<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-24T21:49:30.920814+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/44aba7e9-44d6-4bc5-ba99-7d895acb6b1b/export</id>
    <title>44aba7e9-44d6-4bc5-ba99-7d895acb6b1b</title>
    <updated>2026-09-24T21:49:30.941075+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "44aba7e9-44d6-4bc5-ba99-7d895acb6b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25254", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw46un2hum2y", "content": "\ud83d\udea8 CVE-2026-25254 \u2014 CVSS 9.8 CRITICAL\n\nImproper authorization leads to Remote Code Execution via SocketIO interface.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-25254\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T12:07:18.296734Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/44aba7e9-44d6-4bc5-ba99-7d895acb6b1b/export"/>
    <published>2026-09-22T12:07:18.296734+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/de271d22-d5fc-4f1b-a26c-d0f5d1abd938/export</id>
    <title>de271d22-d5fc-4f1b-a26c-d0f5d1abd938</title>
    <updated>2026-09-24T21:49:30.943331+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "de271d22-d5fc-4f1b-a26c-d0f5d1abd938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw42kngzs72n", "content": "CVE-2026-25254 - snapdragon\nThe Snapdragon Software Center from Qualcomm can be tricked into running malicious code through its network communication feature. This could let an attacker take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#snapdragon #qualcomm #CVE #infosec", "creation_timestamp": "2026-09-22T10:50:07.346812Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/de271d22-d5fc-4f1b-a26c-d0f5d1abd938/export"/>
    <published>2026-09-22T10:50:07.346812+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f6b245c5-7421-46c4-a787-8ffb16a882d0/export</id>
    <title>f6b245c5-7421-46c4-a787-8ffb16a882d0</title>
    <updated>2026-09-24T21:49:30.943461+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f6b245c5-7421-46c4-a787-8ffb16a882d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25254", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mw3zhiop3v2e", "content": "CRITICAL Snapdragon flaw: CVE-2026-25254 allows remote code execution via improper SocketIO authorization. No patch yet \u2014 monitor vendor updates. Affects confidentiality, integrity, and availability. https://radar.offseq.com/threat/cve-2026-25254-cwe-285-improper-authorization-in-qualcomm-inc-sna...", "creation_timestamp": "2026-09-22T10:30:28.762637Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f6b245c5-7421-46c4-a787-8ffb16a882d0/export"/>
    <published>2026-09-22T10:30:28.762637+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c9892cd1-d749-4279-8c9e-02838f78082f/export</id>
    <title>c9892cd1-d749-4279-8c9e-02838f78082f</title>
    <updated>2026-09-24T21:49:30.943570+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c9892cd1-d749-4279-8c9e-02838f78082f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25254", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117314225808795424", "content": "Qualcomm Snapdragon devices hit by CRITICAL CVE-2026-25254: improper authorization in SocketIO allows unauthenticated RCE. No patch yet; monitor advisories and review exposure. CVSS 9.8. https://radar.offseq.com/threat/cve-2026-25254-cwe-285-improper-authorization-in-qualcomm-inc-snapdragon-b8f8f52a617468af #OffSeq #CVE202625254 #Snapdragon #Infosec #Vuln", "creation_timestamp": "2026-09-22T10:30:26.415519Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c9892cd1-d749-4279-8c9e-02838f78082f/export"/>
    <published>2026-09-22T10:30:26.415519+00:00</published>
  </entry>
</feed>
