<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-29T13:03:30.754041+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3533c01a-e9c5-40fb-b611-334d03ca54d6/export</id>
    <title>3533c01a-e9c5-40fb-b611-334d03ca54d6</title>
    <updated>2026-08-29T13:03:30.781967+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3533c01a-e9c5-40fb-b611-334d03ca54d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtq4fkfeyy24", "content": "\ud83d\udd34 CVE-2026-48753 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48753/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T06:00:44.349692Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3533c01a-e9c5-40fb-b611-334d03ca54d6/export"/>
    <published>2026-08-23T06:00:44.349692+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d088ee5b-9fa0-494a-9da5-2866348d82f2/export</id>
    <title>d088ee5b-9fa0-494a-9da5-2866348d82f2</title>
    <updated>2026-08-29T13:03:30.783506+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d088ee5b-9fa0-494a-9da5-2866348d82f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmhl5cg6q2b", "content": "CVE-2026-48753 - incus\nIncus's S3-compatible upload feature lets attackers trick the system into creating files in any location by using specially crafted path names. This could let a malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian14 #CVE #infosec", "creation_timestamp": "2026-08-21T19:10:04.678529Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d088ee5b-9fa0-494a-9da5-2866348d82f2/export"/>
    <published>2026-08-21T19:10:04.678529+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/96e18788-487f-44cb-9291-49caa0867470/export</id>
    <title>96e18788-487f-44cb-9291-49caa0867470</title>
    <updated>2026-08-29T13:03:30.783644+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "96e18788-487f-44cb-9291-49caa0867470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5g5r24o2u", "content": "\ud83d\udea8 CVE-2026-48753 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload end...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48753\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:18.771903Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/96e18788-487f-44cb-9291-49caa0867470/export"/>
    <published>2026-08-21T16:08:18.771903+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bfec68ea-a887-40e6-8090-b4e5157f7a23/export</id>
    <title>bfec68ea-a887-40e6-8090-b4e5157f7a23</title>
    <updated>2026-08-29T13:03:30.783757+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bfec68ea-a887-40e6-8090-b4e5157f7a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48753", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3hxgxr2u24", "content": "CVE-2026-48753 - lxc\nA vulnerability in Incus's S3 protocol upload endpoint allows attackers to create arbitrary files on the host, potentially leading to unauthorized command execution. This affects Incus users\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:46:06.232807Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bfec68ea-a887-40e6-8090-b4e5157f7a23/export"/>
    <published>2026-07-07T20:46:06.232807+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a9caf275-e7e0-425f-9236-f165d1f79021/export</id>
    <title>a9caf275-e7e0-425f-9236-f165d1f79021</title>
    <updated>2026-08-29T13:03:30.783866+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "a9caf275-e7e0-425f-9236-f165d1f79021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48753", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-ccjc-4qc3-jxqc", "content": "", "creation_timestamp": "2026-06-26T20:35:17.852086Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a9caf275-e7e0-425f-9236-f165d1f79021/export"/>
    <published>2026-06-26T20:35:17.852086+00:00</published>
  </entry>
</feed>
