<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-25T03:58:44.375538+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8d11f918-1bd2-4a62-9630-81582e295b1d/export</id>
    <title>8d11f918-1bd2-4a62-9630-81582e295b1d</title>
    <updated>2026-08-25T03:58:44.393203+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8d11f918-1bd2-4a62-9630-81582e295b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtplpbks7x2l", "content": "\ud83d\udd34 CVE-2026-48769 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary fil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48769/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T01:01:56.973592Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8d11f918-1bd2-4a62-9630-81582e295b1d/export"/>
    <published>2026-08-23T01:01:56.973592+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fbf05b51-2178-46e6-9350-8507a51acb6d/export</id>
    <title>fbf05b51-2178-46e6-9350-8507a51acb6d</title>
    <updated>2026-08-25T03:58:44.395102+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fbf05b51-2178-46e6-9350-8507a51acb6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmi4zenv523", "content": "CVE-2026-48769 - incus\nIf an Incus server pulls an image from an untrusted source, a malicious image server can send special instructions that cause Incus to create a file anywhere on the host,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:20:04.051047Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fbf05b51-2178-46e6-9350-8507a51acb6d/export"/>
    <published>2026-08-21T19:20:04.051047+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7d50579e-bdda-4f03-ad09-3a21eba51799/export</id>
    <title>7d50579e-bdda-4f03-ad09-3a21eba51799</title>
    <updated>2026-08-25T03:58:44.395314+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7d50579e-bdda-4f03-ad09-3a21eba51799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5grpgfv25", "content": "\ud83d\udea8 CVE-2026-48769 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write ex...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48769\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:39.766600Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7d50579e-bdda-4f03-ad09-3a21eba51799/export"/>
    <published>2026-08-21T16:08:39.766600+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cb8f9bef-0d49-45b8-a94a-c42c990a549f/export</id>
    <title>cb8f9bef-0d49-45b8-a94a-c42c990a549f</title>
    <updated>2026-08-25T03:58:44.395500+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cb8f9bef-0d49-45b8-a94a-c42c990a549f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3hxfqm532z", "content": "CVE-2026-48769 - lxc\nA malicious image server can write files to any location on the Incus server, potentially allowing an attacker to execute commands as root. This is due to a weakness in how Incus handles\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxc #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T20:46:05.231883Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cb8f9bef-0d49-45b8-a94a-c42c990a549f/export"/>
    <published>2026-07-07T20:46:05.231883+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/50737862-d356-4204-89e4-a38e3ae7af2b/export</id>
    <title>50737862-d356-4204-89e4-a38e3ae7af2b</title>
    <updated>2026-08-25T03:58:44.395670+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "50737862-d356-4204-89e4-a38e3ae7af2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpkhz3v4sb2v", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Potatosecurity #Infosec", "creation_timestamp": "2026-07-01T02:31:46.064315Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/50737862-d356-4204-89e4-a38e3ae7af2b/export"/>
    <published>2026-07-01T02:31:46.064315+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d270cb48-fedc-4ebf-9fb5-d388ada09c50/export</id>
    <title>d270cb48-fedc-4ebf-9fb5-d388ada09c50</title>
    <updated>2026-08-25T03:58:44.395834+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d270cb48-fedc-4ebf-9fb5-d388ada09c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48769", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpkh3n7jjr2b", "content": "Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.\n\n#Incus #LinuxContainers #ContainerSecurity #CVE #Cybersecurity #Infosec", "creation_timestamp": "2026-07-01T02:15:18.004238Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d270cb48-fedc-4ebf-9fb5-d388ada09c50/export"/>
    <published>2026-07-01T02:15:18.004238+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/34a4c33e-5162-4e8e-8893-b695b604eb84/export</id>
    <title>34a4c33e-5162-4e8e-8893-b695b604eb84</title>
    <updated>2026-08-25T03:58:44.395990+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "34a4c33e-5162-4e8e-8893-b695b604eb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48769", "type": "published-proof-of-concept", "source": "https://github.com/lxc/incus/security/advisories/GHSA-f6m5-xw2g-xc4x", "content": "", "creation_timestamp": "2026-06-26T20:35:07.965046Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/34a4c33e-5162-4e8e-8893-b695b604eb84/export"/>
    <published>2026-06-26T20:35:07.965046+00:00</published>
  </entry>
</feed>
