<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-23T00:59:11.896294+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ebb8debc-0c84-4254-80ec-3ceba9a7c5f2/export</id>
    <title>ebb8debc-0c84-4254-80ec-3ceba9a7c5f2</title>
    <updated>2026-06-23T00:59:12.281566+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ebb8debc-0c84-4254-80ec-3ceba9a7c5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49252", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116774537156468830", "content": "deepstream.io &amp;lt;10.0.5 has a CRITICAL Prototype Pollution flaw (CVE-2026-49252, CVSS 9.9). Authenticated users with write access can escalate privileges. Patch to 10.0.5+ ASAP! https://radar.offseq.com/threat/cve-2026-49252-cwe-1321-improperly-controlled-modi-de9b0627d448856f #OffSeq #CVE202649252 #deepstreamio #infosec", "creation_timestamp": "2026-06-19T03:00:31.177480Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ebb8debc-0c84-4254-80ec-3ceba9a7c5f2/export"/>
    <published>2026-06-19T03:00:31.177480+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/33156cbf-1cbf-4d3f-85e2-b7c01ea4e7a3/export</id>
    <title>33156cbf-1cbf-4d3f-85e2-b7c01ea4e7a3</title>
    <updated>2026-06-23T00:59:12.281338+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "33156cbf-1cbf-4d3f-85e2-b7c01ea4e7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49252", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3momdzivs6c26", "content": "Prototype Pollution in deepstream.io (&amp;lt;10.0.5) is CRITICAL (CVSS 9.9). Authenticated users with write rights may escalate privileges. Update to 10.0.5+ immediately. https://radar.offseq.com/threat/cve-2026-49252-cwe-1321-improperly-controlled-modi-de9b0627d448856f #OffSeq #CVE202649252 #Infosec", "creation_timestamp": "2026-06-19T03:00:33.211294Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/33156cbf-1cbf-4d3f-85e2-b7c01ea4e7a3/export"/>
    <published>2026-06-19T03:00:33.211294+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/871625a4-8651-4d6c-b901-f7ee89e02484/export</id>
    <title>871625a4-8651-4d6c-b901-f7ee89e02484</title>
    <updated>2026-06-23T00:59:12.278154+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "871625a4-8651-4d6c-b901-f7ee89e02484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49252", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3momy6xwemq2s", "content": "CVE-2026-49252 - Critical Privilege Escalation in Deepstream. Prototype Pollution bug allows auth'd users with write access to escalate privileges. CVSS 9.9. No patch available yet. Update to 10.0.5 immediately. #CVE #Deepstream #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-49252/", "creation_timestamp": "2026-06-19T09:01:31.240419Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/871625a4-8651-4d6c-b901-f7ee89e02484/export"/>
    <published>2026-06-19T09:01:31.240419+00:00</published>
  </entry>
</feed>
