<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T06:46:51.665684+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5b554093-ef21-4c06-b4b3-27dacb85a44b/export</id>
    <title>5b554093-ef21-4c06-b4b3-27dacb85a44b</title>
    <updated>2026-09-17T06:46:51.686192+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5b554093-ef21-4c06-b4b3-27dacb85a44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19646", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv7rye6rx72d", "content": "Daily IT Security Digest \u2014 2026-09-11\nCVE-2026-19646 (CVSS 9.1) affects IBM Common Licensing and ART 9.0.x via improper Host header validation enabling remote redirection. Organizations should restrict access and monitor for abuse indicators until patches are available.\n\nSources: Mastodon @offseq", "creation_timestamp": "2026-09-11T05:02:11.328937Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5b554093-ef21-4c06-b4b3-27dacb85a44b/export"/>
    <published>2026-09-11T05:02:11.328937+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d6f66d89-9d1d-4091-94c0-525f4443b722/export</id>
    <title>d6f66d89-9d1d-4091-94c0-525f4443b722</title>
    <updated>2026-09-17T06:46:51.688466+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d6f66d89-9d1d-4091-94c0-525f4443b722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19646", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7bjo7ut52j", "content": "\ud83d\udea8 CVE-2026-19646 \u2014 CVSS 9.1 CRITICAL\n\nIBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19646\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T00:07:38.627680Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d6f66d89-9d1d-4091-94c0-525f4443b722/export"/>
    <published>2026-09-11T00:07:38.627680+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0269ed36-67b9-4f2a-ac34-a9e0abe45208/export</id>
    <title>0269ed36-67b9-4f2a-ac34-a9e0abe45208</title>
    <updated>2026-09-17T06:46:51.688670+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0269ed36-67b9-4f2a-ac34-a9e0abe45208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19646", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv7b55fkgf2a", "content": "IBM Common Licensing (9.0 \u2013 9.0.0.2 &amp;amp; ART 9.0) faces a critical CVE-2026-19646 flaw: remote attackers can redirect users via Host header abuse. Patch status unconfirmed \u2014 check IBM advisories for updates. https://radar.offseq.com/threat/cve-2026-19646-cwe-1149-sei-cert-oracle-secure-coding-standa...", "creation_timestamp": "2026-09-11T00:00:38.946748Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0269ed36-67b9-4f2a-ac34-a9e0abe45208/export"/>
    <published>2026-09-11T00:00:38.946748+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/95be51cb-5c30-4523-bcc5-5cdc86c84360/export</id>
    <title>95be51cb-5c30-4523-bcc5-5cdc86c84360</title>
    <updated>2026-09-17T06:46:51.688799+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "95be51cb-5c30-4523-bcc5-5cdc86c84360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19646", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117249463814841150", "content": "CVE-2026-19646 (CRITICAL, CVSS 9.1) affects IBM Common Licensing 9.0.x &amp;amp; ART 9.0. Improper Host header validation enables remote redirection to attacker domains. No patch yet \u2014 monitor IBM guidance. https://radar.offseq.com/threat/cve-2026-19646-cwe-1149-sei-cert-oracle-secure-coding-standard-for-java-guidelines-15-platform-9a01f253f72c9218 #OffSeq #Vuln #IBM #InfoSec", "creation_timestamp": "2026-09-11T00:00:37.215348Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/95be51cb-5c30-4523-bcc5-5cdc86c84360/export"/>
    <published>2026-09-11T00:00:37.215348+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2c1d55cc-2003-4f58-af97-bb58d3cad28c/export</id>
    <title>2c1d55cc-2003-4f58-af97-bb58d3cad28c</title>
    <updated>2026-09-17T06:46:51.688908+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2c1d55cc-2003-4f58-af97-bb58d3cad28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19646", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv76umzkxj2j", "content": "CVE-2026-19646 - common licensing\nThe IBM License Key Server Administration and Reporting Tool and its agent can be fooled into sending users to a web address of an attacker\u2019s choosing because they don\u2019t\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#commonlicensing #ibm #CVE #infosec", "creation_timestamp": "2026-09-10T23:20:05.462745Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2c1d55cc-2003-4f58-af97-bb58d3cad28c/export"/>
    <published>2026-09-10T23:20:05.462745+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/56620289-36bf-46f2-bfcd-508eac37d237/export</id>
    <title>56620289-36bf-46f2-bfcd-508eac37d237</title>
    <updated>2026-09-17T06:46:51.689030+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "56620289-36bf-46f2-bfcd-508eac37d237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4o6wl3fmdzqop", "content": "CVE-2026-19646 - Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent\nCVE ID : CVE-2026-19646\n \n Published : Sept. 10, 2026, 10:02 p.m. | 27\u00a0minutes ago\n \n Description : IBM Common Licensing Agent 9.0, Agent ...", "creation_timestamp": "2026-09-10T23:00:56.183227Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/56620289-36bf-46f2-bfcd-508eac37d237/export"/>
    <published>2026-09-10T23:00:56.183227+00:00</published>
  </entry>
</feed>
