T12:00:30.475999Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/861a701e-2cfd-49d0-9e7f-4b3fa76b790e/export"/>
    <published>2026-07-30T12:00:30.475999+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/edc9b60d-c1fc-4dfc-a61d-bda1c31f1910/export</id>
    <title>edc9b60d-c1fc-4dfc-a61d-bda1c31f1910</title>
    <updated>2026-08-03T20:31:41.839266+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "edc9b60d-c1fc-4dfc-a61d-bda1c31f1910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18363", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrudbnnaaf2y", "content": "CVE-2026-18363 - osticket\nA security flaw in osTicket's password reset process allows attackers to reuse valid password reset tokens, potentially taking control of an account. This affects osTicket\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#osticket #enhancesoft #CVE #infosec", "creation_timestamp": "2026-07-30T11:24:04.859319Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/edc9b60d-c1fc-4dfc-a61d-bda1c31f1910/export"/>
    <published>2026-07-30T11:24:04.859319+00:00</published>
  </entry>
</feed>
