<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-26T06:21:53.234056+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0927dbbf-d4c8-449b-83ad-9f209f959067/export</id>
    <title>0927dbbf-d4c8-449b-83ad-9f209f959067</title>
    <updated>2026-08-26T06:21:53.255635+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0927dbbf-d4c8-449b-83ad-9f209f959067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv2iskti32f", "content": "CVE-2026-66897\nLXD's container template feature can be tricked into writing any file on the host machine, even system files that require administrator rights. An attacker who can edit containers or launch a specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:10:04.659540Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0927dbbf-d4c8-449b-83ad-9f209f959067/export"/>
    <published>2026-08-25T05:10:04.659540+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab/export</id>
    <title>dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab</title>
    <updated>2026-08-26T06:21:53.258893+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mttf2eskfm2m", "content": "LXD\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u51e6\u7406\u306b\u304a\u3051\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30b3\u30f3\u30c6\u30ca\u7de8\u96c6\u6a29\u9650\u3092\u6301\u3064\u653b\u6483\u8005\u306a\u3069\u304c\u30db\u30b9\u30c8\u4e0a\u306e\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092root\u6a29\u9650\u3067\u4e0a\u66f8\u304d\u53ef\u80fd\u3002\nCVE-2026-66897 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-08-24T13:13:31.814435Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab/export"/>
    <published>2026-08-24T13:13:31.814435+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/13651b90-39d8-42cc-969a-bf1cb97bcca6/export</id>
    <title>13651b90-39d8-42cc-969a-bf1cb97bcca6</title>
    <updated>2026-08-26T06:21:53.259006+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "13651b90-39d8-42cc-969a-bf1cb97bcca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttbdppb5v2j", "content": "\ud83d\udea8 CVE-2026-66897 \u2014 CVSS 9.9 CRITICAL\n\nA path traversal vulnerability in LXD's instance template processing allows an attacker with container edit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66897\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T12:07:10.247871Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/13651b90-39d8-42cc-969a-bf1cb97bcca6/export"/>
    <published>2026-08-24T12:07:10.247871+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3121193f-78cb-4676-9f78-2413873f38de/export</id>
    <title>3121193f-78cb-4676-9f78-2413873f38de</title>
    <updated>2026-08-26T06:21:53.259086+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3121193f-78cb-4676-9f78-2413873f38de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66897", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtt3wsm2db2f", "content": "CRITICAL vuln in Canonical LXD (CVE-2026-66897, CVSS 9.9) lets users with container edit rights or crafted images overwrite host files as root. Restrict permissions, avoid untrusted images. https://radar.offseq.com/threat/cve-2026-66897-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-dir...", "creation_timestamp": "2026-08-24T10:30:29.273736Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3121193f-78cb-4676-9f78-2413873f38de/export"/>
    <published>2026-08-24T10:30:29.273736+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/495018b1-6fd6-495a-a05a-f7b274635eea/export</id>
    <title>495018b1-6fd6-495a-a05a-f7b274635eea</title>
    <updated>2026-08-26T06:21:53.259164+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "495018b1-6fd6-495a-a05a-f7b274635eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66897", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117150018844317018", "content": "CVE-2026-66897: Canonical LXD CRITICAL path traversal (CVSS 9.9). Attackers with container edit rights or crafted images can overwrite host files as root. Restrict permissions &amp;amp; avoid untrusted images. Patch status unknown. https://radar.offseq.com/threat/cve-2026-66897-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-b6ae23dfc47f5562 #OffSeq #LXD #CVE #Linux", "creation_timestamp": "2026-08-24T10:30:26.907417Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/495018b1-6fd6-495a-a05a-f7b274635eea/export"/>
    <published>2026-08-24T10:30:26.907417+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7b3cb980-9e7b-49ca-aced-d84c0d126b74/export</id>
    <title>7b3cb980-9e7b-49ca-aced-d84c0d126b74</title>
    <updated>2026-08-26T06:21:53.259238+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7b3cb980-9e7b-49ca-aced-d84c0d126b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtszokro2q2f", "content": "CVE-2026-66897 - lxd\nLXD\u2019s template feature can be tricked into writing any file on the underlying server, even system files that require administrator rights. An attacker who can edit containers or launch a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxd #canonical #CVE #infosec", "creation_timestamp": "2026-08-24T09:50:04.413724Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7b3cb980-9e7b-49ca-aced-d84c0d126b74/export"/>
    <published>2026-08-24T09:50:04.413724+00:00</published>
  </entry>
</feed>
