<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-29T03:18:36.773653+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/13f5e89e-035c-4d14-8055-9fe1146ca5a3/export</id>
    <title>13f5e89e-035c-4d14-8055-9fe1146ca5a3</title>
    <updated>2026-08-29T03:18:36.801748+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "13f5e89e-035c-4d14-8055-9fe1146ca5a3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34234", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfb7b9df-5333-403d-8e19-a8946605d563", "content": "", "creation_timestamp": "2026-06-23T14:03:38.018868Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/13f5e89e-035c-4d14-8055-9fe1146ca5a3/export"/>
    <published>2026-06-23T14:03:38.018868+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/25afb78a-8e32-4656-beb5-f78e472f2fcd/export</id>
    <title>25afb78a-8e32-4656-beb5-f78e472f2fcd</title>
    <updated>2026-08-29T03:18:36.803811+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "25afb78a-8e32-4656-beb5-f78e472f2fcd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34234", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/73ee27e6-525d-4dc2-aaea-7109a6bb1dce", "content": "", "creation_timestamp": "2026-06-19T12:45:12.052896Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/25afb78a-8e32-4656-beb5-f78e472f2fcd/export"/>
    <published>2026-06-19T12:45:12.052896+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1b589848-64e7-484b-8897-d021fba9ce0f/export</id>
    <title>1b589848-64e7-484b-8897-d021fba9ce0f</title>
    <updated>2026-08-29T03:18:36.803994+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1b589848-64e7-484b-8897-d021fba9ce0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34234", "type": "seen", "source": "Telegram/pMlCay6DcCd4oGwvlcEXGPzEDzGR_IQjEW1JkTTl9bAyWVU", "content": "", "creation_timestamp": "2026-06-04T15:00:14.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1b589848-64e7-484b-8897-d021fba9ce0f/export"/>
    <published>2026-06-04T15:00:14+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6333fbf1-d897-48ed-8ea7-8ad9c6ad8389/export</id>
    <title>6333fbf1-d897-48ed-8ea7-8ad9c6ad8389</title>
    <updated>2026-08-29T03:18:36.804128+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6333fbf1-d897-48ed-8ea7-8ad9c6ad8389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34234", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mmb2e2iljc2w", "content": "Fresh CVE alert: CVE-2026-34234 Security Alert: CRITICAL Vulnerability\n\nCVE-2026-34234 CRITICAL alert. Immediate action\u2026\n\nhttps://cyberlensai.com/news/security-alert-cve-2026-34234\n\n#CyberSecurity #AppSec #VulnerabilityManagement", "creation_timestamp": "2026-05-20T04:17:48.951127Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6333fbf1-d897-48ed-8ea7-8ad9c6ad8389/export"/>
    <published>2026-05-20T04:17:48.951127+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f228171f-49de-4368-a20e-b4fa308b5f2f/export</id>
    <title>f228171f-49de-4368-a20e-b4fa308b5f2f</title>
    <updated>2026-08-29T03:18:36.804264+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f228171f-49de-4368-a20e-b4fa308b5f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34234", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116603960318456722", "content": "\u26a0\ufe0f CRITICAL: Ctrlpanel-gg panel &amp;lt;1.2.0 vulnerable to OS command injection (CVE-2026-34234, CVSS 10). Unauthenticated remote code execution possible via installer. Upgrade to v1.2.0 now! https://radar.offseq.com/threat/cve-2026-34234-cwe-78-improper-neutralization-of-s-1cb96be1 #OffSeq #CVE #infosec #PatchNow", "creation_timestamp": "2026-05-20T00:00:42.426058Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f228171f-49de-4368-a20e-b4fa308b5f2f/export"/>
    <published>2026-05-20T00:00:42.426058+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bd3a77d6-7330-4e28-80bb-41645362de33/export</id>
    <title>bd3a77d6-7330-4e28-80bb-41645362de33</title>
    <updated>2026-08-29T03:18:36.804395+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bd3a77d6-7330-4e28-80bb-41645362de33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34234", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmaly5epxg2c", "content": "CRITICAL: Ctrlpanel-gg panel &amp;lt;1.2.0 has OS command injection (CVE-2026-34234, CVSS 10). Unauthenticated RCE possible. Upgrade to v1.2.0 ASAP! https://radar.offseq.com/threat/cve-2026-34234-cwe-78-improper-neutralization-of-s-1cb96be1 #OffSeq #CVE #security", "creation_timestamp": "2026-05-20T00:00:42.404729Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bd3a77d6-7330-4e28-80bb-41645362de33/export"/>
    <published>2026-05-20T00:00:42.404729+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/90ee7880-ab14-4f77-a0a0-20034e91f3a3/export</id>
    <title>90ee7880-ab14-4f77-a0a0-20034e91f3a3</title>
    <updated>2026-08-29T03:18:36.804524+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "90ee7880-ab14-4f77-a0a0-20034e91f3a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34234", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmakfmu6rp2o", "content": "CVE-2026-34234 - CtrlPanel: Unauthenticated RCE using installer script\nCVE ID : CVE-2026-34234\n \n Published : May 19, 2026, 9:03 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the web...", "creation_timestamp": "2026-05-19T23:32:21.923543Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/90ee7880-ab14-4f77-a0a0-20034e91f3a3/export"/>
    <published>2026-05-19T23:32:21.923543+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e30e87ac-5753-485c-a5de-ca125e6ebd4c/export</id>
    <title>e30e87ac-5753-485c-a5de-ca125e6ebd4c</title>
    <updated>2026-08-29T03:18:36.804661+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e30e87ac-5753-485c-a5de-ca125e6ebd4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34234", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmaio2asmi26", "content": "\ud83d\udd34 CVE-2026-34234 - Critical (10)\n\nCtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-34234/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-19T23:01:24.088169Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e30e87ac-5753-485c-a5de-ca125e6ebd4c/export"/>
    <published>2026-05-19T23:01:24.088169+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b92a5d41-707f-40bc-b70b-d43cdeb55ed4/export</id>
    <title>b92a5d41-707f-40bc-b70b-d43cdeb55ed4</title>
    <updated>2026-08-29T03:18:36.804785+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b92a5d41-707f-40bc-b70b-d43cdeb55ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmahrmwo5p2p", "content": "CVE-2026-34233 - CtrlPanel has Missing Authentication Checks in Datatable Admin Endpoints\nCVE ID : CVE-2026-34233\n \n Published : May 19, 2026, 9:16 p.m. | 58\u00a0minutes ago\n \n Description : CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and pri...", "creation_timestamp": "2026-05-19T22:45:23.099757Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b92a5d41-707f-40bc-b70b-d43cdeb55ed4/export"/>
    <published>2026-05-19T22:45:23.099757+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/347273c5-7cc7-4f5c-8b33-575403f00d86/export</id>
    <title>347273c5-7cc7-4f5c-8b33-575403f00d86</title>
    <updated>2026-08-29T03:18:36.804910+00:00</updated>
    <author>
      <name>Alexandre Dulaunoy</name>
      <uri>https://vulnerability.circl.lu/user/adulau</uri>
    </author>
    <content>{"uuid": "347273c5-7cc7-4f5c-8b33-575403f00d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-34238", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90", "content": "", "creation_timestamp": "2026-05-01T15:50:35.105333Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/347273c5-7cc7-4f5c-8b33-575403f00d86/export"/>
    <published>2026-05-01T15:50:35.105333+00:00</published>
  </entry>
</feed>
