<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-15T12:42:14.609168+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f853c9ce-e6a8-47d6-a5e9-a444d8fd65cf/export</id>
    <title>f853c9ce-e6a8-47d6-a5e9-a444d8fd65cf</title>
    <updated>2026-06-15T12:42:15.014441+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f853c9ce-e6a8-47d6-a5e9-a444d8fd65cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41914", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkrhlzzy6h2y", "content": "\ud83d\udccc CVE-2026-41914 - OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in QQ Bot media download paths that bypass SSRF protection. Attackers ca... https://www.cyberhub.blog/cves/CVE-2026-41914", "creation_timestamp": "2026-05-01T06:07:07.943203Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f853c9ce-e6a8-47d6-a5e9-a444d8fd65cf/export"/>
    <published>2026-05-01T06:07:07.943203+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/13ffee3a-9736-456b-96d8-77f2488c50b5/export</id>
    <title>13ffee3a-9736-456b-96d8-77f2488c50b5</title>
    <updated>2026-06-15T12:42:15.014353+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "13ffee3a-9736-456b-96d8-77f2488c50b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41919", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7wrnouyr24", "content": "CVE-2026-41919: Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction", "creation_timestamp": "2026-05-19T17:41:29.855142Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/13ffee3a-9736-456b-96d8-77f2488c50b5/export"/>
    <published>2026-05-19T17:41:29.855142+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8985150f-c2d6-4c02-a1a6-b81fe2f59ebf/export</id>
    <title>8985150f-c2d6-4c02-a1a6-b81fe2f59ebf</title>
    <updated>2026-06-15T12:42:15.014246+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8985150f-c2d6-4c02-a1a6-b81fe2f59ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41917", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrb7ezuu62i", "content": "CVE-2026-41917 - OpenKM 6.3.12 Local File Inclusion via Admin Scripting\nCVE ID : CVE-2026-41917\n \n Published : May 26, 2026, 2:08 p.m. | 23\u00a0minutes ago\n \n Description : OpenKM 6.3.12 contains a local file inclusion vulnerability in the administrative scripting interface at /ad...", "creation_timestamp": "2026-05-26T15:03:06.611872Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8985150f-c2d6-4c02-a1a6-b81fe2f59ebf/export"/>
    <published>2026-05-26T15:03:06.611872+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/80f5c02c-480a-433f-947e-74660f111fef/export</id>
    <title>80f5c02c-480a-433f-947e-74660f111fef</title>
    <updated>2026-06-15T12:42:15.011543+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "80f5c02c-480a-433f-947e-74660f111fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41919", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mn5g27u6d32g", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-41919 Apache\u00a0OFBiz\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nApache OFBiz\u306b\u304a\u3051\u308bLDAP\u30af\u30a8\u30ea\u3067\u306e\u7279\u5225\u306a\u8981\u7d20\u306e\u4e0d\u9069\u5207\u306a\u7121\u52b9\u5316\uff08'LDAP\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3'\uff09\u306e\u8106\u5f31\u6027\u3067\u3059\u3002\u3053\u306e\u554f\u984c\u306f\u3001\u30d0\u30fc\u30b8\u30e7\u30f324.09.06\u4ee5\u524d\u306eApache OFBiz\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u307e\u3059\u3002", "creation_timestamp": "2026-05-31T11:01:36.322996Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/80f5c02c-480a-433f-947e-74660f111fef/export"/>
    <published>2026-05-31T11:01:36.322996+00:00</published>
  </entry>
</feed>
