<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-15T11:29:53.000078+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/27245f3b-dec5-44b1-b021-5f9bd1150661/export</id>
    <title>27245f3b-dec5-44b1-b021-5f9bd1150661</title>
    <updated>2026-06-15T11:29:53.029384+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "27245f3b-dec5-44b1-b021-5f9bd1150661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41904", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbwrjfhau2r", "content": "\ud83d\udfe0 CVE-2026-41904 - High (7.6)\n\nFreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to versi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41904/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-07T19:21:18.405503Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/27245f3b-dec5-44b1-b021-5f9bd1150661/export"/>
    <published>2026-05-07T19:21:18.405503+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4fec82db-0f99-456e-aa82-eddde3fa880b/export</id>
    <title>4fec82db-0f99-456e-aa82-eddde3fa880b</title>
    <updated>2026-06-15T11:29:53.029303+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4fec82db-0f99-456e-aa82-eddde3fa880b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41905", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbwrqtmyh2q", "content": "\ud83d\udfe0 CVE-2026-41905 - High (7.7)\n\nFreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to versi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41905/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-07T19:21:22.050899Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4fec82db-0f99-456e-aa82-eddde3fa880b/export"/>
    <published>2026-05-07T19:21:22.050899+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7e5212d5-ed35-45d5-b41a-01fd099f347a/export</id>
    <title>7e5212d5-ed35-45d5-b41a-01fd099f347a</title>
    <updated>2026-06-15T11:29:53.029227+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7e5212d5-ed35-45d5-b41a-01fd099f347a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41902", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbywo2erm2c", "content": "\ud83d\udd34 CVE-2026-41902 - Critical (9.1)\n\nFreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to versi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41902/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-07T19:59:54.944969Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7e5212d5-ed35-45d5-b41a-01fd099f347a/export"/>
    <published>2026-05-07T19:59:54.944969+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6c76d0a0-8a26-4fe7-b789-1f33efc39f29/export</id>
    <title>6c76d0a0-8a26-4fe7-b789-1f33efc39f29</title>
    <updated>2026-06-15T11:29:53.029142+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6c76d0a0-8a26-4fe7-b789-1f33efc39f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41902", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlccuagnxj2e", "content": "CVE-2026-41902 - FreeScout's user invitation hash never expires: permanent unauthenticated account takeover if invite link leaks\nCVE ID : CVE-2026-41902\n \n Published : May 7, 2026, 7:16 p.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : FreeScout is a free help desk and shared inb...", "creation_timestamp": "2026-05-07T22:57:29.813846Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6c76d0a0-8a26-4fe7-b789-1f33efc39f29/export"/>
    <published>2026-05-07T22:57:29.813846+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4004f74e-3616-49fc-8e42-5d6272d542cc/export</id>
    <title>4004f74e-3616-49fc-8e42-5d6272d542cc</title>
    <updated>2026-06-15T11:29:53.029045+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4004f74e-3616-49fc-8e42-5d6272d542cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41900", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlcvsutqmu2h", "content": "CVE-2026-41900 - OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment\nCVE ID : CVE-2026-41900\n \n Published : May 8, 2026, 3:25 a.m. | 1\u00a0hour ago\n \n Description : OpenLearnX is an open-source, decentralized learning and asse...", "creation_timestamp": "2026-05-08T04:36:45.332345Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4004f74e-3616-49fc-8e42-5d6272d542cc/export"/>
    <published>2026-05-08T04:36:45.332345+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1c6db492-6e8d-4bc1-a2c6-5061f63ac8b8/export</id>
    <title>1c6db492-6e8d-4bc1-a2c6-5061f63ac8b8</title>
    <updated>2026-06-15T11:29:53.028960+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1c6db492-6e8d-4bc1-a2c6-5061f63ac8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41900", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlhqqjukxo2q", "content": "\ud83d\udfe0 CVE-2026-41900 - High (8.8)\n\nOpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41900/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-10T02:49:17.320908Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1c6db492-6e8d-4bc1-a2c6-5061f63ac8b8/export"/>
    <published>2026-05-10T02:49:17.320908+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/234bf336-917b-4e84-be88-cfca086ad9ce/export</id>
    <title>234bf336-917b-4e84-be88-cfca086ad9ce</title>
    <updated>2026-06-15T11:29:53.028865+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "234bf336-917b-4e84-be88-cfca086ad9ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41901", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlp5xdbnw42p", "content": "CVE-2026-41901 - Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions\nCVE ID : CVE-2026-41901\n \n Published : May 12, 2026, 11:16 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : Thymeleaf is a server-side Java template engine for web ...", "creation_timestamp": "2026-05-13T01:34:21.220835Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/234bf336-917b-4e84-be88-cfca086ad9ce/export"/>
    <published>2026-05-13T01:34:21.220835+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7699ec3d-f5bf-48a7-aa8d-d1b4c7a527a6/export</id>
    <title>7699ec3d-f5bf-48a7-aa8d-d1b4c7a527a6</title>
    <updated>2026-06-15T11:29:53.028769+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7699ec3d-f5bf-48a7-aa8d-d1b4c7a527a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41901", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpddjlakx2w", "content": "\ud83d\udd34 CVE-2026-41901 - Critical (9)\n\nThymeleaf is a server-side Java template engine for web and standalone environments. Prior to 3.1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41901/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-13T03:10:40.050994Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7699ec3d-f5bf-48a7-aa8d-d1b4c7a527a6/export"/>
    <published>2026-05-13T03:10:40.050994+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d1d155b4-58ef-4d3c-826f-aa8d64290500/export</id>
    <title>d1d155b4-58ef-4d3c-826f-aa8d64290500</title>
    <updated>2026-06-15T11:29:53.028587+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d1d155b4-58ef-4d3c-826f-aa8d64290500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41907", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mmvxybrjfa2y", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-41907 impacts uuid in 3 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/541\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-05-28T12:01:20.306283Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d1d155b4-58ef-4d3c-826f-aa8d64290500/export"/>
    <published>2026-05-28T12:01:20.306283+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b9e24ff-a876-4073-94ac-168424abc44a/export</id>
    <title>8b9e24ff-a876-4073-94ac-168424abc44a</title>
    <updated>2026-06-15T11:29:53.025596+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b9e24ff-a876-4073-94ac-168424abc44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41900", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmz37lricx22", "content": "\ud83d\udccc CVE-2026-41900 - OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was ... https://www.cyberhub.blog/cves/CVE-2026-41900", "creation_timestamp": "2026-05-29T17:37:06.600647Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b9e24ff-a876-4073-94ac-168424abc44a/export"/>
    <published>2026-05-29T17:37:06.600647+00:00</published>
  </entry>
</feed>
