<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-12T11:08:13.975503+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/67eed910-581b-44a5-83d2-9f5bc08d5440/export</id>
    <title>67eed910-581b-44a5-83d2-9f5bc08d5440</title>
    <updated>2026-09-12T11:08:13.994740+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "67eed910-581b-44a5-83d2-9f5bc08d5440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3hturgru2t", "content": "CVE-2026-48273 - coldfusion 2025\nColdFusion may allow a low\u2011privilege attacker to make the server execute any commands they choose, without needing a victim to click anything. This could give the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-09-09T11:50:04.342481Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/67eed910-581b-44a5-83d2-9f5bc08d5440/export"/>
    <published>2026-09-09T11:50:04.342481+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d/export</id>
    <title>83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d</title>
    <updated>2026-09-12T11:08:13.997344+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv223t264x2j", "content": "\ud83d\udea8 CVE-2026-48273 \u2014 CVSS 9.9 CRITICAL\n\nColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Inj...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48273\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:18.819080Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d/export"/>
    <published>2026-09-08T22:11:18.819080+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a78beb4c-ff52-4702-a9cf-8914971e0d96/export</id>
    <title>a78beb4c-ff52-4702-a9cf-8914971e0d96</title>
    <updated>2026-09-12T11:08:13.997490+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a78beb4c-ff52-4702-a9cf-8914971e0d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.414544Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a78beb4c-ff52-4702-a9cf-8914971e0d96/export"/>
    <published>2026-08-30T00:00:38.414544+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/167f8a2e-f756-4298-a737-c745a0a1ec48/export</id>
    <title>167f8a2e-f756-4298-a737-c745a0a1ec48</title>
    <updated>2026-09-12T11:08:13.997616+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "167f8a2e-f756-4298-a737-c745a0a1ec48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.656226Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/167f8a2e-f756-4298-a737-c745a0a1ec48/export"/>
    <published>2026-08-29T20:00:05.656226+00:00</published>
  </entry>
</feed>
