<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-05T20:27:28.425049+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4c03c1a0-bb80-4273-8e4e-1d0957159509/export</id>
    <title>4c03c1a0-bb80-4273-8e4e-1d0957159509</title>
    <updated>2026-06-05T20:27:28.756682+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4c03c1a0-bb80-4273-8e4e-1d0957159509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49196", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmyh6rpkeo2i", "content": "CVE-2026-49196 - Predator Connect W6x: Web Interface Command Injection\nCVE ID : CVE-2026-49196\n \n Published : May 29, 2026, 9:16 a.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and executi...", "creation_timestamp": "2026-05-29T11:38:44.376606Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4c03c1a0-bb80-4273-8e4e-1d0957159509/export"/>
    <published>2026-05-29T11:38:44.376606+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3f84fe66-0f4e-405f-839d-0976a65a4dad/export</id>
    <title>3f84fe66-0f4e-405f-839d-0976a65a4dad</title>
    <updated>2026-06-05T20:27:28.756464+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3f84fe66-0f4e-405f-839d-0976a65a4dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49199", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmyheqtu2j2i", "content": "CVE-2026-49199 - Predator Connect W6x: RCE via MQTT\nCVE ID : CVE-2026-49199\n \n Published : May 29, 2026, 9:16 a.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.\n \n Sev...", "creation_timestamp": "2026-05-29T11:42:05.895523Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3f84fe66-0f4e-405f-839d-0976a65a4dad/export"/>
    <published>2026-05-29T11:42:05.895523+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e471c243-49a5-4ab7-a8f2-65479706d685/export</id>
    <title>e471c243-49a5-4ab7-a8f2-65479706d685</title>
    <updated>2026-06-05T20:27:28.756230+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e471c243-49a5-4ab7-a8f2-65479706d685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmyhlin4q322", "content": "CVE-2026-49197 - Predator Connect W6x: Improper Authentication\nCVE ID : CVE-2026-49197\n \n Published : May 29, 2026, 9:16 a.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to...", "creation_timestamp": "2026-05-29T11:45:51.311069Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e471c243-49a5-4ab7-a8f2-65479706d685/export"/>
    <published>2026-05-29T11:45:51.311069+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4f64efc9-851d-40c3-8f49-f916c01c2315/export</id>
    <title>4f64efc9-851d-40c3-8f49-f916c01c2315</title>
    <updated>2026-06-05T20:27:28.755940+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4f64efc9-851d-40c3-8f49-f916c01c2315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmyht6ixjo2w", "content": "CVE-2026-49195 - Predator Connect W6x: unauthenticated Debug Service\nCVE ID : CVE-2026-49195\n \n Published : May 29, 2026, 9:16 a.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Unauthenticated Debug Service. The /sbin/mtk_dut binary is exposed on TCP port 9000 without authenticat...", "creation_timestamp": "2026-05-29T11:50:08.907408Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4f64efc9-851d-40c3-8f49-f916c01c2315/export"/>
    <published>2026-05-29T11:50:08.907408+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/44d43d0c-40bb-4444-ae37-33ee9d644dfb/export</id>
    <title>44d43d0c-40bb-4444-ae37-33ee9d644dfb</title>
    <updated>2026-06-05T20:27:28.753316+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "44d43d0c-40bb-4444-ae37-33ee9d644dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49198", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmyj7xvhmi2d", "content": "CVE-2026-49198 - Predator Connect W6x: MQTT Broker Access Control\nCVE ID : CVE-2026-49198\n \n Published : May 29, 2026, 9:16 a.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic ...", "creation_timestamp": "2026-05-29T12:15:11.850984Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/44d43d0c-40bb-4444-ae37-33ee9d644dfb/export"/>
    <published>2026-05-29T12:15:11.850984+00:00</published>
  </entry>
</feed>
