<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T16:51:26.141333+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/14c45881-c95c-4ed4-a46e-8a369945e28b/export</id>
    <title>14c45881-c95c-4ed4-a46e-8a369945e28b</title>
    <updated>2026-09-14T16:51:26.185730+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "14c45881-c95c-4ed4-a46e-8a369945e28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244981206462808", "content": "CVE-2026-52774: YesWiki &amp;lt; 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-10T05:00:47.317104Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/14c45881-c95c-4ed4-a46e-8a369945e28b/export"/>
    <published>2026-09-10T05:00:47.317104+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9fdd3531-88a1-45ff-871d-f1a913804ed4/export</id>
    <title>9fdd3531-88a1-45ff-871d-f1a913804ed4</title>
    <updated>2026-09-14T16:51:26.189304+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9fdd3531-88a1-45ff-871d-f1a913804ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv5bgoodor2x", "content": "CVE-2026-52774: YesWiki &amp;lt; 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-10T05:00:38.754863Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9fdd3531-88a1-45ff-871d-f1a913804ed4/export"/>
    <published>2026-09-10T05:00:38.754863+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ab77321d-0926-4b8f-b9c5-6708d55c92bf/export</id>
    <title>ab77321d-0926-4b8f-b9c5-6708d55c92bf</title>
    <updated>2026-09-14T16:51:26.189555+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ab77321d-0926-4b8f-b9c5-6708d55c92bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-07T01:00:24.589351Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ab77321d-0926-4b8f-b9c5-6708d55c92bf/export"/>
    <published>2026-09-07T01:00:24.589351+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/83e32526-ad26-46fd-8097-0fbfc856d1a0/export</id>
    <title>83e32526-ad26-46fd-8097-0fbfc856d1a0</title>
    <updated>2026-09-14T16:51:26.189657+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "83e32526-ad26-46fd-8097-0fbfc856d1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-06T08:00:06.254054Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/83e32526-ad26-46fd-8097-0fbfc856d1a0/export"/>
    <published>2026-09-06T08:00:06.254054+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc/export</id>
    <title>c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc</title>
    <updated>2026-09-14T16:51:26.189752+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52774-YESWIKI-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTerror\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 17:22:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na reflected XSS vulnerability in YesWiki's Bazar widget handler.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:37.542696Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc/export"/>
    <published>2026-09-06T00:00:37.542696+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bd304a8f-ec5b-48a2-bacd-39d72d2567e8/export</id>
    <title>bd304a8f-ec5b-48a2-bacd-39d72d2567e8</title>
    <updated>2026-09-14T16:51:26.189866+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bd304a8f-ec5b-48a2-bacd-39d72d2567e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://t.me/GithubRedTeam/101272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52774-YESWIKI-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTerror\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 17:22:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na reflected XSS vulnerability in YesWiki's Bazar widget handler.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T19:00:02.857623Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bd304a8f-ec5b-48a2-bacd-39d72d2567e8/export"/>
    <published>2026-09-05T19:00:02.857623+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9a3e6022-8355-43ac-a19a-e8c7e5141cac/export</id>
    <title>9a3e6022-8355-43ac-a19a-e8c7e5141cac</title>
    <updated>2026-09-14T16:51:26.189969+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9a3e6022-8355-43ac-a19a-e8c7e5141cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-17T00:00:07.008586Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9a3e6022-8355-43ac-a19a-e8c7e5141cac/export"/>
    <published>2026-07-17T00:00:07.008586+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b/export</id>
    <title>fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b</title>
    <updated>2026-09-14T16:51:26.190075+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-16T00:00:04.094713Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b/export"/>
    <published>2026-07-16T00:00:04.094713+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d/export</id>
    <title>ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d</title>
    <updated>2026-09-14T16:51:26.190171+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-15T00:00:02.949915Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d/export"/>
    <published>2026-07-15T00:00:02.949915+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/49da3809-18a4-4fcf-b728-7b7bf2cd0fac/export</id>
    <title>49da3809-18a4-4fcf-b728-7b7bf2cd0fac</title>
    <updated>2026-09-14T16:51:26.190262+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "49da3809-18a4-4fcf-b728-7b7bf2cd0fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-14T00:00:06.257782Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/49da3809-18a4-4fcf-b728-7b7bf2cd0fac/export"/>
    <published>2026-07-14T00:00:06.257782+00:00</published>
  </entry>
</feed>
