<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-26T12:33:37.209258+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ad864285-f281-4fc6-a5d3-0ff1affdaf4b/export</id>
    <title>ad864285-f281-4fc6-a5d3-0ff1affdaf4b</title>
    <updated>2026-08-26T12:33:37.262112+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ad864285-f281-4fc6-a5d3-0ff1affdaf4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtplp35oxs27", "content": "\ud83d\udd34 CVE-2026-48755 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, improper validat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48755/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T01:01:50.418219Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ad864285-f281-4fc6-a5d3-0ff1affdaf4b/export"/>
    <published>2026-08-23T01:01:50.418219+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ea0c70b2-7370-441b-9f2b-2def5373e7fd/export</id>
    <title>ea0c70b2-7370-441b-9f2b-2def5373e7fd</title>
    <updated>2026-08-26T12:33:37.264363+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ea0c70b2-7370-441b-9f2b-2def5373e7fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmhl5x54b2p", "content": "CVE-2026-48755 - incus\nIncus lets users pick a program to compress backup data, but it only verifies the first word of the command. Extra options are not checked, so an attacker can add commands that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:10:05.560949Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ea0c70b2-7370-441b-9f2b-2def5373e7fd/export"/>
    <published>2026-08-21T19:10:05.560949+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2488fa29-cd29-457b-90d8-b70f90fbf761/export</id>
    <title>2488fa29-cd29-457b-90d8-b70f90fbf761</title>
    <updated>2026-08-26T12:33:37.264503+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2488fa29-cd29-457b-90d8-b70f90fbf761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5ghbkm72p", "content": "\ud83d\udea8 CVE-2026-48755 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of use...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48755\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:28.785438Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2488fa29-cd29-457b-90d8-b70f90fbf761/export"/>
    <published>2026-08-21T16:08:28.785438+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/be45442b-6493-45a3-adb4-e38a6136ab27/export</id>
    <title>be45442b-6493-45a3-adb4-e38a6136ab27</title>
    <updated>2026-08-26T12:33:37.264637+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "be45442b-6493-45a3-adb4-e38a6136ab27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3i2y5ikn2f", "content": "CVE-2026-48755 - lxc\nA vulnerability in Incus's backup compression feature allows attackers to write arbitrary files on the host, potentially leading to unauthorized access. This issue affects Incus's backup\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:48:04.654382Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/be45442b-6493-45a3-adb4-e38a6136ab27/export"/>
    <published>2026-07-07T20:48:04.654382+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a41c4457-9f13-4a6b-994e-4bbcceadaf09/export</id>
    <title>a41c4457-9f13-4a6b-994e-4bbcceadaf09</title>
    <updated>2026-08-26T12:33:37.264740+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a41c4457-9f13-4a6b-994e-4bbcceadaf09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpkhz3v4sb2v", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Potatosecurity #Infosec", "creation_timestamp": "2026-07-01T02:31:46.109687Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a41c4457-9f13-4a6b-994e-4bbcceadaf09/export"/>
    <published>2026-07-01T02:31:46.109687+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08e7f51d-1199-4f3d-89db-ab1e4ba7d8d7/export</id>
    <title>08e7f51d-1199-4f3d-89db-ab1e4ba7d8d7</title>
    <updated>2026-08-26T12:33:37.264838+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08e7f51d-1199-4f3d-89db-ab1e4ba7d8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48755", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpkh3n7jjr2b", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Cybersecurity #Infosec", "creation_timestamp": "2026-07-01T02:15:18.051473Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08e7f51d-1199-4f3d-89db-ab1e4ba7d8d7/export"/>
    <published>2026-07-01T02:15:18.051473+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0ef73466-4cb5-4219-a249-31e7566de1a2/export</id>
    <title>0ef73466-4cb5-4219-a249-31e7566de1a2</title>
    <updated>2026-08-26T12:33:37.264938+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "0ef73466-4cb5-4219-a249-31e7566de1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48755", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-v6mj-8pf4-hhw4", "content": "", "creation_timestamp": "2026-06-26T20:35:12.796820Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0ef73466-4cb5-4219-a249-31e7566de1a2/export"/>
    <published>2026-06-26T20:35:12.796820+00:00</published>
  </entry>
</feed>
