<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-15T00:11:25.707197+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/89822a9f-42e8-4b82-b7b2-47ebb43a7dd7/export</id>
    <title>89822a9f-42e8-4b82-b7b2-47ebb43a7dd7</title>
    <updated>2026-06-15T00:11:25.741684+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "89822a9f-42e8-4b82-b7b2-47ebb43a7dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42431", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkrjbo5n4l2v", "content": "\ud83d\udccc CVE-2026-42431 - OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invoke(browser.proxy) that allows mutation of persistent browser profiles. A... https://www.cyberhub.blog/cves/CVE-2026-42431", "creation_timestamp": "2026-05-01T06:37:07.459319Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/89822a9f-42e8-4b82-b7b2-47ebb43a7dd7/export"/>
    <published>2026-05-01T06:37:07.459319+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/623b42da-c9dd-48c5-91bf-97ca5aa31131/export</id>
    <title>623b42da-c9dd-48c5-91bf-97ca5aa31131</title>
    <updated>2026-06-15T00:11:25.741566+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "623b42da-c9dd-48c5-91bf-97ca5aa31131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42434", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gid7yxw2k", "content": "CVE-2026-42434 - OpenClaw 2026.4.5\nCVE ID : CVE-2026-42434\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by ...", "creation_timestamp": "2026-05-05T14:46:26.534054Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/623b42da-c9dd-48c5-91bf-97ca5aa31131/export"/>
    <published>2026-05-05T14:46:26.534054+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4efe09e3-64c5-4e1a-8db2-915b4937d48a/export</id>
    <title>4efe09e3-64c5-4e1a-8db2-915b4937d48a</title>
    <updated>2026-06-15T00:11:25.741451+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4efe09e3-64c5-4e1a-8db2-915b4937d48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42437", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gyxc7zt2h", "content": "CVE-2026-42437 - OpenClaw 2026.4.9\nCVE ID : CVE-2026-42437\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that acce...", "creation_timestamp": "2026-05-05T14:55:45.382729Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4efe09e3-64c5-4e1a-8db2-915b4937d48a/export"/>
    <published>2026-05-05T14:55:45.382729+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d618c25d-63e6-4058-92a9-519da4854de8/export</id>
    <title>d618c25d-63e6-4058-92a9-519da4854de8</title>
    <updated>2026-06-15T00:11:25.741338+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d618c25d-63e6-4058-92a9-519da4854de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4hbvspjn2o", "content": "CVE-2026-42435 - OpenClaw 2026.2.22\nCVE ID : CVE-2026-42435\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection vulnerability allowing attackers to in...", "creation_timestamp": "2026-05-05T15:00:45.312831Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d618c25d-63e6-4058-92a9-519da4854de8/export"/>
    <published>2026-05-05T15:00:45.312831+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/080750da-3005-4dbc-961f-1a6dbf5ee398/export</id>
    <title>080750da-3005-4dbc-961f-1a6dbf5ee398</title>
    <updated>2026-06-15T00:11:25.741225+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "080750da-3005-4dbc-961f-1a6dbf5ee398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4i4rbxlk2c", "content": "CVE-2026-42439 - OpenClaw\nCVE ID : CVE-2026-42439\n \n Published : May 5, 2026, 12:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. A...", "creation_timestamp": "2026-05-05T15:15:46.137834Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/080750da-3005-4dbc-961f-1a6dbf5ee398/export"/>
    <published>2026-05-05T15:15:46.137834+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e5125ead-e935-4ec9-9418-f39aafddb180/export</id>
    <title>e5125ead-e935-4ec9-9418-f39aafddb180</title>
    <updated>2026-06-15T00:11:25.741109+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e5125ead-e935-4ec9-9418-f39aafddb180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42436", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4rchpy2u2e", "content": "\ud83d\udfe0 CVE-2026-42436 - High (7.7)\n\nOpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42436/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T18:00:04.759593Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e5125ead-e935-4ec9-9418-f39aafddb180/export"/>
    <published>2026-05-05T18:00:04.759593+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1d427759-7e0f-444f-afe1-297d529716bb/export</id>
    <title>1d427759-7e0f-444f-afe1-297d529716bb</title>
    <updated>2026-06-15T00:11:25.740995+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1d427759-7e0f-444f-afe1-297d529716bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42437", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4rcoj5ey2k", "content": "\ud83d\udfe0 CVE-2026-42437 - High (7.5)\n\nOpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42437/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T18:00:09.011922Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1d427759-7e0f-444f-afe1-297d529716bb/export"/>
    <published>2026-05-05T18:00:09.011922+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9c0b9d37-9dee-411e-bd53-966244142ce9/export</id>
    <title>9c0b9d37-9dee-411e-bd53-966244142ce9</title>
    <updated>2026-06-15T00:11:25.740880+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9c0b9d37-9dee-411e-bd53-966244142ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42434", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4uwjowjc2z", "content": "\ud83d\udfe0 CVE-2026-42434 - High (8.8)\n\nOpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandb...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42434/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:04:56.441421Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9c0b9d37-9dee-411e-bd53-966244142ce9/export"/>
    <published>2026-05-05T19:04:56.441421+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dc586e34-9fa4-4b3f-8229-0287c990fe9e/export</id>
    <title>dc586e34-9fa4-4b3f-8229-0287c990fe9e</title>
    <updated>2026-06-15T00:11:25.740739+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dc586e34-9fa4-4b3f-8229-0287c990fe9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42435", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4uwr4uxl2k", "content": "\ud83d\udfe0 CVE-2026-42435 - High (8.8)\n\nOpenClaw versions from 2026.2.22 before 2026.4.12 contain an insufficient shell-wrapper detection...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42435/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:05:03.840127Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dc586e34-9fa4-4b3f-8229-0287c990fe9e/export"/>
    <published>2026-05-05T19:05:03.840127+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c75731ab-1468-4cdc-88c2-df840938adad/export</id>
    <title>c75731ab-1468-4cdc-88c2-df840938adad</title>
    <updated>2026-06-15T00:11:25.738891+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c75731ab-1468-4cdc-88c2-df840938adad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42439", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mladoxwkya2y", "content": "\ud83d\udccc CVE-2026-42439 - OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. Attac... https://www.cyberhub.blog/cves/CVE-2026-42439", "creation_timestamp": "2026-05-07T04:07:08.136097Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c75731ab-1468-4cdc-88c2-df840938adad/export"/>
    <published>2026-05-07T04:07:08.136097+00:00</published>
  </entry>
</feed>
